
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: 9d0HLZZvb/zPj7vMVOPbLRoVxTX23RtkEKoZio/C5lw=
Subject key identifier: 42:04:3D:8D:D4:91:82:6D:06:1D:8A:09:FD:D0:2A:FF:88:08:50:BF
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 0199FD6B10B4A83C74FD27C8DB6C6C595BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 17:01:16 +0000
Manifest this update: Sun 19 Oct 2025 17:01:16 +0000
Manifest next update: Mon 20 Oct 2025 17:01:16 +0000
Files and hashes: 1: LgyeVhb60AJRIPJ13YatbxO4AsM.roa (hash: +B/MY539hDGa2yzYS0WxkYZEnocpiOn/GpdxMJUzr84=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: ysp3r1oqoCyWArjTEYfuhK1dY+/9yBXxo7cWF9Qkop0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:10:b4:a8:3c:74:fd:27:c8:db:6c:6c:59:5b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Oct 19 17:01:16 2025 GMT
Not After : Oct 20 17:01:16 2025 GMT
Subject: CN=42043d8dd491826d061d8a09fdd02aff880850bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:d1:cb:44:38:30:1c:60:aa:9a:49:58:61:
45:8b:e7:e2:c4:8a:98:60:d5:22:c0:0d:d1:13:f3:
b0:d3:ee:2f:86:86:7c:92:b6:55:04:de:28:41:39:
32:93:c0:1d:ac:96:a1:ba:d3:04:49:0b:af:96:dc:
86:cb:05:84:37:b9:1e:fd:22:3f:51:10:43:ed:06:
cb:d8:35:df:36:b3:d2:aa:36:ed:2a:9b:3c:9b:a0:
30:f7:e3:d6:67:eb:06:13:91:5e:50:75:f9:97:9a:
c0:b1:7a:73:ce:a7:50:d6:f6:4a:04:a8:c6:f8:1b:
3d:3d:81:2f:63:96:6d:79:18:3c:8c:0e:52:3e:9d:
d4:52:1e:8b:bc:8d:df:94:fe:8f:34:1c:17:cc:d3:
a9:32:bd:1a:bb:86:09:74:bd:76:4a:29:b0:6d:a3:
cc:f6:2d:ae:83:92:2b:0d:4d:0a:34:0b:85:b8:f1:
e2:fa:fa:0c:f3:bd:4a:4b:d3:9c:6b:01:38:22:e1:
8a:6a:f8:5a:a4:cc:7b:e1:d7:36:ba:7b:4f:83:14:
5d:32:b2:e8:59:89:b7:89:87:51:ca:1e:7c:25:f8:
56:1a:96:13:34:48:92:3b:2c:25:85:6e:24:9b:05:
d2:15:11:11:6c:68:00:22:a9:f3:92:30:93:03:4a:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:04:3D:8D:D4:91:82:6D:06:1D:8A:09:FD:D0:2A:FF:88:08:50:BF
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bb:d0:84:19:cf:49:65:2f:54:b1:a4:67:f8:ea:ae:37:b3:
ea:b9:75:51:06:ab:4b:8d:91:08:59:d6:86:be:dd:7c:2d:ce:
ce:70:d4:55:a7:2c:3c:12:1c:42:be:7f:37:e6:07:fc:e8:0a:
6a:27:88:06:08:f7:ab:92:96:43:b5:bd:9d:13:cd:45:92:91:
f3:fd:5b:7e:dc:42:04:85:00:d2:67:6f:07:e9:45:ed:df:fc:
43:0d:3a:84:03:b5:45:26:73:6d:09:07:07:30:03:0b:dd:b4:
55:08:42:f8:f4:28:a7:96:b9:d0:e3:e0:eb:c2:53:01:c1:4f:
03:7e:9a:d5:2d:fd:73:78:a7:9c:79:f7:89:f6:c3:02:b2:99:
b2:19:9b:bf:4a:3a:19:48:0c:f3:68:f0:88:1c:b5:f2:c6:8b:
ba:11:42:98:81:f1:fd:06:90:11:4b:f5:53:27:8a:a1:ea:a1:
7d:16:5d:81:b9:8f:1e:75:5c:da:ba:63:f4:ee:5d:d5:0f:26:
ac:ab:3f:78:6a:69:ce:22:b6:fd:c9:66:ae:05:a6:a3:ff:74:
f7:44:72:7c:be:0f:18:b1:68:aa:7d:fc:e7:29:b6:a5:cf:05:
ac:f8:8d:57:36:05:18:6a:69:e5:09:42:26:10:96:50:ab:fe:
f3:30:08:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:08:06 2025 by rpki-client