Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
File: LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft (raw, json)
Hash identifier: 8DES9VqL1HCa9vpl4b94EVViN4+heoj18Xcx0xUuoCM=
Subject key identifier: 40:CE:69:95:11:D9:3A:39:4B:35:63:3D:EA:A2:88:2D:CC:95:31:13
Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
Certificate issuer: /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Certificate serial: 0198D4E031BB0CF49FBEAC3097D43FA7D5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:59 +0000
Manifest this update: Sat 23 Aug 2025 03:01:59 +0000
Manifest next update: Sun 24 Aug 2025 03:01:59 +0000
Files and hashes: 1: J1sR_X7OX5sAAqL6nR2mRajFZCc.roa (hash: JEROqpt8+G0T5t0g0HCpE0svxugQA9UuID00O94SMT0=)
2: LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl (hash: Gj6H7Z4Ia8ccGyNrcJUoHvd3KN3gwGo9OHslu9VQocU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:31:bb:0c:f4:9f:be:ac:30:97:d4:3f:a7:d5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Validity
Not Before: Aug 23 03:01:59 2025 GMT
Not After : Aug 24 03:01:59 2025 GMT
Subject: CN=40ce699511d93a394b35633deaa2882dcc953113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:d7:ca:c6:63:ba:c2:c2:cd:03:b0:1f:24:
9c:e6:bc:a6:b3:cf:58:a7:b9:de:ea:dd:18:4c:4c:
21:b7:30:f0:81:41:33:a4:83:4f:24:16:e9:79:90:
90:ef:04:33:48:59:42:bf:09:f8:44:b1:91:48:0d:
07:f8:35:47:95:7f:b0:34:ad:e0:a5:bc:cf:f2:27:
a2:7a:98:01:11:7e:bc:6b:03:4d:95:44:09:3f:69:
1b:c7:96:8d:e4:88:96:32:0a:87:32:be:0c:82:c2:
3f:f7:82:4f:a4:62:c3:ef:88:e0:1e:44:ec:fc:93:
e8:9d:f8:00:92:6a:81:d0:4d:0a:b3:03:87:5f:a5:
67:6c:db:8a:29:db:02:a0:94:07:e9:bc:ed:04:34:
cc:0a:8d:88:f1:c3:87:11:e1:f6:86:fa:99:59:a8:
82:67:93:89:12:61:fc:42:72:c3:a2:97:93:00:93:
08:23:a3:c2:42:99:b7:e6:be:9a:b4:66:1b:d2:00:
37:cf:1b:09:95:de:bb:32:af:52:15:9b:98:77:f2:
ee:ff:ff:78:e8:39:03:3d:1b:92:36:bf:7b:84:37:
ff:cd:40:b8:10:7f:d6:de:2b:15:0a:a6:90:a2:6e:
51:a9:9f:23:c1:90:a4:c0:3a:17:22:ef:19:fe:08:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CE:69:95:11:D9:3A:39:4B:35:63:3D:EA:A2:88:2D:CC:95:31:13
X509v3 Authority Key Identifier:
keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:67:ca:a8:39:2c:34:0e:e2:c7:87:de:5b:90:90:8a:9e:d1:
1b:6c:12:eb:a8:d2:90:18:63:10:0c:f0:28:7e:5b:2b:24:65:
96:19:ea:e3:e6:9a:b2:67:b0:e5:c7:cd:d9:1e:2a:bb:65:22:
3c:bd:8b:d7:cb:66:36:5b:ee:30:a7:da:59:e9:0f:12:73:a8:
15:d0:e9:59:39:b9:d3:c4:59:2d:28:da:52:26:c1:5c:30:28:
17:89:39:08:c9:94:3c:36:de:e5:c1:d5:d6:72:0b:43:80:7a:
a4:4b:67:7f:b8:1c:76:13:7a:e9:a7:b5:70:55:6f:d1:6d:38:
98:78:64:1b:20:60:26:83:58:d9:c6:e0:e5:72:0e:2a:0d:e2:
f8:ce:9a:17:21:23:38:71:85:72:c1:a4:ae:7a:63:31:7e:9c:
25:3d:38:81:53:79:fc:98:2b:d3:94:c8:3a:e6:4a:85:70:f1:
57:c3:73:a4:ae:08:8b:77:c7:8b:3b:0f:c6:80:35:0b:95:da:
e1:1d:b3:9d:18:0d:3e:33:dc:58:f7:5d:1e:8d:7a:78:b9:cf:
df:95:bf:d5:78:f2:b5:8a:75:5d:20:a4:89:2d:8a:3d:c6:35:
77:1b:cd:66:9f:0d:88:0a:7c:10:3c:3b:e2:9d:57:26:2b:b3:
c7:67:86:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4DG7DPSfvqwwl9Q/p9X/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMWJkNzQ5MDc0ZjZmOTc3MjY1YTFkMDZjM2IxZDkzYjFk
MzU4Y2QwHhcNMjUwODIzMDMwMTU5WhcNMjUwODI0MDMwMTU5WjAzMTEwLwYDVQQD
Eyg0MGNlNjk5NTExZDkzYTM5NGIzNTYzM2RlYWEyODgyZGNjOTUzMTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i7XysZjusLCzQOwHySc5ryms89Y
p7ne6t0YTEwhtzDwgUEzpINPJBbpeZCQ7wQzSFlCvwn4RLGRSA0H+DVHlX+wNK3g
pbzP8ieiepgBEX68awNNlUQJP2kbx5aN5IiWMgqHMr4MgsI/94JPpGLD74jgHkTs
/JPonfgAkmqB0E0KswOHX6VnbNuKKdsCoJQH6bztBDTMCo2I8cOHEeH2hvqZWaiC
Z5OJEmH8QnLDopeTAJMII6PCQpm35r6atGYb0gA3zxsJld67Mq9SFZuYd/Lu//94
6DkDPRuSNr97hDf/zUC4EH/W3isVCqaQom5RqZ8jwZCkwDoXIu8Z/ghDhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDOaZUR2To5SzVjPeqiiC3MlTETMB8GA1UdIwQY
MBaAFC8b10kHT2+XcmWh0Gw7HZOx01jNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHh2WFNRZFBiNWR5WmFIUWJEc2RrN0hUV00wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80NmIxNTUtOGY0My00ZGYyLThiODEt
NWZhMjg3ZDU0NWU4LzEvTHh2WFNRZFBiNWR5WmFIUWJEc2RrN0hUV00wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy80NmIxNTUtOGY0My00ZGYyLThiODEtNWZhMjg3ZDU0NWU4
LzEvTHh2WFNRZFBiNWR5WmFIUWJEc2RrN0hUV00wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWfKqDks
NA7ix4feW5CQip7RG2wS66jSkBhjEAzwKH5bKyRllhnq4+aasmew5cfN2R4qu2Ui
PL2L18tmNlvuMKfaWekPEnOoFdDpWTm508RZLSjaUibBXDAoF4k5CMmUPDbe5cHV
1nILQ4B6pEtnf7gcdhN66ae1cFVv0W04mHhkGyBgJoNY2cbg5XIOKg3i+M6aFyEj
OHGFcsGkrnpjMX6cJT04gVN5/Jgr05TIOuZKhXDxV8NzpK4Ii3fHizsPxoA1C5Xa
4R2znRgNPjPcWPddHo16eLnP35W/1XjytYp1XSCkiS2KPcY1dxvNZp8NiAp8EDw7
4p1XJiuzx2eGCw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:46 2025 by rpki-client