
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
File: Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft (raw, json)
Hash identifier: iMHskLnZC3htczG0t4YEphWrl52/DJrtH9zBG7gv2wk=
Subject key identifier: 6A:03:30:CC:30:2D:73:51:17:45:9F:24:6C:87:81:20:7D:33:3A:8C
Authority key identifier: 2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35
Certificate issuer: /CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
Certificate serial: 019923A088F94F9BDA3D3963614704024B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
Manifest number: 0AD1
Signing time: Sun 07 Sep 2025 10:02:27 +0000
Manifest this update: Sun 07 Sep 2025 10:02:27 +0000
Manifest next update: Mon 08 Sep 2025 10:02:27 +0000
Files and hashes: 1: Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl (hash: ZhP5hMpcaOZnqdfbqrSZeAhBiftvFys1EyZ/d1zOimE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:88:f9:4f:9b:da:3d:39:63:61:47:04:02:4b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
Validity
Not Before: Sep 7 10:02:27 2025 GMT
Not After : Sep 8 10:02:27 2025 GMT
Subject: CN=6a0330cc302d735117459f246c8781207d333a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:5a:35:fb:33:26:eb:25:72:56:30:0b:34:
7b:47:b6:b7:d6:2c:ad:0a:6c:f6:64:de:73:7d:99:
76:a4:f5:5f:aa:04:c5:1d:6c:b1:aa:29:67:bd:89:
88:03:96:2d:cd:63:4a:74:10:1f:a3:d8:b2:74:b3:
ae:6b:24:64:68:14:31:89:05:d8:1f:69:c8:46:91:
87:41:7a:01:af:be:ac:1c:d4:74:7c:be:81:fc:95:
f2:5c:db:f8:7f:74:1a:cf:c6:1b:ff:61:1d:c4:e2:
a5:d2:65:f8:6d:e2:47:b2:6b:16:56:ac:95:7d:24:
59:00:81:5f:1f:b9:28:16:b9:0e:4d:87:d7:71:9e:
eb:88:4f:ff:3f:02:ba:2c:a5:74:04:d0:f0:bf:7e:
c5:83:05:10:31:20:c0:cd:6f:79:f5:4f:bb:9d:62:
5b:48:fd:22:12:84:86:58:bf:46:e6:e3:b2:90:b2:
1b:ac:60:a0:93:c3:73:5c:05:38:48:2d:57:d7:09:
ad:c7:36:00:d0:ae:bb:f8:02:34:13:e2:0f:de:67:
63:4c:e8:d8:13:f0:3a:a0:29:47:b1:56:0f:ff:70:
9b:c2:9d:c2:ab:45:c0:00:dd:d1:21:18:4e:b3:1b:
50:bd:3a:34:3f:3e:eb:8d:57:e6:c3:b2:9c:99:e4:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:03:30:CC:30:2D:73:51:17:45:9F:24:6C:87:81:20:7D:33:3A:8C
X509v3 Authority Key Identifier:
keyid:2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6e:d7:18:b9:05:7e:98:16:50:f3:9d:21:65:a2:57:6d:ec:
85:1d:53:ec:92:de:03:1f:ee:77:43:00:86:47:b4:7e:91:b4:
01:f3:16:4e:a1:ca:41:e5:57:04:0e:42:7e:a6:76:e1:95:32:
5a:e7:a5:0e:52:97:d3:55:38:38:b2:61:ed:1a:ab:96:aa:38:
8d:f3:d6:33:3f:76:41:34:14:26:d0:5e:45:cd:48:43:11:27:
7c:a8:42:12:eb:48:81:88:70:fc:d4:2e:0c:96:36:8f:0f:de:
ab:73:1d:1b:67:d8:be:5c:b4:64:29:34:59:6d:14:77:02:ab:
2f:9c:6a:59:8b:0f:14:0c:79:9b:54:86:7a:f7:86:d1:a7:7e:
8d:56:5e:69:ab:bd:d5:a6:2a:a5:32:5a:d7:c8:a8:d2:46:49:
50:c1:6a:e9:ff:2e:4b:94:6d:d9:bd:81:f3:39:10:e7:8a:df:
52:67:1e:5d:dc:28:d8:fa:00:d1:62:68:06:6d:6f:64:46:04:
5b:6a:b7:d8:c9:f9:a5:33:43:8c:b7:b5:b1:32:9c:10:1c:60:
38:1e:42:8a:c0:3b:57:a9:30:93:af:c2:d7:c0:64:8c:77:04:
04:e1:4c:42:0c:7c:e3:ac:74:2f:0b:b0:e6:56:9b:20:04:54:
94:53:d5:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoIj5T5vaPTljYUcEAksiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMWIzOWY3ZjBhOWU2MmFhMDYwNDliOGNjYTMwZDIyZjUy
ZDA0MzUwHhcNMjUwOTA3MTAwMjI3WhcNMjUwOTA4MTAwMjI3WjAzMTEwLwYDVQQD
Eyg2YTAzMzBjYzMwMmQ3MzUxMTc0NTlmMjQ2Yzg3ODEyMDdkMzMzYThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCtaNfszJuslclYwCzR7R7a31iyt
Cmz2ZN5zfZl2pPVfqgTFHWyxqilnvYmIA5YtzWNKdBAfo9iydLOuayRkaBQxiQXY
H2nIRpGHQXoBr76sHNR0fL6B/JXyXNv4f3Qaz8Yb/2EdxOKl0mX4beJHsmsWVqyV
fSRZAIFfH7koFrkOTYfXcZ7riE//PwK6LKV0BNDwv37FgwUQMSDAzW959U+7nWJb
SP0iEoSGWL9G5uOykLIbrGCgk8NzXAU4SC1X1wmtxzYA0K67+AI0E+IP3mdjTOjY
E/A6oClHsVYP/3Cbwp3Cq0XAAN3RIRhOsxtQvTo0Pz7rjVfmw7KcmeTYCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoDMMwwLXNRF0WfJGyHgSB9MzqMMB8GA1UdIwQY
MBaAFC8bOffwqeYqoGBJuMyjDSL1LQQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lZTUzMTQtY2MzNC00NjVlLWFiNjEt
NjY0MjY3ZWQ2YTdlLzEvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lZTUzMTQtY2MzNC00NjVlLWFiNjEtNjY0MjY3ZWQ2YTdl
LzEvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPG7XGLkF
fpgWUPOdIWWiV23shR1T7JLeAx/ud0MAhke0fpG0AfMWTqHKQeVXBA5CfqZ24ZUy
WuelDlKX01U4OLJh7Rqrlqo4jfPWMz92QTQUJtBeRc1IQxEnfKhCEutIgYhw/NQu
DJY2jw/eq3MdG2fYvly0ZCk0WW0UdwKrL5xqWYsPFAx5m1SGeveG0ad+jVZeaau9
1aYqpTJa18io0kZJUMFq6f8uS5Rt2b2B8zkQ54rfUmceXdwo2PoA0WJoBm1vZEYE
W2q32Mn5pTNDjLe1sTKcEBxgOB5CisA7V6kwk6/C18BkjHcEBOFMQgx846x0Lwuw
5labIARUlFPVyw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:54:14 2025 by rpki-client