Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json)
Hash identifier: gQQ+9PY4gjxW3upeoXmRRUsTa4NROzm6q8/kxkiG3gE=
Subject key identifier: 34:60:68:3F:51:54:03:54:7C:79:16:CC:A0:C6:3E:AC:1C:AE:E2:D2
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 0198D7A98BA3DF0880CAFC0E484863DD0AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 16:01:09 +0000
Manifest this update: Sat 23 Aug 2025 16:01:09 +0000
Manifest next update: Sun 24 Aug 2025 16:01:09 +0000
Files and hashes: 1: Fs8XEPRvhs2sBrhxNlZzi8XKons.roa (hash: C0hFaordL7p5SUJfrTELAa9KIVrov4I7azhDmZ9FUrw=)
2: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: dpbg+tV5T+ccOomu+RPqaR8FuVfbt5uOq/tNqqS/b6o=)
3: sId5K04MuNzDrV7JjoafXNRATrU.roa (hash: c9K2d3wbOg2QoEGGWWmmlRXcKof1alf7zD4SEHKIWBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:8b:a3:df:08:80:ca:fc:0e:48:48:63:dd:0a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: Aug 23 16:01:09 2025 GMT
Not After : Aug 24 16:01:09 2025 GMT
Subject: CN=3460683f515403547c7916cca0c63eac1caee2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:1a:ac:f6:8b:96:92:19:84:96:78:dc:03:
fe:d4:6e:df:12:73:88:53:ad:5a:f4:78:f6:16:3d:
ce:b0:c8:7c:ea:da:4e:6f:51:62:b1:8d:f2:be:01:
4d:6b:a9:e6:d7:3b:e8:6d:4f:25:ef:90:cd:52:b7:
5d:a9:37:84:61:f8:cf:54:ff:d9:21:3d:2b:10:0a:
74:da:fb:a5:d5:34:8d:c5:63:9a:a6:70:d6:19:9c:
eb:06:50:79:26:41:22:35:80:02:df:21:29:8b:09:
98:e4:05:ab:33:e5:f1:b8:7e:07:7b:d8:f1:51:17:
05:5a:8a:91:2d:d7:f3:a2:3b:b3:c1:02:b9:83:c9:
cf:62:9a:25:2e:3f:61:c2:4b:51:12:13:17:4b:11:
35:7c:bb:93:07:a4:7e:36:12:c7:ce:00:5f:27:b5:
54:af:24:5f:b3:b3:50:92:db:74:c3:74:b3:fe:8a:
c3:07:fd:07:92:a6:26:42:6d:6a:80:32:94:1e:93:
c2:d8:36:c5:af:ba:dd:a5:c2:fb:89:eb:86:74:1e:
bc:8e:c9:0d:cd:43:1e:e6:99:96:45:84:23:4d:8a:
89:e9:13:eb:f5:b6:20:36:02:be:2d:d9:2e:c0:71:
e0:85:7d:23:81:4a:51:5b:a5:e2:bb:06:18:3d:43:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:60:68:3F:51:54:03:54:7C:79:16:CC:A0:C6:3E:AC:1C:AE:E2:D2
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:08:7d:6e:58:48:a8:ca:0c:b0:c1:e8:e9:ba:24:1c:9c:30:
fa:8d:07:3b:dc:a1:53:7d:70:20:0f:47:1f:5a:2d:87:25:ce:
29:34:3b:2c:58:1c:96:a7:96:06:54:8d:68:07:15:63:e4:b8:
48:86:c7:78:31:ba:4e:70:0e:d9:f8:5c:19:74:3d:cd:b0:6f:
a1:ee:b7:fc:93:76:ca:52:d5:e9:b2:84:fb:4a:73:f7:bc:0c:
ca:3d:f3:ef:8a:8d:24:36:7f:6e:ea:32:e0:7e:99:61:ef:07:
e0:7e:e9:2d:66:cf:ee:55:28:8c:d4:fe:78:29:f2:f2:f8:df:
c9:57:4c:e1:ec:c9:c3:fa:c0:17:b7:dc:09:83:21:4f:b8:5f:
39:24:63:04:be:3c:af:22:91:6e:08:1f:46:4e:8e:a9:31:7f:
c0:75:78:28:81:4e:5a:0d:c4:7a:fa:69:3b:a5:05:68:68:36:
32:8b:02:cb:c7:ad:f1:8d:fa:48:3c:bd:aa:34:70:97:6b:05:
71:2b:6e:1d:d9:52:00:cd:eb:81:6a:4e:9c:98:fe:4e:3d:19:
df:b2:ae:d4:20:d8:a1:f8:ef:a6:23:78:35:f0:03:3e:d9:98:
7b:7f:05:52:4c:37:7b:5f:9a:65:80:b0:28:66:1c:07:91:d2:
48:9f:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:53 2025 by rpki-client