
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: XWGne0ac/zo7G5OgZ6CymQPO36lporegOAJRCz+QkTo=
Subject key identifier: F3:13:4A:8D:97:06:39:5A:2A:62:6E:28:EF:33:7C:BB:F3:66:E0:41
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 0198D4E05E157FF6DC3CDB95C31E8919AC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:02:10 +0000
Manifest this update: Sat 23 Aug 2025 03:02:10 +0000
Manifest next update: Sun 24 Aug 2025 03:02:10 +0000
Files and hashes: 1: 6wuoxtQ9bA6opmTkPy5nyUw0MFc.roa (hash: yaei0hfQngE+ZuEYmOizBFXF772vW3jT8cVqsppYXew=)
2: Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa (hash: YJd5NF7BnIFbCJZm98sSNpBsaL371EEDxMPWmL/C3GQ=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: Tno/ChcI0l1maZPq5VPrnaV/N5zxpo6neQB1M4P2ukA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5e:15:7f:f6:dc:3c:db:95:c3:1e:89:19:ac:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Aug 23 03:02:10 2025 GMT
Not After : Aug 24 03:02:10 2025 GMT
Subject: CN=f3134a8d9706395a2a626e28ef337cbbf366e041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:16:a4:5b:a1:af:33:32:96:dc:6e:1e:c2:
1f:2f:03:a2:83:55:82:d7:e9:27:71:c8:28:4e:e3:
3f:15:46:1a:bf:a2:f4:5d:7c:65:5f:a8:c0:89:6a:
7a:3b:4a:44:9d:66:08:72:b0:40:be:38:01:9b:e5:
77:32:55:fd:97:a7:53:21:3f:2b:d4:6a:13:f8:d8:
2a:8c:8e:62:35:88:35:05:af:8d:98:aa:74:83:fb:
46:f7:c5:62:65:1c:0b:cd:b1:fd:1c:25:92:8a:e0:
55:b2:bb:6c:7c:5e:d2:29:7b:be:11:fd:09:9f:b0:
b5:19:27:5a:37:18:87:41:ac:6b:20:d2:fe:71:c4:
1b:ce:a6:00:86:18:4c:84:e0:2b:fa:36:26:eb:8e:
96:f8:47:7d:38:90:2a:43:63:2f:ac:f7:80:6f:c6:
d0:f3:06:98:f8:92:32:d2:ca:b1:f3:e0:c1:18:a7:
e7:1b:92:d7:98:78:df:41:31:33:1c:cf:03:b5:25:
13:6e:52:e8:1c:c0:a1:6f:c7:17:19:17:38:be:ee:
90:08:c7:53:35:ff:cf:1a:dd:e6:a3:3f:6a:6c:3f:
8e:f6:92:78:de:04:25:d1:6f:40:aa:77:b4:f4:b0:
5d:7d:14:2c:0d:79:82:2d:12:73:2e:7a:09:53:f2:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:13:4A:8D:97:06:39:5A:2A:62:6E:28:EF:33:7C:BB:F3:66:E0:41
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ec:3e:c9:70:43:c2:12:6c:e4:97:bc:f6:f6:8d:04:95:ee:
74:30:e9:3f:57:37:56:7a:15:2c:9c:68:ea:5e:c4:00:03:a1:
ed:72:3c:0d:0b:5c:4a:13:2e:28:71:59:0b:84:5c:d3:5e:d8:
ba:f6:a4:43:c8:32:c1:61:0c:7b:96:ae:8e:28:5a:24:1c:1b:
ba:0f:cc:e8:9b:97:30:69:9d:54:6c:69:30:29:7a:75:07:7c:
ab:60:f8:b3:90:20:de:8d:62:e2:29:e0:70:b4:c8:e1:60:22:
c3:be:79:7b:43:9c:c5:67:89:e2:7b:de:e8:46:b4:33:64:64:
fb:81:14:40:98:96:af:98:c0:b6:3a:65:a0:f4:8e:e5:fd:13:
68:59:ec:87:0a:23:6f:5c:ed:9e:66:3e:85:02:96:1f:30:90:
da:3e:6d:77:08:76:bf:24:b5:ff:79:a3:4f:a6:da:df:08:be:
a8:15:a4:3d:8a:b6:e8:cf:c1:9f:cd:8b:24:e7:d1:26:1a:a3:
c3:cd:a6:71:2a:b0:11:c6:64:d8:eb:a5:a0:ae:a8:b2:34:0d:
03:0f:43:2e:0e:d5:48:53:95:ca:7c:06:4d:55:46:b8:d6:0f:
69:cf:03:bf:52:2c:70:e3:82:a6:8b:74:02:3d:6c:de:66:bf:
a6:7b:90:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:59 2025 by rpki-client