Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier: lRTLcQyFVb/u4f7KaDFYm984xhI5kpOtmPC8L0v9hag=
Subject key identifier: C0:98:64:B6:FA:9C:8E:C2:9C:0E:3B:DD:07:4B:9B:61:24:AA:96:16
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 01974252EB369575392768C93C76C8D47B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number: 0F40
Signing time: Thu 05 Jun 2025 23:00:19 +0000
Manifest this update: Thu 05 Jun 2025 23:00:19 +0000
Manifest next update: Fri 06 Jun 2025 23:00:19 +0000
Files and hashes: 1: 6_d9VSWBVNToOGPNlpWA61QmprM.roa (hash: 57355UO7axP5A8MR5ssS/djmBZAYmcZTAffNl5b7yUY=)
2: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: 2nmLyRWFWBtH+xb78FA5hrKNxv8oQv69HNbGnjAx9BM=)
3: h79SEaHwXYiVzt4p0CBMPa0GFjY.roa (hash: LtDXQ1PILY1+EGPsQbs1Ku9N9hF4cubp+4vVwoPrfN4=)
4: uc4NY9XdDoUNm-7G0TF_f0pLIfg.roa (hash: Kdxkp+N3BeWYNrfae94aDnYFKHtejikhtbXsxsmUtiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:52:eb:36:95:75:39:27:68:c9:3c:76:c8:d4:7b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Jun 5 23:00:19 2025 GMT
Not After : Jun 6 23:00:19 2025 GMT
Subject: CN=c09864b6fa9c8ec29c0e3bdd074b9b6124aa9616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:d6:22:14:98:5e:24:be:e9:4b:0f:d3:f1:
52:28:ae:f4:b2:dd:26:e8:da:30:5c:3e:72:bc:ab:
29:61:17:1a:02:66:bf:68:d9:7b:ff:92:86:dd:e9:
11:48:48:18:ac:f7:cd:e7:ec:7e:bc:cf:b8:bc:48:
b2:2e:f1:dd:9b:fb:64:7d:80:ce:81:dd:e3:04:9e:
4c:57:97:12:6e:c7:3d:75:a3:47:e2:ad:21:cf:e0:
4e:46:2c:b9:af:38:8f:f5:fa:fc:f2:42:c8:0e:69:
4f:ce:5b:41:ae:5b:9c:9c:c0:c8:2a:b4:6b:cb:b0:
c5:94:b4:21:63:f6:62:1e:7d:cd:0c:07:1e:2b:7b:
75:e8:00:a2:1a:89:9a:89:ab:74:f7:d8:55:af:b5:
c6:ec:16:ab:9c:1a:c3:ef:55:2a:61:b4:fa:9b:73:
da:85:4f:b9:a5:4f:6f:f5:ee:ec:5f:5f:7f:59:dc:
79:0c:1b:de:22:53:78:1f:5f:bd:51:83:e6:38:ee:
3f:7a:cd:76:d3:30:31:29:5d:f0:41:a8:b6:23:29:
c7:fc:13:70:af:a2:66:4b:90:7e:bd:60:17:c5:2c:
85:b5:eb:86:0a:b0:1b:99:d3:8d:94:94:e8:af:5d:
1a:77:b1:59:ea:7a:2f:e8:99:e2:07:ed:11:b7:52:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:98:64:B6:FA:9C:8E:C2:9C:0E:3B:DD:07:4B:9B:61:24:AA:96:16
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d3:9c:bc:70:f1:37:8c:18:f3:99:3f:27:fc:32:1d:a9:3e:
30:d1:de:19:08:0c:8c:12:28:66:a4:2b:02:5d:be:c8:0d:d0:
63:7f:55:47:71:41:9e:ec:b8:32:05:9b:1a:1f:a6:4a:f2:10:
ff:d2:6a:f0:88:81:13:89:ea:e9:1b:83:68:ff:d2:81:03:af:
ab:f3:33:6f:93:6e:bb:03:be:71:8f:f4:10:b9:4f:7d:7a:66:
a1:86:92:9d:30:25:de:01:65:83:93:28:5b:d2:cb:41:af:10:
6d:b5:11:8d:05:3b:a0:67:05:69:70:ef:64:79:bd:f6:41:a0:
9a:6e:86:c0:d5:05:37:c8:a8:59:21:01:b4:f2:ee:9d:34:53:
62:bb:3c:b7:70:9a:a3:9a:17:08:ea:97:9f:b1:f1:92:e9:4a:
ee:b1:a4:a8:51:ad:87:cc:f9:69:48:e2:15:44:f1:05:3c:6c:
0a:cf:26:f1:fb:74:21:0e:98:61:d5:f5:6a:fb:75:be:f8:01:
64:45:31:96:2f:43:ba:2f:76:a5:88:a7:e1:cf:dd:1e:30:70:
71:cb:23:63:12:35:f1:25:97:ce:32:68:1f:84:fe:a1:72:3f:
81:c8:07:d8:1b:dd:bf:0d:38:95:44:37:38:01:34:8a:7e:70:
31:9c:cd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:11:04 2025 by rpki-client