Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: Y7Aw5aMqRA27jCck3ni4aRH210tMKpsRN9DJV0caCHU=
Subject key identifier: 20:A6:71:09:27:9A:10:9F:09:83:C9:A8:05:3C:45:49:3E:3E:37:CC
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 019A0523C9E2D77329BE34D34C3E6ACF993C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 16E8
Signing time: Tue 21 Oct 2025 05:00:22 +0000
Manifest this update: Tue 21 Oct 2025 05:00:22 +0000
Manifest next update: Wed 22 Oct 2025 05:00:22 +0000
Files and hashes: 1: LgyeVhb60AJRIPJ13YatbxO4AsM.roa (hash: +B/MY539hDGa2yzYS0WxkYZEnocpiOn/GpdxMJUzr84=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: ToHLv6sxbaZeFpcbX+oRvpcqGxNgpd9NfzqPSSGsB6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:23:c9:e2:d7:73:29:be:34:d3:4c:3e:6a:cf:99:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Oct 21 05:00:22 2025 GMT
Not After : Oct 22 05:00:22 2025 GMT
Subject: CN=20a67109279a109f0983c9a8053c45493e3e37cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:03:fe:97:76:4e:86:31:4e:b7:83:f9:d2:74:
54:32:8e:48:37:e1:6d:f8:60:c4:4f:18:cc:92:b5:
4f:18:df:5b:5c:75:60:d3:4b:f9:33:cd:af:a9:e7:
61:3c:f5:ed:2d:6c:0a:73:f8:16:6e:8e:72:ad:76:
f3:71:d8:8f:b7:79:32:0e:2f:0d:f3:86:c4:bf:36:
c8:d9:35:74:c7:2c:e9:31:fe:31:fe:6c:6f:68:47:
a9:24:27:f1:8d:69:68:b3:f6:67:e4:a9:27:61:c0:
74:82:7a:49:a3:46:a4:b1:b6:a7:dd:bb:64:d7:af:
d6:c9:02:7a:72:c8:82:93:ba:ae:0e:c2:a7:25:59:
5d:3b:03:ec:c5:94:37:2c:13:84:b6:a6:11:19:36:
2a:bb:9e:cd:f3:0f:5e:20:27:a2:b2:4e:43:22:73:
75:88:4d:c0:0a:eb:c2:37:5a:27:7a:aa:bc:f0:2c:
56:79:a3:81:61:a7:d5:40:0e:4e:07:66:98:58:b4:
3b:bd:40:31:de:ee:e5:b8:ca:3c:6c:6b:e6:b3:3e:
5c:cf:7c:7a:f1:cf:6b:28:b4:58:a4:b7:a1:1c:b4:
bd:7f:47:f6:c8:f8:3a:29:af:0c:e5:b9:5f:99:17:
9b:8e:3b:2d:1b:22:c0:fa:35:a7:50:74:3d:94:ac:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A6:71:09:27:9A:10:9F:09:83:C9:A8:05:3C:45:49:3E:3E:37:CC
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c3:6e:7a:aa:cc:6f:12:8c:51:4d:9a:39:b7:a6:03:69:b5:
04:52:ec:2d:99:6e:72:80:29:9e:23:40:9d:61:9d:f5:81:7e:
be:9a:85:40:2e:72:f2:02:df:08:b3:84:26:cc:5b:ac:57:23:
1e:47:8c:5b:5e:a0:74:c6:6a:94:21:06:17:b9:78:76:76:31:
c6:11:53:01:66:21:b1:1e:d4:39:c8:8b:8a:d3:ae:5f:7f:db:
43:75:95:01:aa:96:59:3d:bc:4a:7c:75:13:6c:f4:4b:43:5e:
cd:6e:c5:e1:df:71:d6:4e:b2:33:f5:62:8f:07:b7:48:aa:d7:
99:28:2a:bb:41:18:cf:bb:b9:73:c8:72:af:29:6d:e3:c2:38:
db:87:f5:79:29:80:a6:9d:fd:1e:b6:84:bb:9f:3b:9b:68:d7:
79:97:c1:d2:92:f2:ed:dc:49:51:ca:79:c6:b8:90:69:da:29:
54:96:7a:cd:b2:e4:84:cc:f3:b1:39:20:22:74:cf:b7:e4:3f:
90:6c:38:09:1f:ad:80:5b:aa:af:1b:08:fb:a5:af:61:69:e7:
c9:dd:8e:cf:11:dc:da:70:58:50:c1:bc:fe:c5:62:e6:db:b7:
ca:2e:a8:c0:67:e5:e4:4d:82:91:e4:f3:b3:45:55:65:c8:75:
0b:12:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:04:47 2025 by rpki-client