Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
File: LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json)
Hash identifier: C0iaA9H2duEoqgegItC96heDXsYEbjZZA6KzX5ro0SE=
Subject key identifier: D0:6F:07:BC:19:18:AC:D2:B3:9B:8D:A2:B7:60:C8:11:D6:77:74:AA
Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
Certificate issuer: /CN=2f15d78b256d28459b869b726f23294ab3ff173f
Certificate serial: 0198D65F65223FB2A089E3453BBE982F6E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
Manifest number: 066F
Signing time: Sat 23 Aug 2025 10:00:32 +0000
Manifest this update: Sat 23 Aug 2025 10:00:32 +0000
Manifest next update: Sun 24 Aug 2025 10:00:32 +0000
Files and hashes: 1: GsPXdLp5QJlWkWRdf0s9RY21G1E.roa (hash: nU6YD2kez+ifewp2jdSiMb6xmsln2dG1JjZlNr4WuwQ=)
2: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: GwepbtjDqANXaoHgZSWHa3HMR2WGmLSqRkmljLvvR40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:65:22:3f:b2:a0:89:e3:45:3b:be:98:2f:6e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f
Validity
Not Before: Aug 23 10:00:32 2025 GMT
Not After : Aug 24 10:00:32 2025 GMT
Subject: CN=d06f07bc1918acd2b39b8da2b760c811d67774aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:25:e6:d1:bf:00:fd:e9:7b:ec:55:2b:a7:
29:6f:cd:4a:87:95:28:98:91:31:04:0e:37:a4:98:
23:76:54:ee:3c:a0:2c:29:ea:96:1b:9e:d2:b5:09:
b8:8c:4a:75:a7:f4:6d:4a:34:e0:ad:82:e1:ad:d2:
40:5e:d0:13:03:05:6d:10:63:24:f0:b9:94:df:47:
83:b1:a2:bb:69:3c:31:e4:06:46:67:fd:26:f8:16:
9e:0e:1b:b1:6f:c1:1f:64:65:da:f3:37:2d:56:4a:
90:89:32:80:a5:27:ac:f6:27:b1:21:ba:43:48:44:
7b:88:4a:a3:2c:7e:a9:da:40:5d:bd:32:5d:20:95:
0b:d7:c2:1b:10:98:80:2b:10:ff:48:a4:ed:4d:f0:
55:eb:bb:5b:94:45:c2:de:79:5b:9b:fe:52:38:51:
f0:66:1f:f8:c4:ac:83:d4:c2:0f:14:25:24:6d:78:
8f:3e:54:15:eb:49:3e:1d:3a:05:3a:be:59:af:2f:
b4:8a:b4:d8:1e:50:15:3d:6d:9f:e1:d0:47:31:c5:
0d:8b:44:bf:e1:29:c1:eb:e3:c7:0c:12:b3:8c:5c:
26:50:90:77:d9:fe:5c:a9:0d:58:70:9c:95:80:d8:
71:31:56:4c:74:fd:6e:a2:63:16:11:1a:77:e9:bb:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6F:07:BC:19:18:AC:D2:B3:9B:8D:A2:B7:60:C8:11:D6:77:74:AA
X509v3 Authority Key Identifier:
keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:18:ba:81:1a:ab:2f:96:80:82:68:94:7a:5f:d2:3b:02:ef:
06:77:4b:5e:bf:ff:22:0d:e9:0a:48:57:6a:b8:e7:12:b7:02:
7d:82:72:6a:96:61:9b:dc:95:30:9a:83:d0:fa:06:52:ce:3b:
8f:11:55:0c:6d:33:e9:ea:f8:aa:54:35:1b:63:81:45:45:28:
41:bb:f0:68:0d:c1:5c:09:fa:f0:44:d1:76:fd:15:e9:53:c7:
d9:38:e1:45:57:bc:0e:bb:f0:c2:08:a5:84:f1:68:42:76:e7:
ee:c8:dd:ba:59:f8:7b:45:0f:94:ba:c2:26:b5:aa:32:3a:aa:
a1:8b:33:4d:50:2a:d9:13:cf:22:c7:50:a5:98:e2:fc:d2:ff:
f9:f5:b6:1c:fa:34:74:5b:0b:8a:fa:6b:0a:92:8d:d1:89:9d:
64:a1:e1:b8:9b:01:08:6f:b1:5e:03:13:26:cd:b9:08:8f:cd:
46:32:8c:ab:b5:58:45:fe:04:fe:99:9e:da:b0:e6:18:4c:78:
bf:54:ba:a7:98:c4:a2:7f:a9:1a:b3:f7:66:2c:11:8b:b0:49:
fb:98:b5:fb:9e:2a:a5:62:2d:d7:58:3e:63:2e:be:49:ca:d6:
d9:47:e9:af:24:ae:f5:c1:7e:bf:fd:71:b3:17:49:c2:31:75:
a0:4b:bb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:06:42 2025 by rpki-client