Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json)
Hash identifier: 5ukAnPo+tG64VtZaD/6XBWE76ZGZ+/qvliQyCRDX68E=
Subject key identifier: D7:1C:57:45:8F:EA:05:6D:8C:DF:90:49:36:E5:E0:18:FB:19:C9:12
Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Certificate serial: 0198D697F7B8635C02965B4F14F2A2DD96DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:20 +0000
Manifest this update: Sat 23 Aug 2025 11:02:20 +0000
Manifest next update: Sun 24 Aug 2025 11:02:20 +0000
Files and hashes: 1: UADfQRfiU0qMqkC7bWaFEbHeHdA.roa (hash: WP9x47zoRlAi5Co+JqhZvWC2k3pFeOAzkBoA6TCx0aU=)
2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: +ByuM5Gu384cvaKTWf3+qvP/kd9pAqrJLFZKMNhxiNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f7:b8:63:5c:02:96:5b:4f:14:f2:a2:dd:96:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Validity
Not Before: Aug 23 11:02:20 2025 GMT
Not After : Aug 24 11:02:20 2025 GMT
Subject: CN=d71c57458fea056d8cdf904936e5e018fb19c912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:79:19:f0:75:b6:76:cc:47:6e:7d:07:ca:
e0:00:bf:76:14:ad:32:33:28:ee:de:de:9a:37:c9:
65:6b:7d:31:20:26:dc:88:7f:fd:dc:33:f0:7f:3a:
3a:f8:11:9a:96:76:1d:39:0a:cd:3e:b9:6d:d1:37:
7b:f0:5b:04:48:8a:34:cd:95:64:39:d1:11:2c:6c:
51:46:06:f0:20:83:e4:7c:de:1e:e3:db:c6:f8:31:
b7:30:ef:69:ad:ab:84:14:52:b8:21:b4:9d:1f:e0:
6a:a9:8e:c1:26:6c:51:a0:82:54:47:17:a3:42:51:
78:31:99:d4:63:3a:db:1f:80:cb:19:44:64:05:34:
67:0c:23:15:c7:ee:11:86:a0:87:4d:ea:20:12:5c:
28:a6:e0:c3:56:d0:43:71:25:48:02:17:a6:bd:b7:
9c:46:48:7c:51:d1:98:7d:4d:6f:cf:9c:5c:84:a4:
43:ad:4b:f5:16:0c:5e:55:2c:e3:45:b1:1d:5d:f6:
3f:c2:fd:d5:57:f1:79:44:a9:1c:79:37:1f:ed:d8:
c5:ba:2e:81:70:55:a3:3f:de:5b:89:3b:13:8f:05:
28:2f:1d:0a:61:be:0e:bf:23:99:09:38:a8:eb:18:
ba:55:3c:dd:f7:eb:ed:c1:18:10:a4:32:bd:ac:09:
70:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1C:57:45:8F:EA:05:6D:8C:DF:90:49:36:E5:E0:18:FB:19:C9:12
X509v3 Authority Key Identifier:
keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:77:f6:16:a8:94:1c:fe:49:f5:f0:24:08:97:b7:16:31:48:
09:4b:6a:99:b9:2f:0e:50:c4:b7:bf:89:c4:7a:78:95:5e:21:
8b:b7:c3:18:f7:24:f0:34:4f:f1:c2:6f:8a:98:94:f2:b5:45:
08:84:60:27:53:97:6e:c3:82:05:dc:8d:65:a1:89:09:a3:b2:
95:0c:20:17:00:4c:c2:da:e1:97:be:b8:58:29:f9:4a:8b:3d:
b9:dc:8e:23:31:4b:d6:a8:81:aa:09:05:69:f7:e1:b7:47:09:
30:20:2d:93:05:1f:41:a6:ee:76:ab:86:50:30:0b:bd:e5:e1:
79:60:c8:a6:b2:75:a1:fc:15:e8:3f:0f:42:7f:91:1c:6c:5b:
52:13:9d:6b:47:95:87:88:d8:02:77:0d:34:55:35:ec:73:e9:
f8:df:4d:ed:06:98:2e:e4:49:6e:da:b8:02:f8:15:59:ac:b0:
84:a7:0f:a7:6b:a3:2c:dd:bd:3b:d9:ca:b0:39:c2:12:8a:ff:
7d:94:6e:d4:bc:b2:6c:34:ac:05:0e:11:90:28:05:e1:49:78:
18:eb:a2:4d:0d:0d:7b:4c:0b:59:f3:82:98:6c:53:e0:d5:35:
f6:fd:a0:b3:e9:06:05:c2:4c:ad:0d:99:c3:54:2a:ed:56:54:
6b:14:69:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWl/e4Y1wClltPFPKi3ZbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTAyYzY5M2FmM2EwOTBmOGY5NGJhMWZkMDgyZGIwOTI0
ZWFmMTIwHhcNMjUwODIzMTEwMjIwWhcNMjUwODI0MTEwMjIwWjAzMTEwLwYDVQQD
EyhkNzFjNTc0NThmZWEwNTZkOGNkZjkwNDkzNmU1ZTAxOGZiMTljOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbp5GfB1tnbMR259B8rgAL92FK0y
Myju3t6aN8lla30xICbciH/93DPwfzo6+BGalnYdOQrNPrlt0Td78FsESIo0zZVk
OdERLGxRRgbwIIPkfN4e49vG+DG3MO9prauEFFK4IbSdH+BqqY7BJmxRoIJURxej
QlF4MZnUYzrbH4DLGURkBTRnDCMVx+4RhqCHTeogElwopuDDVtBDcSVIAhemvbec
Rkh8UdGYfU1vz5xchKRDrUv1FgxeVSzjRbEdXfY/wv3VV/F5RKkceTcf7djFui6B
cFWjP95biTsTjwUoLx0KYb4OvyOZCTio6xi6VTzd9+vtwRgQpDK9rAlwdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNccV0WP6gVtjN+QSTbl4Bj7GckSMB8GA1UdIwQY
MBaAFJcQLGk686CQ+PlLof0ILbCSTq8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQt
ZjUzZWY1MjFkYmUwLzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQtZjUzZWY1MjFkYmUw
LzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvXf2FqiU
HP5J9fAkCJe3FjFICUtqmbkvDlDEt7+JxHp4lV4hi7fDGPck8DRP8cJvipiU8rVF
CIRgJ1OXbsOCBdyNZaGJCaOylQwgFwBMwtrhl764WCn5Sos9udyOIzFL1qiBqgkF
affht0cJMCAtkwUfQabudquGUDALveXheWDIprJ1ofwV6D8PQn+RHGxbUhOda0eV
h4jYAncNNFU17HPp+N9N7QaYLuRJbtq4AvgVWaywhKcPp2ujLN29O9nKsDnCEor/
fZRu1LyybDSsBQ4RkCgF4Ul4GOuiTQ0Ne0wLWfOCmGxT4NU19v2gs+kGBcJMrQ2Z
w1Qq7VZUaxRpbw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:04:22 2025 by rpki-client