Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: SdU5uVanLliiNgD3n26axzGmo4lzPkc6AheSBfZ52jg=
Subject key identifier: 6F:89:EE:AF:6E:96:83:8B:FD:AB:E1:6D:F5:65:52:10:4F:66:2B:0F
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 0198D515FCD769D90392219166466868E00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 04:00:44 +0000
Manifest this update: Sat 23 Aug 2025 04:00:44 +0000
Manifest next update: Sun 24 Aug 2025 04:00:44 +0000
Files and hashes: 1: Ai3_NgCb2mwvHHHWVo7OjI6Wj04.roa (hash: mxmvKEH6k3H+fHWxr8AaesSD9p5zVNhT7qFX1XU+vIQ=)
2: EZLjMnt3YY1uGOfZ3nimgNl-yLU.roa (hash: Ko07ZGo7IwS8NL/yJPyHpJ9m0iW9ngaJs3DqWmHrpi0=)
3: RIQPOEjptB8udCiUyrk1eA7kGsQ.roa (hash: iUSixJ9qOvizzSlye8GPbxagX4TAp65dTuqFovVtZ00=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: XEcdTOzowMo9RXTWyHHWUtmfX0OYOQEIO5NRjKRiJNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:fc:d7:69:d9:03:92:21:91:66:46:68:68:e0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Aug 23 04:00:44 2025 GMT
Not After : Aug 24 04:00:44 2025 GMT
Subject: CN=6f89eeaf6e96838bfdabe16df56552104f662b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:bb:44:d5:7c:1d:c1:57:43:71:49:5c:5d:
6e:5e:00:4d:15:a8:67:56:3f:3c:9c:8d:ae:44:aa:
75:b2:f3:ef:fc:15:aa:aa:e9:66:54:4a:c6:51:c1:
67:80:32:6f:2c:5f:88:19:ec:8d:89:f2:3a:3a:58:
bd:a8:d6:51:4b:d6:d7:7b:12:c1:81:35:34:e8:e1:
cb:1b:cf:73:7a:60:bc:8b:c8:38:a9:27:b4:dc:35:
d2:e7:ad:aa:3f:28:62:de:64:da:56:44:ca:9b:f6:
63:55:fd:fc:7e:74:51:21:bf:be:f4:e2:63:46:e0:
3a:e3:e9:9c:4a:46:a2:35:93:df:8b:d6:f8:23:51:
1a:66:9a:f6:1e:e7:94:2c:d5:d7:08:15:9f:59:05:
59:be:a3:c7:fb:98:85:16:0a:c2:3d:92:92:b3:24:
76:18:74:52:25:0a:d3:52:0e:0d:e8:54:52:d0:17:
45:5f:4c:38:da:64:0b:de:78:be:37:5c:32:c2:66:
47:35:ba:9d:2f:97:72:8d:91:22:66:2a:27:dc:fb:
99:3c:5e:2c:cf:c8:3b:4a:86:82:f1:30:e4:f3:be:
ac:b5:c8:ea:d8:9e:01:a1:a6:53:ed:f6:38:4e:8b:
3b:40:1d:17:9b:44:0c:79:3f:13:32:02:cf:15:2c:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:89:EE:AF:6E:96:83:8B:FD:AB:E1:6D:F5:65:52:10:4F:66:2B:0F
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:14:46:91:1d:85:46:09:06:4a:03:57:dc:66:3a:b0:bf:c6:
5f:f4:0a:4b:96:9a:f1:86:8f:0f:1a:2e:70:0f:aa:c9:3b:3e:
85:79:d5:8d:97:f4:c3:e3:e1:79:12:a9:3f:3d:52:9e:41:ee:
c5:90:1b:5d:3e:4c:22:98:35:93:c6:1d:a6:27:c1:0a:4f:3b:
26:d4:23:be:5e:00:ed:08:57:f5:9c:52:be:56:d3:8c:dc:f5:
39:09:49:e4:55:d9:b8:78:fe:fb:43:8e:c9:46:40:6b:cd:64:
f3:b9:4f:3c:9a:9d:ef:53:07:88:6f:f9:d4:63:bb:8e:4b:b7:
d6:2d:65:f3:1b:6a:fb:d4:98:6d:85:0c:ca:09:52:52:f8:f2:
74:47:7a:cd:8f:6f:9b:34:73:0d:d3:6e:bd:cc:79:84:c5:1f:
17:d2:2f:b9:17:5e:45:ce:87:e1:f9:ee:88:06:33:63:b9:4f:
d3:0a:e0:f8:1d:de:57:2c:3d:21:39:0a:8a:5c:6c:c3:4e:62:
ac:95:00:d6:96:cf:b1:de:eb:78:02:4b:48:e7:28:71:57:04:
96:60:6a:be:d0:8a:cc:c1:da:10:5f:50:21:70:c1:fb:17:bc:
92:74:4d:ef:3c:7e:f6:12:8a:80:39:69:36:1c:11:56:40:ea:
28:7c:95:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:01 2025 by rpki-client