Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
File: LX893KDLOOx7CMaQKeIPUtxAjxc.mft (raw, json)
Hash identifier: LrC4J9eBWYTo0OUccXAuwb7teAS5ZibBufJfl1xUiYw=
Subject key identifier: 27:61:83:9B:54:8F:86:A3:E1:BB:32:C8:83:C9:3B:DD:AD:4F:83:BB
Authority key identifier: 2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
Certificate issuer: /CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Certificate serial: 0197B7EA5CADA225DE813D009E69552C9D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 19:01:19 +0000
Manifest this update: Sat 28 Jun 2025 19:01:19 +0000
Manifest next update: Sun 29 Jun 2025 19:01:19 +0000
Files and hashes: 1: LX893KDLOOx7CMaQKeIPUtxAjxc.crl (hash: fSoJLzAar/fWHlom2ThvwB8gdLxHbf8pKGh8hd2xLG0=)
2: NJtD_wJPtwe6yI8QzJv-rd_AAv4.roa (hash: goN8mo/tdm+T4x5aP0V4Y6dre6dhF2ryG392gou/4Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5c:ad:a2:25:de:81:3d:00:9e:69:55:2c:9d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Validity
Not Before: Jun 28 19:01:19 2025 GMT
Not After : Jun 29 19:01:19 2025 GMT
Subject: CN=2761839b548f86a3e1bb32c883c93bddad4f83bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:44:01:30:4e:8a:e9:1a:03:36:29:aa:39:88:
4f:d1:9f:21:b8:af:69:cf:81:48:5e:e5:3c:eb:0b:
12:e3:f2:22:72:2b:d6:4a:08:d4:ce:37:2f:d1:9d:
3c:c4:03:4a:29:7f:41:3b:92:66:1d:51:b3:f4:4a:
71:2e:76:71:9d:60:c7:1a:6f:c8:4a:e7:5a:4b:dd:
d8:aa:0e:85:ad:6b:e1:7a:00:38:49:7a:e7:d5:7b:
8c:c3:a6:fb:a8:2f:01:3f:57:44:28:d0:9e:49:b4:
58:98:c9:4c:ee:2f:4a:1b:bc:11:0f:da:ff:49:be:
5c:4a:5e:b2:6f:a5:d0:a6:07:fb:65:c1:d3:c1:bf:
9f:38:d2:2c:c9:48:ce:9d:9f:35:b8:9c:ce:ac:df:
96:6d:16:ab:0b:43:c3:5e:a5:68:d0:51:07:9d:93:
7d:82:1b:b7:c5:43:21:cd:25:a7:09:bd:1b:56:09:
4b:17:fa:ca:08:00:5b:db:cf:22:d0:e2:28:1d:02:
d4:05:ba:46:17:57:18:ef:85:09:99:cf:5d:90:6d:
ca:b5:d7:8d:09:7d:51:d7:3a:95:20:72:d1:70:cd:
29:21:e0:f8:46:d1:c3:5a:ee:6a:69:1d:a9:18:b9:
61:88:7f:80:ae:fb:75:6c:f0:9c:70:c8:78:7f:10:
69:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:61:83:9B:54:8F:86:A3:E1:BB:32:C8:83:C9:3B:DD:AD:4F:83:BB
X509v3 Authority Key Identifier:
keyid:2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:d1:98:cb:3f:a1:e9:3c:12:02:79:92:89:ff:4e:7c:a7:59:
e8:c0:de:4f:81:e5:a6:9e:37:09:bd:4f:b8:49:24:d0:a5:0f:
43:f8:68:4d:9e:0a:4f:ec:59:af:b1:7a:57:6a:84:58:fd:2f:
