Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
File: LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft (raw, json)
Hash identifier: TmdndzGcM2V05eKfuRCC+1h+r1C6voC/oe0U1rRk36w=
Subject key identifier: CE:C1:23:E3:FE:03:FA:AE:ED:42:E2:36:D0:BE:9E:E3:B1:BA:79:28
Authority key identifier: 2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92
Certificate issuer: /CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692
Certificate serial: 0198D65F386E7127E4BEB8034379FEE57C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
Manifest number: 035E
Signing time: Sat 23 Aug 2025 10:00:21 +0000
Manifest this update: Sat 23 Aug 2025 10:00:21 +0000
Manifest next update: Sun 24 Aug 2025 10:00:21 +0000
Files and hashes: 1: LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl (hash: XPR8Qx+p63ylso9xiLOr1zjNMZaDh3ufV0mSncUsGx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:38:6e:71:27:e4:be:b8:03:43:79:fe:e5:7c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692
Validity
Not Before: Aug 23 10:00:21 2025 GMT
Not After : Aug 24 10:00:21 2025 GMT
Subject: CN=cec123e3fe03faaeed42e236d0be9ee3b1ba7928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:fe:1f:bd:e7:94:ff:ab:b5:24:c0:3b:7b:
64:00:c8:0d:c7:f5:c6:62:1a:e3:bb:f2:af:fb:02:
85:c1:35:ae:ae:80:09:10:06:8a:66:30:3b:4e:48:
3b:8f:7a:3a:5a:96:1b:8f:b8:a6:8a:c5:7b:73:26:
d1:82:8a:fe:7b:2e:19:22:d7:4a:de:4d:44:b1:2a:
2e:f4:02:ac:b7:fd:de:4f:1c:a4:a2:ad:ae:43:e8:
89:d3:57:35:6b:d6:61:5e:fc:02:ae:b6:a6:87:35:
a5:b9:71:7a:42:ea:b3:99:cf:9a:15:89:0a:08:a9:
7f:e3:4d:24:99:f0:f1:59:67:78:3f:c2:4d:82:f9:
68:fe:9d:94:34:b1:49:48:55:9d:4a:9b:93:6d:11:
0c:09:be:6c:8d:aa:c2:f6:2d:96:a2:b4:17:ea:43:
ba:70:72:01:5f:04:00:ff:a7:8b:f5:8e:bd:f7:7c:
56:84:ea:8e:03:27:d8:00:28:f9:45:b7:2d:6c:09:
78:85:21:af:b7:f9:04:cd:b2:a9:d9:ff:4f:6e:30:
48:03:81:4e:13:2a:da:f1:fe:bd:b4:38:e9:4b:5d:
82:04:c8:30:76:90:c3:42:88:74:68:d9:67:f7:ca:
db:8b:02:a4:7a:fe:2c:b7:72:48:db:81:31:97:5c:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C1:23:E3:FE:03:FA:AE:ED:42:E2:36:D0:BE:9E:E3:B1:BA:79:28
X509v3 Authority Key Identifier:
keyid:2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e3:fc:9c:e7:1f:ec:56:5f:16:25:a0:fd:3c:40:f4:8a:99:
4d:7c:eb:ad:69:06:8e:f4:e3:87:12:53:2a:14:da:e5:07:45:
81:ef:69:6c:9a:16:9e:bd:3f:cd:fc:d4:69:22:a1:e9:10:bd:
b0:cd:2e:0c:f6:8a:7d:99:42:95:d1:00:3c:27:69:f0:e5:52:
af:d3:13:da:46:b1:d6:3d:ab:7e:ed:cc:ec:40:0a:72:d1:47:
5e:50:06:7d:bf:38:d7:6a:a3:1c:49:78:42:a8:07:d2:03:ad:
eb:16:68:98:2e:54:60:f9:f9:25:09:95:99:5d:56:d7:37:9a:
df:fd:2b:8d:07:de:05:f5:db:39:66:2f:c1:43:73:f3:47:fb:
94:15:f1:e6:58:ba:59:de:bb:0e:6c:11:72:04:84:30:7e:25:
82:29:bc:a2:50:08:ce:f8:7e:df:a1:e2:e8:9a:0e:67:2d:65:
4a:b5:42:ff:53:9e:af:6f:0f:b7:00:e7:89:74:2b:2e:3b:d5:
01:ee:a5:bc:cf:7f:5b:3e:ab:eb:48:bf:31:e4:55:cf:91:b1:
38:3c:9d:0e:f5:5f:44:84:64:46:68:ad:e0:e1:b1:a0:24:24:
2f:90:01:76:b1:76:6e:07:78:91:6f:cb:cb:90:9d:14:2c:14:
ac:27:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:52:33 2025 by rpki-client