Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier: rlfwAujD9AKj1hzYqcdDNusxo/eK7HmBZCh+UPXEMTM=
Subject key identifier: CC:80:32:56:16:5F:AA:40:F1:35:32:74:B6:9F:B6:A6:63:1F:07:B3
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 01984709027C6F4783DEB3AD067B9E795AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number: 0FC7
Signing time: Sat 26 Jul 2025 14:00:29 +0000
Manifest this update: Sat 26 Jul 2025 14:00:29 +0000
Manifest next update: Sun 27 Jul 2025 14:00:29 +0000
Files and hashes: 1: 6_d9VSWBVNToOGPNlpWA61QmprM.roa (hash: 57355UO7axP5A8MR5ssS/djmBZAYmcZTAffNl5b7yUY=)
2: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: HTvG9o7MlnTsq3NGnB02dGkzsqAcyhZhXje3IDm4zOM=)
3: h79SEaHwXYiVzt4p0CBMPa0GFjY.roa (hash: LtDXQ1PILY1+EGPsQbs1Ku9N9hF4cubp+4vVwoPrfN4=)
4: uc4NY9XdDoUNm-7G0TF_f0pLIfg.roa (hash: Kdxkp+N3BeWYNrfae94aDnYFKHtejikhtbXsxsmUtiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:02:7c:6f:47:83:de:b3:ad:06:7b:9e:79:5a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Jul 26 14:00:29 2025 GMT
Not After : Jul 27 14:00:29 2025 GMT
Subject: CN=cc803256165faa40f1353274b69fb6a6631f07b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:50:ed:30:50:f0:75:08:f7:c4:23:84:a1:1c:
ee:e2:d8:62:02:87:e3:1a:06:7b:9e:96:eb:ad:1e:
74:c2:ce:6c:a4:26:86:db:4e:ff:fa:90:17:f8:d0:
a9:57:0b:27:f7:4b:25:a9:9d:5c:4b:9b:18:fe:c8:
85:f2:cd:c5:6c:1b:cc:8b:b4:d8:c8:6d:f6:ee:dc:
48:b0:d0:46:66:c3:7b:9f:b4:6b:37:a4:ca:33:d6:
d6:96:24:b3:f2:6e:9a:46:b3:4c:90:b6:3f:98:68:
f6:ee:50:3e:ff:78:51:d2:03:20:b8:b8:5d:f2:06:
ae:a4:78:f6:3a:d0:fa:88:43:e9:f1:c1:db:cc:b9:
a9:16:a3:f3:2d:da:c9:72:58:25:d6:81:ea:77:23:
d3:f3:8f:32:d8:d0:f7:a9:70:89:86:51:cb:3f:00:
34:51:12:c7:72:d2:54:07:f3:8e:21:73:a9:5b:41:
9b:fb:3c:14:0b:9e:3b:f2:5a:cc:f3:18:86:6e:82:
01:75:dc:8b:ac:bc:db:df:b1:4d:d0:3b:d6:bc:fe:
50:38:37:b7:f2:88:2e:7c:76:b3:32:4f:27:9a:47:
40:c3:df:95:5d:a7:93:0a:98:86:34:a2:70:9f:12:
58:22:5f:ae:5d:aa:e5:97:01:30:f9:63:00:65:50:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:80:32:56:16:5F:AA:40:F1:35:32:74:B6:9F:B6:A6:63:1F:07:B3
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0b:f8:04:05:7c:ef:f4:c0:1c:54:20:99:1a:22:65:4d:1a:
49:58:1a:a0:a3:ec:27:2f:f0:e1:27:4d:ad:f2:6a:1b:3e:4f:
c0:35:03:92:43:34:bf:d5:0f:e6:62:85:8c:5b:f3:4c:82:a3:
e0:59:45:f2:ac:d6:02:91:fc:5f:a2:e5:57:97:19:4c:3b:65:
8b:b3:18:18:1e:a5:c2:95:81:6f:8f:4d:5c:52:58:5e:f3:a6:
f6:49:bb:ba:5f:97:65:2b:93:01:91:fa:7b:5b:04:c1:33:5a:
8f:12:4f:75:4d:a1:14:88:7d:3f:bf:6e:cb:ed:0b:82:83:c5:
2d:88:ba:05:7f:59:c1:94:78:be:b9:ce:01:0a:42:1f:aa:f6:
47:b5:33:8d:d6:3d:f9:95:43:7c:aa:6a:1e:79:8f:cd:64:d7:
20:53:72:fe:0d:44:50:49:9c:36:e4:72:39:5e:e6:fc:8b:87:
b0:13:17:87:e5:7c:c1:0e:ad:b5:08:35:15:72:87:12:8d:4c:
ac:87:b8:ba:3a:da:39:a9:05:99:b4:98:d3:88:a6:e5:9f:17:
a4:d6:48:7b:15:12:f6:9b:b8:ab:c6:c7:8f:c1:5e:f8:f6:0f:
9a:7d:85:d6:be:9b:02:e1:b8:74:6a:2e:2e:d5:5d:b8:fd:51:
7f:93:5c:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCQJ8b0eD3rOtBnueeVr5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMWFjOWYwOTRkODMxOGYzMDg4ZGNhNjgzMDE4NjVmNDYw
NWU5ZGEwHhcNMjUwNzI2MTQwMDI5WhcNMjUwNzI3MTQwMDI5WjAzMTEwLwYDVQQD
EyhjYzgwMzI1NjE2NWZhYTQwZjEzNTMyNzRiNjlmYjZhNjYzMWYwN2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/lDtMFDwdQj3xCOEoRzu4thiAofj
GgZ7npbrrR50ws5spCaG207/+pAX+NCpVwsn90slqZ1cS5sY/siF8s3FbBvMi7TY
yG327txIsNBGZsN7n7RrN6TKM9bWliSz8m6aRrNMkLY/mGj27lA+/3hR0gMguLhd
8gaupHj2OtD6iEPp8cHbzLmpFqPzLdrJclgl1oHqdyPT848y2ND3qXCJhlHLPwA0
URLHctJUB/OOIXOpW0Gb+zwUC5478lrM8xiGboIBddyLrLzb37FN0DvWvP5QODe3
8ogufHazMk8nmkdAw9+VXaeTCpiGNKJwnxJYIl+uXarllwEw+WMAZVBvZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyAMlYWX6pA8TUydLaftqZjHwezMB8GA1UdIwQY
MBaAFC8ayfCU2DGPMIjcpoMBhl9GBenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEt
YzIzYzgyOWRiOTM3LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEtYzIzYzgyOWRiOTM3
LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQv4BAV8
7/TAHFQgmRoiZU0aSVgaoKPsJy/w4SdNrfJqGz5PwDUDkkM0v9UP5mKFjFvzTIKj
4FlF8qzWApH8X6LlV5cZTDtli7MYGB6lwpWBb49NXFJYXvOm9km7ul+XZSuTAZH6
e1sEwTNajxJPdU2hFIh9P79uy+0LgoPFLYi6BX9ZwZR4vrnOAQpCH6r2R7UzjdY9
+ZVDfKpqHnmPzWTXIFNy/g1EUEmcNuRyOV7m/IuHsBMXh+V8wQ6ttQg1FXKHEo1M
rIe4ujraOakFmbSY04im5Z8XpNZIexUS9pu4q8bHj8Fe+PYPmn2F1r6bAuG4dGou
LtVduP1Rf5NcAA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:55:36 2025 by rpki-client