Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier: Ecn3AF+xjDwNzKoejNQZL2LIuPxsibQBH0TFbK6c6yY=
Subject key identifier: 29:BB:29:7B:19:F4:ED:9C:35:5F:72:97:2A:AA:D9:3B:F2:CB:8A:E7
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 019A1E3E966ABC9A4F075A82F94DB590EDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number: 10BB
Signing time: Sun 26 Oct 2025 02:00:09 +0000
Manifest this update: Sun 26 Oct 2025 02:00:09 +0000
Manifest next update: Mon 27 Oct 2025 02:00:09 +0000
Files and hashes: 1: 6_d9VSWBVNToOGPNlpWA61QmprM.roa (hash: 57355UO7axP5A8MR5ssS/djmBZAYmcZTAffNl5b7yUY=)
2: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: l1mwfLn3EP0hefPrKMm9TG0kKrNPPrP0M6xMzzoxzY0=)
3: h79SEaHwXYiVzt4p0CBMPa0GFjY.roa (hash: LtDXQ1PILY1+EGPsQbs1Ku9N9hF4cubp+4vVwoPrfN4=)
4: uc4NY9XdDoUNm-7G0TF_f0pLIfg.roa (hash: Kdxkp+N3BeWYNrfae94aDnYFKHtejikhtbXsxsmUtiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3e:96:6a:bc:9a:4f:07:5a:82:f9:4d:b5:90:ed:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Oct 26 02:00:09 2025 GMT
Not After : Oct 27 02:00:09 2025 GMT
Subject: CN=29bb297b19f4ed9c355f72972aaad93bf2cb8ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:3c:c3:66:60:cb:86:3d:f1:07:fc:8b:bd:
e2:59:cc:82:41:7a:57:ca:17:0f:86:b1:49:a0:ac:
fe:57:5b:b0:36:da:f4:19:e8:44:49:f5:89:19:ec:
81:c4:3b:c3:fb:fc:63:23:a2:e7:b1:44:f2:23:24:
56:12:0e:60:e0:b7:18:7c:e2:bd:59:5c:93:26:ff:
62:d0:eb:89:e7:7f:0e:e6:a5:a4:1c:34:38:d6:8b:
1c:8e:32:7e:27:62:5b:3a:98:07:32:27:47:2f:44:
04:87:bf:83:b3:78:d9:2e:9f:36:80:5c:03:46:53:
30:e8:b7:12:fd:f2:0f:5c:13:8b:31:3c:13:aa:b5:
a5:0a:1c:a6:f4:6c:eb:83:6d:ec:ed:d3:4a:14:7f:
a8:9e:3e:8e:9f:f7:88:bd:17:29:4c:b3:6e:4e:d2:
e2:3a:ec:b6:82:8b:67:de:c2:da:18:00:ea:f3:a5:
83:76:ab:e0:aa:fb:20:94:64:37:51:4c:7c:45:a7:
7f:78:77:b7:bc:a6:c1:f3:b3:4c:58:61:a8:75:cb:
fd:c5:13:64:36:f1:01:67:58:a2:97:b1:85:54:21:
23:b7:85:0d:7b:1a:77:f9:fc:61:ff:df:c2:53:a8:
b7:32:cd:69:18:38:b4:73:a6:cf:87:cb:52:4c:62:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BB:29:7B:19:F4:ED:9C:35:5F:72:97:2A:AA:D9:3B:F2:CB:8A:E7
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:62:86:dc:a0:55:7e:ee:a2:84:54:86:28:84:a2:8b:ae:6e:
e1:4a:82:1d:96:ee:4c:d2:0b:f0:11:29:98:53:87:99:c7:bb:
52:49:20:03:8e:15:5d:57:f2:ad:e0:55:32:88:e4:cc:6c:f9:
0b:fb:22:0c:e5:47:37:b7:be:74:07:25:a9:f8:10:0b:4f:2d:
23:9c:44:a9:7f:ec:dc:c3:85:37:0d:79:cd:82:a5:c1:42:62:
2a:9e:2a:63:da:e5:3f:91:06:24:b9:48:9f:bf:51:cb:b0:d5:
eb:69:e2:71:fd:0b:cc:6a:ef:65:3a:8b:e6:eb:0c:cc:58:80:
05:fb:13:07:ab:b7:d8:25:37:5f:d4:83:7b:b9:af:7a:f5:ea:
c0:cb:44:6d:82:ba:ec:c6:3f:3e:ba:8d:0c:d9:66:3a:36:a0:
0a:9d:6a:7a:d6:02:ff:5a:95:a6:b5:eb:02:2e:dd:e1:48:d2:
2d:6a:9a:63:fa:2a:c3:f2:00:78:c7:f9:2b:b2:73:37:63:bd:
a7:19:83:f5:29:2d:49:cf:dc:77:06:42:98:13:13:e1:a0:a4:
44:d7:9d:79:4d:56:c6:27:73:93:86:c7:20:0b:c8:63:c6:3f:
c8:18:52:6a:28:1f:69:10:75:d5:fb:31:d1:cd:36:46:9f:ef:
ca:9c:61:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:17:32 2025 by rpki-client