Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json)
Hash identifier: RpjoEuyAQJHKDNgjTT/Vo5gcSPYb0u7A8NQLTuxrZVo=
Subject key identifier: DC:DC:27:5F:EC:2F:AD:71:B0:5C:51:0D:14:53:7A:5D:A0:D3:9A:A2
Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Certificate serial: 019A70DC83FC958CB0B7343EEBB0EE17F52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
Manifest number: 0B9C
Signing time: Tue 11 Nov 2025 03:01:30 +0000
Manifest this update: Tue 11 Nov 2025 03:01:30 +0000
Manifest next update: Wed 12 Nov 2025 03:01:30 +0000
Files and hashes: 1: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: E/2Ytdt2wWuEzRw6mLKHO5j+8outwcjD5ukac/ydCws=)
2: lT88CqOH5vwMoi8VUrMFaxJU8J4.roa (hash: S4Errm7narViCee9k3oJgV4xcS7HzGtYGoc+vP+G/zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:83:fc:95:8c:b0:b7:34:3e:eb:b0:ee:17:f5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Validity
Not Before: Nov 11 03:01:30 2025 GMT
Not After : Nov 12 03:01:30 2025 GMT
Subject: CN=dcdc275fec2fad71b05c510d14537a5da0d39aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:09:7f:5e:e3:6a:ca:aa:0c:c3:da:59:57:
a6:26:20:bc:e0:c8:dc:e3:c0:79:f3:ee:51:e4:48:
89:cf:6e:91:53:ce:e2:a4:06:bb:66:6c:a7:b9:37:
ed:e0:19:67:4f:62:32:37:4b:11:7c:6c:86:2c:d8:
81:6e:52:59:6e:12:83:4c:d3:8e:81:69:70:10:78:
5b:81:36:a6:ca:59:8c:29:46:70:a0:09:e6:68:b7:
94:98:e1:06:e1:5f:f5:f0:90:92:d4:e4:ef:09:92:
41:00:33:af:ef:80:e9:0a:64:fd:ee:af:6f:98:a8:
9f:65:9b:00:a2:e7:c1:ad:24:0f:69:db:f6:3a:c4:
c6:df:c0:cc:ea:47:f8:56:ba:4c:4b:82:82:c6:80:
e8:d2:95:a3:f1:38:ab:e3:28:3c:9c:27:4e:ea:56:
95:0d:58:da:b3:c2:4d:e3:c7:52:58:ce:b3:07:7b:
a5:9a:80:0d:1e:68:28:bd:d6:bf:0e:e2:7d:cd:67:
59:dc:1b:12:71:2e:92:f4:b6:0e:a5:9f:ed:95:f0:
51:36:b6:94:04:ef:0d:b8:14:44:d7:be:4a:2a:4b:
37:ac:00:55:dc:7e:fe:e5:b3:0c:ea:75:80:54:28:
8c:17:5e:b3:d1:ba:8c:09:e2:ec:fc:d4:79:a5:a0:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DC:27:5F:EC:2F:AD:71:B0:5C:51:0D:14:53:7A:5D:A0:D3:9A:A2
X509v3 Authority Key Identifier:
keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:95:41:c3:ea:75:2d:ee:68:30:4e:98:23:5d:28:1a:07:f6:
91:78:c6:da:3e:24:05:57:4e:0f:11:be:c1:e7:e7:fd:31:f9:
43:95:58:cd:5c:d3:16:f8:4b:ea:f5:4b:92:c9:a3:d8:b1:b1:
80:e7:0f:64:4f:45:5b:28:4e:ae:d4:82:b0:a0:c2:cf:30:a4:
17:3a:75:ed:51:59:2a:04:a4:fc:88:fe:44:7a:78:5d:4f:92:
80:4b:fc:22:a9:02:1f:ad:ce:5d:be:96:02:e8:5a:12:a0:84:
e6:1e:76:d1:d3:ea:fe:7f:f7:f4:19:da:c6:92:93:b8:60:16:
b2:c7:88:ec:46:81:dc:a5:c8:a3:85:05:d8:be:f3:c1:5e:2e:
d0:10:42:b5:88:69:f6:52:7e:28:0a:eb:19:96:a0:18:6f:ac:
d2:e2:38:e1:04:14:7e:36:45:4f:6f:f1:90:56:71:a4:19:44:
0c:94:42:a8:13:ef:3a:eb:95:5e:a6:3a:21:bc:28:f2:9d:2e:
4d:3b:e6:73:3d:0f:f0:ab:96:8e:ff:b6:37:5a:b1:83:ef:31:
a2:9f:e7:67:c8:ee:8c:15:fb:f2:27:f0:52:d0:ef:37:26:de:
6f:da:10:55:ab:7e:39:9a:bc:af:d9:2e:5f:4b:84:76:c9:66:
f3:02:f5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:46 2025 by rpki-client