Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
File: LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft (raw, json)
Hash identifier: ybBNv1AZ11v30Ztteza/Is8QlKIx8rSHvxH7DF9RB44=
Subject key identifier: E3:E3:9E:ED:C1:14:87:AB:51:9C:D6:C3:41:1F:84:9F:48:F3:2B:9A
Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
Certificate issuer: /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Certificate serial: 0197B70E742D59AE531ACB3FD0CD07593999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:07 +0000
Manifest this update: Sat 28 Jun 2025 15:01:07 +0000
Manifest next update: Sun 29 Jun 2025 15:01:07 +0000
Files and hashes: 1: J1sR_X7OX5sAAqL6nR2mRajFZCc.roa (hash: JEROqpt8+G0T5t0g0HCpE0svxugQA9UuID00O94SMT0=)
2: LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl (hash: NFE79UjdijZIz6J54KUzfCtkHF11HCIcm9JIeFzD3fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:74:2d:59:ae:53:1a:cb:3f:d0:cd:07:59:39:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Validity
Not Before: Jun 28 15:01:07 2025 GMT
Not After : Jun 29 15:01:07 2025 GMT
Subject: CN=e3e39eedc11487ab519cd6c3411f849f48f32b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:13:e2:03:e7:62:0c:87:11:33:db:7b:45:50:
05:30:f5:9c:59:64:e5:f3:0c:c9:b1:ea:c6:1e:7c:
55:0b:5e:11:f1:cc:98:dc:32:ba:86:39:a0:5c:7c:
4c:aa:b5:9a:75:b8:e6:4b:3f:a0:f2:1c:66:d9:f4:
31:dd:69:7f:ab:e2:ab:dd:6f:e7:cc:08:e0:59:e7:
60:76:e7:6d:f7:8c:d8:71:e8:ea:d2:b9:60:eb:93:
7b:09:23:5c:7d:79:1c:59:4d:13:b9:23:23:e1:8f:
14:fc:32:bb:f6:8b:80:4b:79:1a:9e:00:4b:17:60:
2d:d7:c5:00:80:7d:56:cd:84:87:bb:c1:c9:78:e1:
cf:80:41:a8:dd:76:98:9b:1d:c7:f4:30:5c:24:9d:
15:23:27:ad:b9:6b:f3:95:3e:dc:e8:ac:a0:1b:a7:
28:fa:3f:9e:1c:81:77:22:33:7a:46:8c:1e:f8:6c:
e8:17:92:1a:2f:2b:1c:ce:02:d6:69:24:19:29:eb:
f5:cc:a7:1c:66:86:e7:32:22:52:7a:fd:32:00:32:
f3:64:0c:68:25:24:d7:aa:75:c9:cb:54:c3:14:01:
05:d1:08:1c:cd:a1:26:35:14:29:46:1d:f0:6c:ea:
50:82:58:a5:d1:d7:dc:ed:6c:24:20:2d:8a:c2:0d:
bd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E3:9E:ED:C1:14:87:AB:51:9C:D6:C3:41:1F:84:9F:48:F3:2B:9A
X509v3 Authority Key Identifier:
keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a8:45:69:b1:79:ee:5c:d2:6d:d1:13:97:a3:3d:c6:d6:b9:
61:62:45:5b:2d:ba:51:fb:38:9c:e4:aa:f0:eb:6e:6f:f4:6f:
8b:c8:5c:25:d7:03:64:8a:56:e6:58:ef:19:92:94:ef:10:b7:
2c:1c:b0:d6:ff:5c:51:0c:c0:cc:ac:8d:f9:61:4e:39:07:3e:
2c:c3:29:1f:ac:fe:9a:2b:50:77:49:92:a6:7a:9e:94:55:b3:
d1:ea:0a:d6:c5:39:a0:83:60:57:bb:b1:cf:c5:df:e3:23:af:
de:e3:b5:ff:8d:13:90:b3:3f:83:fa:31:0c:f8:9b:a2:67:9e:
a5:74:b6:ad:9a:cb:f2:ae:d2:31:d2:ac:7e:13:f7:16:a8:3b:
8f:a9:06:dd:9e:53:a1:52:e1:c1:96:b4:d6:ad:e1:fc:c7:49:
dd:e7:ac:00:64:41:9c:c3:b5:04:58:16:a9:8b:53:fa:f4:67:
f5:21:9a:22:06:86:dc:6a:7b:ba:52:d6:2b:7c:38:bd:03:dc:
86:b9:81:be:11:ae:72:3a:42:5c:9c:37:b5:3c:b4:06:52:a9:
55:aa:9d:24:a8:09:74:8c:72:91:d0:ae:0b:9f:7f:1d:53:e9:
a0:81:78:f9:6c:52:ee:dc:94:66:ff:91:3b:64:a9:c1:f4:56:
8b:fe:3a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:52 2025 by rpki-client