Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: N6gacjMRv4+Gkk7nqKzhfsJsRWanV6+LUBJ4uGLdJAE=
Subject key identifier: ED:AF:F8:69:20:DB:EA:60:AC:72:63:60:42:B6:1F:C5:E0:2B:08:9C
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 0197BA0F532E2C77222E1814542E8AD0EB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 05:00:55 +0000
Manifest this update: Sun 29 Jun 2025 05:00:55 +0000
Manifest next update: Mon 30 Jun 2025 05:00:55 +0000
Files and hashes: 1: LgyeVhb60AJRIPJ13YatbxO4AsM.roa (hash: +B/MY539hDGa2yzYS0WxkYZEnocpiOn/GpdxMJUzr84=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: 36G4G9ZiVol5jEV0hvaDWuYx/AoTQeZn5mK6wooekYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:53:2e:2c:77:22:2e:18:14:54:2e:8a:d0:eb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Jun 29 05:00:55 2025 GMT
Not After : Jun 30 05:00:55 2025 GMT
Subject: CN=edaff86920dbea60ac72636042b61fc5e02b089c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:66:12:1d:63:4a:de:bd:dd:9f:f1:80:01:
0b:57:77:0f:85:a0:7e:cd:f5:8c:e1:d1:1e:54:2d:
95:99:2d:20:12:70:c6:e3:99:73:f8:67:e2:38:99:
f9:89:f7:aa:4c:bf:5a:c8:c8:2f:08:d8:c1:dd:7a:
a9:11:d1:41:dd:87:7c:35:bc:0d:e8:7b:5e:fb:d8:
65:8e:f2:8e:81:be:be:06:25:20:da:bd:20:ca:f8:
e4:05:5e:9a:6b:1f:68:48:e1:e3:95:7d:f3:8e:ef:
53:5a:09:59:dd:80:99:ec:7d:5c:7b:a7:52:17:33:
f5:08:68:c4:f4:f6:fa:ab:d5:dd:8a:e6:77:07:c8:
c9:66:2c:1f:7c:48:2c:3a:f8:e1:b7:d5:86:02:58:
07:51:a4:d4:3b:bc:35:dd:78:37:06:03:94:a9:a9:
74:75:49:c3:81:65:b0:0c:a0:c0:17:29:5b:97:a0:
3c:81:23:cb:b5:5a:5c:af:40:af:53:2b:65:2d:79:
1b:e7:df:81:78:be:99:12:af:76:44:5e:8a:02:df:
61:bd:c4:87:73:93:66:d2:83:f3:c3:75:67:9a:80:
aa:25:e6:a8:e1:96:c6:39:5f:55:d3:67:4a:12:18:
5f:6b:16:a3:22:3d:f1:d2:01:df:a1:0d:cb:eb:eb:
90:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AF:F8:69:20:DB:EA:60:AC:72:63:60:42:B6:1F:C5:E0:2B:08:9C
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:be:c2:b4:bc:26:b9:72:04:bd:fd:98:4f:d3:0b:2d:3e:80:
26:20:e5:07:2b:3c:02:56:ec:87:2a:53:9e:5b:34:ec:eb:3b:
ea:7c:1e:e2:6b:ed:ed:06:0b:8e:27:fe:57:c4:0f:30:7d:3b:
d5:4e:5b:d7:c8:9b:4f:99:fe:7c:d3:f0:f7:d0:30:3c:57:81:
bd:90:fc:24:99:03:bc:cc:2f:3e:23:a6:18:02:a2:98:7f:3b:
a6:a9:a3:52:6f:3c:29:61:61:10:b7:1a:5d:7b:56:6f:9c:79:
ab:c8:5b:2f:86:70:17:4d:6d:3a:c0:36:0a:44:41:d1:f0:bb:
96:16:fc:37:75:69:a2:d4:71:0d:48:82:96:ac:8d:82:9f:24:
e5:dd:cc:26:59:00:94:b6:61:66:c1:36:1b:9b:77:d0:54:4c:
02:fe:82:e2:71:8f:69:b3:a9:6d:9e:87:ba:be:ae:6a:f5:cf:
c5:eb:11:fa:64:58:fd:46:11:61:2d:3c:32:0b:8d:6f:e3:d8:
71:96:23:6c:05:4d:2b:56:cf:76:cf:36:92:e8:93:32:cb:7a:
0f:83:90:e7:20:6b:03:fa:53:e5:60:6d:60:54:f6:cb:b0:6c:
7c:86:ec:82:17:6f:0d:cd:1a:67:20:dd:f3:a1:70:c9:17:41:
31:5f:88:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:05:13 2025 by rpki-client