Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: S902Krwp4DwcclJXZSEhm3rhb9JAj4rRkqze79eRZB0=
Subject key identifier: 13:3E:CF:44:68:46:5B:9C:69:D9:DC:AB:1A:E0:49:7D:AF:B8:66:CD
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 0199FC58945BE0A92F0EE191E62A695DE87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:27 +0000
Manifest this update: Sun 19 Oct 2025 12:01:27 +0000
Manifest next update: Mon 20 Oct 2025 12:01:27 +0000
Files and hashes: 1: 6wuoxtQ9bA6opmTkPy5nyUw0MFc.roa (hash: yaei0hfQngE+ZuEYmOizBFXF772vW3jT8cVqsppYXew=)
2: Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa (hash: YJd5NF7BnIFbCJZm98sSNpBsaL371EEDxMPWmL/C3GQ=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: ZsKWR3U6IiUi8Mxm7IhvNtMII6opHKmUT9qrJbC+TfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:94:5b:e0:a9:2f:0e:e1:91:e6:2a:69:5d:e8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Oct 19 12:01:27 2025 GMT
Not After : Oct 20 12:01:27 2025 GMT
Subject: CN=133ecf4468465b9c69d9dcab1ae0497dafb866cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8f:75:d6:9c:d3:8b:1c:05:23:45:7b:4f:f5:
1e:ab:0e:e7:96:ad:4e:22:c3:53:70:78:0e:f4:e9:
93:70:79:4b:87:a4:e0:4a:c3:e2:a8:c8:d5:b5:ef:
ee:8a:e8:10:e6:92:98:9c:d8:bc:8f:c1:3a:79:18:
c9:6f:c5:91:11:e6:da:ff:0d:f5:78:b6:c5:ba:da:
18:f3:76:77:11:75:1d:91:fc:07:f3:ab:7a:c6:ef:
53:e7:4c:31:37:7c:d9:2f:4b:d4:b8:a7:60:2a:75:
9e:65:29:4c:aa:3f:23:8d:ba:08:f2:67:1e:63:aa:
69:a1:29:d0:0d:1b:22:b4:7b:f9:bb:7f:d4:24:a0:
3e:f7:9f:42:3c:02:3b:cd:28:30:82:ed:73:2b:7c:
3d:4c:43:f1:1a:04:15:2d:2b:04:d3:7c:24:46:27:
cf:f0:51:ef:55:2b:d6:eb:1d:ae:b7:87:55:1b:47:
10:1d:a8:91:1a:40:38:d9:72:e0:78:67:ee:ff:f8:
0a:18:9c:d1:02:79:3c:2d:d5:0a:c4:1f:b2:14:76:
08:47:1f:26:60:4c:29:7b:50:2c:5a:a2:94:6f:11:
ad:47:80:ef:5c:eb:16:bf:27:d5:d9:a6:2b:06:42:
42:0b:67:b2:5c:c4:f8:09:37:82:24:53:2a:92:2e:
f0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3E:CF:44:68:46:5B:9C:69:D9:DC:AB:1A:E0:49:7D:AF:B8:66:CD
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:42:23:65:c7:6c:b1:58:32:ca:93:3b:36:c1:ff:44:46:b5:
4e:8f:55:c1:8d:30:5d:ba:a0:28:0e:64:ac:f9:35:e5:8d:b7:
b9:e6:84:c4:9a:55:c9:a1:a7:03:48:c0:93:59:ce:9c:92:27:
e3:15:3b:f6:49:ef:c0:a6:16:28:93:21:0b:0b:63:ec:68:c2:
08:64:12:84:ad:92:e7:b3:39:c9:c3:98:f0:cd:1f:1b:53:de:
5f:5b:cc:9c:09:dd:a6:2b:eb:26:b4:1b:97:3e:eb:7b:a0:8d:
37:00:f5:e6:f3:32:94:08:8e:51:8c:6f:7d:18:21:bf:1a:b6:
47:08:2a:37:25:14:0c:e0:0b:90:5f:8a:ed:1e:88:b9:ee:ee:
56:11:ae:71:eb:9d:b1:b9:05:e0:b4:5b:cd:2a:95:c9:02:86:
62:ec:96:a2:61:7f:03:f5:58:72:71:8c:a9:b9:0c:c9:45:04:
a0:7f:8a:83:eb:7b:27:75:9a:68:3f:fb:ae:f4:68:f5:44:a4:
7c:13:31:78:3d:90:1d:ca:c7:83:b0:66:c2:65:ef:05:61:61:
eb:8d:24:56:fc:51:21:a9:69:98:6a:30:73:2e:cf:47:84:b0:
8a:a1:31:3c:4c:c2:69:c8:04:59:87:3d:86:ec:d1:d0:96:5c:
59:95:75:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:07 2025 by rpki-client