Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: mNJc2q13R2ylGMEnybuH9SySOnKSnK1tudRT4jfyvgQ=
Subject key identifier: 87:97:47:06:B8:E3:61:36:AE:82:A7:B9:66:44:A2:A3:C2:56:EE:41
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 0199FC8F2DE246B33B91A89BF1D616628DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: Ai3_NgCb2mwvHHHWVo7OjI6Wj04.roa (hash: mxmvKEH6k3H+fHWxr8AaesSD9p5zVNhT7qFX1XU+vIQ=)
2: EZLjMnt3YY1uGOfZ3nimgNl-yLU.roa (hash: Ko07ZGo7IwS8NL/yJPyHpJ9m0iW9ngaJs3DqWmHrpi0=)
3: RIQPOEjptB8udCiUyrk1eA7kGsQ.roa (hash: iUSixJ9qOvizzSlye8GPbxagX4TAp65dTuqFovVtZ00=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: atw+bUQqUudRQYgr7b2QHQ2gH/uqpik86VXC9JQifCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2d:e2:46:b3:3b:91:a8:9b:f1:d6:16:62:8d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=87974706b8e36136ae82a7b96644a2a3c256ee41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:06:aa:6c:9f:07:26:5c:e9:4c:25:bf:e9:
3e:b8:23:08:18:3e:af:9c:c5:7d:59:66:cb:d4:a9:
02:4f:e6:16:42:48:e2:ab:d6:a2:9a:ad:49:f6:2b:
ad:b6:54:72:67:57:6a:05:1e:57:f4:f9:62:1b:be:
7c:44:41:b3:d6:1c:02:60:eb:eb:b5:a0:13:35:9d:
cf:00:68:d2:be:d6:36:4c:97:e0:58:68:51:fc:63:
4a:82:88:de:bc:68:6f:02:5b:39:a1:cb:fd:97:c4:
3e:79:c4:f0:2d:45:94:d5:a0:d9:5a:8f:9d:5c:d3:
c1:18:1c:cb:cb:82:a9:c8:ee:ee:dd:39:6a:25:6a:
77:28:14:3d:a8:f0:c2:71:d1:f8:b0:9d:26:72:1b:
30:5e:fd:3b:1c:01:90:b4:8d:66:32:a7:d1:0c:18:
c3:fe:94:10:a7:c1:31:b3:a8:4e:f5:32:fb:58:18:
31:07:45:15:41:69:c4:8a:da:db:3c:6f:c3:d0:3d:
7c:62:71:e1:91:f2:0e:dd:e4:0e:13:9c:0e:e6:84:
26:8c:fd:8f:9b:7b:08:b1:a0:16:a8:d3:84:f6:d1:
e8:41:b8:70:bb:34:26:1b:9c:5b:a2:55:0d:1f:06:
fb:3f:11:71:65:24:1b:1a:70:01:69:ba:31:b5:3b:
b2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:97:47:06:B8:E3:61:36:AE:82:A7:B9:66:44:A2:A3:C2:56:EE:41
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:29:62:b4:f7:00:ba:7d:ae:ad:d2:5c:7d:24:93:8c:91:2b:
a7:e2:51:9b:01:e3:8a:d3:e8:41:38:17:3e:ed:e7:95:f4:a8:
85:68:b6:9b:14:75:e5:52:fd:95:cd:ce:36:57:30:de:88:3b:
d3:bf:7c:89:60:89:b5:ea:e0:9d:33:10:b6:e5:c6:3e:36:3b:
8d:65:6f:d5:de:9a:84:c4:a4:94:c5:d3:6d:77:8f:f2:7a:e4:
b7:1e:78:d1:d0:23:6a:b8:aa:50:e0:4a:30:a0:1f:52:84:cc:
17:44:d4:22:ac:53:67:e7:e3:bb:51:c2:1e:27:51:c1:e7:3d:
88:d9:f8:59:a5:29:30:fb:f0:db:78:c5:87:b5:88:ba:06:1c:
3c:ce:e5:7a:d4:bf:c0:ee:98:6a:13:c2:3b:d0:24:02:bc:0a:
6b:dc:a5:f6:6c:5d:83:c1:c0:8d:d1:05:c6:82:f6:53:4e:39:
50:b5:42:95:5f:76:7f:09:ae:37:da:60:3a:f7:dd:e4:67:de:
be:46:db:68:82:62:27:f3:2a:83:5f:15:4a:1f:41:13:92:8d:
94:e5:00:5f:bb:57:b0:0d:c7:1a:a9:df:44:dc:c1:3a:5e:9c:
7b:04:34:32:70:6f:74:28:b4:45:53:24:59:14:55:e6:83:46:
12:68:d5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:25 2025 by rpki-client