Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json)
Hash identifier: qOdP2khC+PYO/7njnsnOISLfZt05wkxRuu4B69b92SQ=
Subject key identifier: 6E:87:F8:6A:51:F8:41:BE:8B:71:62:02:EA:DA:DF:36:42:0D:77:46
Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Certificate serial: 0198578EFDD8452AD890946A25E6DF60828D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
Manifest number: 06B4
Signing time: Tue 29 Jul 2025 19:00:45 +0000
Manifest this update: Tue 29 Jul 2025 19:00:45 +0000
Manifest next update: Wed 30 Jul 2025 19:00:45 +0000
Files and hashes: 1: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: 4DED5EWwMoD8LVHwtQvQr3/x5VvxvrDMxoWptUOEkyU=)
2: tU-16s9tq9lFPI9LdHnUudxWQ80.roa (hash: C3zkVEZCC33fk0KY3UR1pX59nVM27axL5/PozEIPAG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:8e:fd:d8:45:2a:d8:90:94:6a:25:e6:df:60:82:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Validity
Not Before: Jul 29 19:00:45 2025 GMT
Not After : Jul 30 19:00:45 2025 GMT
Subject: CN=6e87f86a51f841be8b716202eadadf36420d7746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:60:28:df:88:19:7b:1f:d9:9a:3e:a9:95:04:
17:45:d0:1e:87:ff:f5:e5:5b:ab:36:25:bd:d5:25:
6e:d2:11:5e:52:e4:e2:57:a3:27:92:13:da:a1:4b:
02:f3:5e:a2:10:d5:8b:67:02:f8:0d:56:02:47:86:
eb:73:ae:92:cb:43:28:fb:5f:68:9b:76:ab:0c:60:
04:28:1c:7c:6c:83:1e:82:47:48:1e:99:0d:6f:b6:
15:a7:84:8d:51:63:8d:7c:9e:c1:4b:07:13:11:47:
23:4f:93:65:74:c8:43:3d:39:a6:fb:ea:e1:24:fc:
83:cf:32:0e:ed:46:0c:55:e2:2f:21:cd:ad:56:ff:
9e:e0:5a:81:bb:4c:65:67:44:c7:1c:56:a0:47:c7:
80:e3:4e:8b:cf:43:d0:78:9a:8b:4c:23:1b:43:73:
7b:3d:94:4f:ea:07:ab:1d:a2:ca:8d:b7:99:07:1d:
35:47:f8:b4:df:6d:ab:b6:07:db:73:7e:97:72:8f:
3b:bd:6e:b4:26:60:8d:0b:74:68:af:b4:ae:84:12:
5d:93:51:c2:54:19:85:fc:79:ec:9d:18:9d:ee:9c:
29:52:bd:3e:9f:3d:0d:f5:95:61:0e:1a:47:82:04:
a4:12:cd:04:fe:44:99:82:94:ae:8a:c2:d3:b0:50:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:87:F8:6A:51:F8:41:BE:8B:71:62:02:EA:DA:DF:36:42:0D:77:46
X509v3 Authority Key Identifier:
keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3f:c0:87:33:51:cf:a7:46:be:d2:de:7c:1f:b1:de:b4:9c:
21:cc:53:01:21:3f:de:69:a2:36:89:33:e6:64:67:05:77:51:
47:df:b6:6a:a9:6f:cb:e8:6b:11:a4:66:3d:cd:d3:68:a4:a3:
d6:b2:d3:4c:5b:1d:56:e6:ec:9e:46:52:5d:a5:c2:4c:ab:98:
ae:3a:7b:e5:2b:cc:d3:b2:6e:17:35:7f:86:5a:54:a4:06:1c:
8c:9b:83:d3:4a:d7:1c:a8:fc:ac:ee:b5:46:06:56:d4:b8:52:
f6:7b:a7:c0:d4:c5:ad:5c:78:41:81:3c:8d:ba:25:59:0c:2b:
4a:e4:b1:18:cb:d4:00:d3:1a:57:52:31:26:c7:ee:c4:45:79:
ec:25:c8:bd:f6:bf:ca:22:7f:a3:41:3f:0b:48:2b:70:d8:5c:
30:60:c4:5b:ee:d2:15:af:9f:05:eb:61:cf:a4:f7:e5:9a:99:
ec:22:05:6f:4f:d0:b3:35:a4:09:51:17:f7:f3:88:05:18:e7:
12:1b:4a:52:ee:2c:de:9a:41:db:02:d6:67:3c:09:c5:78:12:
78:75:8f:4d:b1:7f:43:38:85:0e:f0:aa:9a:06:7f:31:61:8c:
0d:10:fa:d4:cd:57:f1:b3:a8:1c:ad:29:07:89:34:28:00:4f:
51:32:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:36:05 2025 by rpki-client