Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
File: LXjkrg653KxiXZEGzohcW0mAddc.mft (raw, json)
Hash identifier: taoeDJLwyqzapXiN8GQRs+ojtNfuj/1DawUdCRvUSCA=
Subject key identifier: C2:14:5C:49:A4:BF:E4:E4:24:8E:4F:8D:2A:D1:88:B4:82:42:36:A5
Authority key identifier: 2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7
Certificate issuer: /CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7
Certificate serial: 0199FFC759C1BECF802688E96D367D0BAC90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
Manifest number: 45
Signing time: Mon 20 Oct 2025 04:01:18 +0000
Manifest this update: Mon 20 Oct 2025 04:01:18 +0000
Manifest next update: Tue 21 Oct 2025 04:01:18 +0000
Files and hashes: 1: 2sWQgR33TzocGlZC9LAJFvio6pQ.roa (hash: ghm3pG3ll1j938a4CO1Ecgfgj8Ej4t0d/k3Ds22y8nU=)
2: LXjkrg653KxiXZEGzohcW0mAddc.crl (hash: LedAWH5mdf2UENSj3kFKEBda/AqcPeeHzSOoSAVDT7I=)
3: Qvb-9UEybVjJwMJX_TQhzbTyC6A.roa (hash: FQCHFVQrQ1NEC98r6LFXm4gOoSIAgwMQTWazYGx2XGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:59:c1:be:cf:80:26:88:e9:6d:36:7d:0b:ac:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7
Validity
Not Before: Oct 20 04:01:18 2025 GMT
Not After : Oct 21 04:01:18 2025 GMT
Subject: CN=c2145c49a4bfe4e4248e4f8d2ad188b4824236a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:26:91:b5:ec:23:82:29:da:60:d6:a5:11:1e:
3e:17:0a:c8:d2:02:5e:6e:19:11:1e:a9:7f:86:1f:
68:cc:0f:bf:2a:4b:50:36:e2:24:96:2f:d2:21:cc:
95:a8:77:cf:2f:99:17:c3:f0:0e:8a:f9:33:32:f8:
36:e3:79:3b:bc:f1:9d:fe:d0:df:01:c1:c2:8c:57:
55:75:12:30:58:0c:7c:2e:e5:3a:da:10:46:04:bc:
44:c2:85:4e:46:59:53:80:17:6a:7d:2b:f1:f0:80:
36:73:9d:a3:a9:3c:fa:53:23:14:25:f5:30:38:7a:
9c:b9:22:12:f4:4b:9b:17:b8:89:b2:02:69:2f:4f:
dd:26:2b:55:ca:f7:ae:d5:3b:96:0b:16:f7:3e:1d:
4c:97:e1:e7:06:3a:01:da:6c:54:4e:78:a5:45:ac:
17:c4:5c:8d:e8:cc:2d:11:ef:9e:d3:0d:c2:dc:28:
d4:e5:67:00:f4:36:85:81:8f:2b:00:89:92:e9:86:
89:bb:d9:2a:66:99:ac:00:d4:08:30:f1:41:0f:1f:
d8:9c:0d:fd:7a:43:77:c2:b6:71:7e:22:68:8a:19:
e5:7f:b8:18:17:37:61:40:b3:6a:85:d5:df:34:58:
d1:4f:69:8e:9b:31:bd:05:73:25:8d:fa:a5:d5:28:
2a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:14:5C:49:A4:BF:E4:E4:24:8E:4F:8D:2A:D1:88:B4:82:42:36:A5
X509v3 Authority Key Identifier:
keyid:2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fb:bc:f7:9e:cb:29:f4:8f:85:7e:fa:77:7f:a0:63:78:c4:
34:0f:33:b9:f9:38:c6:fa:41:92:16:d9:e1:8d:14:a4:8c:e3:
0b:6a:0f:2b:99:a9:b2:e2:b5:91:0b:13:a0:23:a8:c3:d5:ec:
bb:82:c1:ac:00:d9:2f:04:39:d3:11:5c:8c:8a:69:b7:b6:f6:
9d:07:12:ab:30:4d:2a:0d:fb:60:7f:49:eb:58:bb:99:b0:42:
a3:03:fc:d4:40:ce:34:42:60:cd:75:05:0d:0d:a6:39:8f:67:
d3:5c:b4:5d:7b:00:96:7b:11:9a:ac:15:9f:df:07:1b:51:4a:
1d:d7:d0:43:b4:bd:f8:1b:f5:d6:82:e9:ec:48:50:a8:43:11:
a3:39:2d:9b:19:5f:ae:f1:69:4b:1b:2f:28:a1:c0:c4:b0:32:
c5:3c:a0:00:d1:12:51:66:3f:9e:3b:d4:53:58:aa:1f:89:47:
a5:17:3f:5d:54:06:0a:e2:7b:ea:b6:5f:9d:b3:d3:fc:17:b7:
56:ea:83:8f:9a:f9:b1:c0:2e:b9:22:6a:23:c9:ac:2d:ce:31:
26:12:72:67:48:a0:f5:ef:c4:73:29:eb:83:43:ab:1f:c3:1a:
0b:f7:ae:fe:2c:68:90:e3:16:1e:6f:be:dd:7d:58:c9:47:17:
dd:ea:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:59 2025 by rpki-client