Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: usSxdYq0dOIs+etGu+Tm6lCF6IPCchaIRqB315YMNG8=
Subject key identifier: BE:8F:81:54:38:12:5F:76:12:E9:8B:26:69:7C:E2:A9:1B:AF:F4:2C
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 0199FFC79221C6E21349F0233E6931C4F3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 04:01:33 +0000
Manifest this update: Mon 20 Oct 2025 04:01:33 +0000
Manifest next update: Tue 21 Oct 2025 04:01:33 +0000
Files and hashes: 1: GPUtwAKGNzSr8rbND1H2VHmziE4.roa (hash: wN90966l4XV79/BKSCd9OwNn9HsZ4W1mhOHAW0ThFWA=)
2: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: X+a7FColZRPfdvup2Zzsn8OHzO/Fq14Gc3eZq6poclE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:92:21:c6:e2:13:49:f0:23:3e:69:31:c4:f3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Oct 20 04:01:33 2025 GMT
Not After : Oct 21 04:01:33 2025 GMT
Subject: CN=be8f815438125f7612e98b26697ce2a91baff42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:3e:a3:0c:67:c2:9b:eb:47:09:79:b3:8f:
ae:0a:4f:4c:46:ac:ad:38:c6:37:ea:48:70:8c:fc:
db:33:26:55:df:c9:5c:49:11:09:bd:21:55:f2:cf:
cb:ee:e7:bf:6e:3e:17:c1:74:fd:89:c0:75:76:28:
45:d0:e6:bd:0e:4c:d2:76:4d:9d:c9:3a:22:2d:0d:
31:6e:4a:49:14:e4:95:77:42:bd:37:5e:ab:0e:fb:
5b:49:de:9a:db:80:8a:18:d1:ef:3f:3c:4f:63:08:
55:d9:03:29:6b:9a:19:4a:0b:2b:bc:cb:5c:d0:2f:
f6:f5:12:0b:19:3f:72:a0:75:ba:52:38:ac:7e:d7:
f5:4a:e0:66:84:d8:96:89:90:9c:10:03:61:d5:8e:
88:60:34:35:f0:6f:03:92:b5:2b:05:b3:0b:63:6a:
fa:cb:8a:74:c8:8f:89:07:3e:3b:d5:58:ba:0a:b2:
ca:99:19:e2:f6:70:79:34:40:ea:df:f2:3f:96:23:
c0:88:06:c8:76:37:64:8b:e3:e6:3d:25:9d:dd:74:
1d:16:17:4b:7f:e6:01:ac:0d:45:6f:5c:cd:2d:aa:
2c:40:f5:12:9f:7e:53:70:f6:24:4e:5e:9e:9b:1a:
30:5b:0f:cd:f5:31:a7:ce:85:ba:4f:50:8f:d2:b6:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:81:54:38:12:5F:76:12:E9:8B:26:69:7C:E2:A9:1B:AF:F4:2C
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4a:9b:89:a1:fa:20:14:63:a2:bb:da:f7:cb:5d:8e:80:8e:
82:a8:af:e0:5f:f8:01:63:c6:f5:a7:5f:c6:ca:fd:ff:c1:fd:
e6:59:ab:4a:48:83:b3:bf:bd:19:79:1f:ba:42:74:01:4d:e2:
b6:bd:ef:c1:05:69:24:bb:48:3f:47:73:45:64:e5:6f:59:ff:
cf:c2:fe:24:42:86:bb:68:3b:d6:39:8e:71:67:9d:d7:34:03:
79:2b:84:12:6f:f6:c9:5e:42:58:90:1a:1d:a2:55:66:b1:a3:
44:6c:2a:b5:9d:10:99:81:d2:8e:3d:59:94:ba:1a:cd:66:d7:
3c:90:84:30:96:81:ba:e7:67:d1:6a:45:61:d0:4b:9b:da:ca:
3d:05:78:2f:dc:dc:26:92:20:aa:17:f7:0b:e4:bd:95:f5:d0:
1e:54:b3:b3:51:c8:f1:88:2d:15:6f:97:0b:d0:2f:05:d6:93:
17:e4:dc:7a:86:d0:8b:e8:9e:fa:32:4e:3c:2b:8b:f8:8b:6b:
68:db:ff:7e:e5:0c:3a:d7:45:79:72:09:17:9a:26:66:d1:6a:
68:64:0a:f7:63:24:ea:19:9b:01:c6:0a:34:57:0c:99:57:e8:
4f:7e:67:97:6b:4b:c7:0a:82:4f:5f:88:1c:4a:4d:f6:89:d1:
0b:5d:ab:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:20:29 2025 by rpki-client