6b:2a:f5:8d:9c:62:aa:15:60:85:83:5f:b4:e1:42:69:51:eb:
ef:e4:f0:d3:a3:82:f5:af:3e:29:82:ba:69:fd:3b:dc:42:23:
71:06:25:06:ab:2e:7d:61:ab:7d:ec:7c:58:b4:88:1e:0f:13:
0b:9a:71:5b:fa:a3:c7:53:c5:40:d4:7e:7b:fd:a3:df:62:98:
d2:77:b4:bd:de:ea:f2:a8:1d:60:5e:f4:6a:7d:47:8e:7d:ce:
1c:04:61:e8:1c:f4:2c:e0:57:c3:d2:d5:03:ac:dc:7f:0d:d5:
46:cb:e2:5c:af:73:a7:7e:f1:7a:5b:82:78:3f:a7:35:9d:67:
af:3e:18:b0:54:1c:62:ac:96:87:a3:33:2b:77:f1:c2:91:1f:
2f:92:cb:40:18:ac:da:4d:e6:5c:3b:55:22:b0:b6:82:7a:c9:
c3:c3:ad:dd:85:7a:b0:31:f7:ba:b2:8a:a3:d9:b4:1c:26:1e:
cc:f7:0b:b1:ed:d3:e8:49:1a:5e:39:d0:3a:56:2f:29:a3:72:
73:0f:78:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36lytoiXegT0AnmlVLJ0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkN2YzZGRjYTBjYjM4ZWM3YjA4YzY5MDI5ZTIwZjUyZGM0
MDhmMTcwHhcNMjUwNjI4MTkwMTE5WhcNMjUwNjI5MTkwMTE5WjAzMTEwLwYDVQQD
EygyNzYxODM5YjU0OGY4NmEzZTFiYjMyYzg4M2M5M2JkZGFkNGY4M2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EQBME6K6RoDNimqOYhP0Z8huK9p
z4FIXuU86wsS4/IicivWSgjUzjcv0Z08xANKKX9BO5JmHVGz9EpxLnZxnWDHGm/I
SudaS93Yqg6FrWvhegA4SXrn1XuMw6b7qC8BP1dEKNCeSbRYmMlM7i9KG7wRD9r/
Sb5cSl6yb6XQpgf7ZcHTwb+fONIsyUjOnZ81uJzOrN+WbRarC0PDXqVo0FEHnZN9
ghu3xUMhzSWnCb0bVglLF/rKCABb288i0OIoHQLUBbpGF1cY74UJmc9dkG3KtdeN
CX1R1zqVIHLRcM0pIeD4RtHDWu5qaR2pGLlhiH+Arvt1bPCccMh4fxBprwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdhg5tUj4aj4bsyyIPJO92tT4O7MB8GA1UdIwQY
MBaAFC1/PdygyzjsewjGkCniD1LcQI8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFg4OTNLRExPT3g3Q01hUUtlSVBVdHhBanhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jNzVhZjQtOWQyNi00MjkwLWIwMjct
YTU2YzUyYmUxOThjLzEvTFg4OTNLRExPT3g3Q01hUUtlSVBVdHhBanhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jNzVhZjQtOWQyNi00MjkwLWIwMjctYTU2YzUyYmUxOThj
LzEvTFg4OTNLRExPT3g3Q01hUUtlSVBVdHhBanhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwdGYyz+h
6TwSAnmSif9OfKdZ6MDeT4Hlpp43Cb1PuEkk0KUPQ/hoTZ4KT+xZr7F6V2qEWP0v
ayr1jZxiqhVghYNftOFCaVHr7+Tw06OC9a8+KYK6af073EIjcQYlBqsufWGrfex8
WLSIHg8TC5pxW/qjx1PFQNR+e/2j32KY0ne0vd7q8qgdYF70an1Hjn3OHARh6Bz0
LOBXw9LVA6zcfw3VRsviXK9zp37xeluCeD+nNZ1nrz4YsFQcYqyWh6MzK3fxwpEf
L5LLQBis2k3mXDtVIrC2gnrJw8Ot3YV6sDH3urKKo9m0HCYezPcLse3T6EkaXjnQ
OlYvKaNycw94nw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:20 2025 by rpki-client