Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
File: lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json)
Hash identifier: dWgSg3Qkdebc8kpMaZjtlev8A9AApTUqzhSwHoxmrEs=
Subject key identifier: 84:A9:4A:59:E5:F4:A0:ED:F6:8F:2E:40:5D:CF:4A:D1:2F:A2:13:BC
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Certificate issuer: /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial: 019A21AD7AAE88C30A15069B4AC6DD18CBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
Manifest number: 12BF
Signing time: Sun 26 Oct 2025 18:00:08 +0000
Manifest this update: Sun 26 Oct 2025 18:00:08 +0000
Manifest next update: Mon 27 Oct 2025 18:00:08 +0000
Files and hashes: 1: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: U0SfHlBYsO9zGp6beH84dcilJHkCOOwJfeEdQnO+8cE=)
2: sE1iK8BGArTufNYA1Zt6v_dSI9Y.roa (hash: OOj0tzcrni9iINX1RsORuXXY2J4W4MPomfi+iy0BJbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:7a:ae:88:c3:0a:15:06:9b:4a:c6:dd:18:cb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Validity
Not Before: Oct 26 18:00:08 2025 GMT
Not After : Oct 27 18:00:08 2025 GMT
Subject: CN=84a94a59e5f4a0edf68f2e405dcf4ad12fa213bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:be:57:d7:28:17:84:ff:2e:8f:89:41:70:
fa:95:8f:f5:10:d7:8f:51:c7:43:f5:5d:69:cf:ff:
2c:04:f7:3c:f1:d9:e6:4d:84:a7:ea:ee:0e:40:ea:
a3:b3:e8:84:17:ed:e2:97:05:e5:e6:e5:1e:a1:e2:
4a:ac:e5:b0:6b:2f:a2:a6:e8:0c:aa:da:fc:eb:06:
9c:3e:bc:d6:6c:93:b7:5b:fa:a0:e0:11:23:cb:4b:
74:97:3f:4e:50:6d:39:c5:12:5b:59:f3:49:2d:74:
09:a4:37:4a:80:23:4f:b7:ac:e4:07:4c:02:0c:4d:
e8:e3:2e:96:d5:bf:2a:48:17:c5:10:dd:a8:34:45:
6b:2d:ab:4a:fd:22:fd:ba:65:17:d9:7e:7f:85:c9:
f1:be:00:eb:f0:66:51:ed:98:27:18:55:40:a1:08:
7f:b0:f5:73:5c:99:b4:8e:14:0f:67:10:fa:cd:14:
b2:c9:93:39:b3:b7:60:f6:14:9d:f4:31:5c:e4:4f:
8b:ba:b8:d1:cd:13:81:4b:53:4a:a2:7b:c3:a5:e3:
78:f5:bb:36:43:b3:ac:28:dc:b3:69:ad:84:8b:c9:
7c:4c:57:c4:86:11:04:bb:e3:c0:aa:39:0d:bc:6d:
aa:1c:a9:4c:67:c2:f0:3e:b4:93:96:2f:fb:fa:e4:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A9:4A:59:E5:F4:A0:ED:F6:8F:2E:40:5D:CF:4A:D1:2F:A2:13:BC
X509v3 Authority Key Identifier:
keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fc:37:9c:ec:6d:02:bd:03:0b:c0:36:94:38:46:88:52:96:
00:2a:db:07:23:db:2c:ca:3c:c0:2e:a7:6d:fa:b7:51:9b:f3:
b9:a0:ab:93:47:eb:a9:46:ab:37:e0:e0:dc:94:b8:03:23:f1:
be:dd:9e:91:f7:bd:42:65:fd:f1:79:9b:1c:05:4b:0f:75:0e:
df:a6:ee:01:6e:ac:db:2b:81:85:fb:2b:8d:76:91:da:12:db:
9e:e8:1d:93:29:78:1f:f2:6e:30:69:ab:2d:5f:41:80:52:9a:
3b:fc:11:00:0c:39:e5:e6:2f:72:66:2d:c0:d1:a1:fa:33:4c:
50:c2:77:5c:77:bc:2e:71:fe:f9:d8:52:08:a8:fc:ff:d6:26:
f9:b7:0e:76:c4:bc:4b:54:3f:8b:5a:09:9c:55:0b:56:ec:3c:
7c:6b:1e:4c:4b:1b:4f:d4:f8:b2:1c:00:55:6b:57:20:d5:9a:
74:f1:95:97:37:93:13:b1:e6:4b:43:6c:f5:f8:07:db:60:46:
12:1f:99:c4:cd:f3:a9:c5:f1:9b:aa:0d:b6:96:c5:22:72:73:
4a:4a:0d:aa:fd:3a:f8:98:32:3f:b2:09:a2:fa:1b:d1:bc:b2:
da:dd:34:77:6f:bd:d3:a2:25:66:1c:ce:1f:63:97:52:cb:6e:
db:b4:01:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:59:55 2025 by rpki-client