Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json)
Hash identifier: 3Bp/nGNVGnkWRiYdaW8BQSJNn9dRpX89HyQMWKlK7rM=
Subject key identifier: 30:6A:83:DD:2D:34:6E:02:D7:40:0E:0C:F6:F1:96:A8:9D:AF:09:8F
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 0199FF228F756F4CE2436F1F1F0A5C400078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 01:01:18 +0000
Manifest this update: Mon 20 Oct 2025 01:01:18 +0000
Manifest next update: Tue 21 Oct 2025 01:01:18 +0000
Files and hashes: 1: Fs8XEPRvhs2sBrhxNlZzi8XKons.roa (hash: C0hFaordL7p5SUJfrTELAa9KIVrov4I7azhDmZ9FUrw=)
2: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: LyBni+srciG2z+HYPVuehFt/1BfHWkckICWFACc6xRo=)
3: sId5K04MuNzDrV7JjoafXNRATrU.roa (hash: c9K2d3wbOg2QoEGGWWmmlRXcKof1alf7zD4SEHKIWBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:8f:75:6f:4c:e2:43:6f:1f:1f:0a:5c:40:00:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: Oct 20 01:01:18 2025 GMT
Not After : Oct 21 01:01:18 2025 GMT
Subject: CN=306a83dd2d346e02d7400e0cf6f196a89daf098f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:9e:de:7d:1d:e7:1a:f4:1f:2e:3b:01:52:
47:c5:2e:47:e0:99:b9:32:bb:38:72:0e:23:52:15:
87:cb:d1:83:3c:4e:11:3a:ac:e9:10:03:21:b3:d7:
cf:88:7d:6a:ee:b7:29:ee:34:03:79:da:2c:23:c3:
12:c6:e8:e2:9a:3e:a9:c4:d7:b5:3a:63:9f:39:38:
38:f1:90:4a:a6:7d:a2:48:16:b8:77:e5:31:cd:f7:
38:9b:0b:73:91:54:fe:93:62:ae:fe:c6:a3:13:a5:
a7:6b:98:d1:ba:5b:15:8c:3f:62:18:f1:d3:f0:98:
93:94:34:ec:47:ea:91:4a:92:a7:f3:61:af:f3:9d:
c4:49:bc:1c:28:36:32:5a:94:18:6b:6a:c2:32:b8:
9a:86:cb:f7:f7:b0:c0:77:ee:ae:a8:ad:e8:8c:68:
40:f2:90:d2:83:36:df:e1:80:ac:46:0f:41:b8:2a:
9f:ca:48:09:6e:51:79:cb:5b:e4:5d:19:2c:65:a2:
18:a0:ba:ef:1f:ef:63:22:6b:af:10:1e:fb:ce:b6:
be:47:17:3e:a9:d6:2f:b9:4e:fa:f8:07:8f:e0:fe:
17:e5:7b:3c:c1:dd:f7:1d:35:61:bd:05:23:c8:5c:
59:9f:98:cc:e8:9e:e3:dd:e5:8a:ed:99:55:ab:4b:
bb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6A:83:DD:2D:34:6E:02:D7:40:0E:0C:F6:F1:96:A8:9D:AF:09:8F
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f7:4b:5f:ba:7d:38:f0:a1:e3:d4:4a:70:f4:7e:47:08:ae:
43:53:d5:8c:3e:9f:f8:4b:c3:b5:f1:48:f5:c0:ef:3f:1b:9f:
e1:04:42:cc:7e:18:31:4b:a0:c0:1f:7a:b0:f0:59:d6:c9:d8:
96:20:a5:e5:12:53:86:29:6c:0b:b3:79:ff:c6:25:a6:36:64:
fc:91:1e:c9:88:9f:26:f6:29:b3:06:16:1e:b8:3b:e8:f0:01:
aa:72:33:f2:58:ad:1d:e2:77:42:c6:1f:11:d3:d2:ff:3f:f3:
2d:81:40:e4:5a:c9:bc:85:78:d9:e6:f4:c5:34:e7:a0:ca:e2:
fc:24:5f:73:ce:14:53:b3:5d:b7:2f:e9:9b:d9:53:d9:0d:5a:
69:56:46:14:a4:34:47:5c:0b:ac:93:39:43:02:b2:ad:7c:8f:
9e:b1:7c:b2:f9:dc:51:c6:17:6f:e3:31:58:55:61:46:31:a4:
6b:b3:4b:e0:6c:3a:1f:8f:0a:c2:b5:89:e6:c0:3c:90:76:94:
dc:aa:45:64:38:ad:7f:63:4c:dd:b0:2f:2f:14:01:47:8f:08:
0f:82:08:16:2a:14:f0:2e:43:98:81:cc:64:89:c3:a5:d9:e7:
36:7e:11:11:e6:50:a7:b3:19:78:de:0e:c3:21:a7:b3:72:2c:
ea:7e:5f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:22:31 2025 by rpki-client