Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
File: LXR59FZDorguENq_c-_vdwOx4tI.mft (raw, json)
Hash identifier: SpOZT7CclijS2C39YW8qnvvIP7/b7N0gYLAHH4VArtI=
Subject key identifier: 1A:FE:8F:0A:77:F8:FF:1C:8D:90:2A:F0:76:29:9B:70:C8:27:5B:01
Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
Certificate issuer: /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Certificate serial: 019A72262B97350E72B64600EB48DA4CC680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: LXR59FZDorguENq_c-_vdwOx4tI.crl (hash: 0XvsccEyjTg91jzO2CMTEYLxQSKL8qw2F8k0gw/acZA=)
2: unRbkKxOnR98ml1J5g6bUjmiKYg.roa (hash: dSoLjUhYv2hRLBN1CZDtznSmSO++ZyOw/lIWfxfiQjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2b:97:35:0e:72:b6:46:00:eb:48:da:4c:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=1afe8f0a77f8ff1c8d902af076299b70c8275b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:87:a2:e1:85:48:c4:b4:ed:73:1e:56:bd:
7b:f0:59:64:d6:aa:55:e8:2f:2f:e4:1b:e4:b6:58:
c7:10:48:aa:e5:e3:75:fa:7c:ac:b5:6a:69:ac:68:
12:71:9e:f9:3a:7e:a4:43:8d:70:67:5f:71:79:8a:
a8:c1:84:b4:05:fd:f9:a0:3e:33:71:3f:cc:1a:13:
cf:fb:85:7f:03:de:45:44:45:87:b5:a3:45:14:cd:
5b:b4:7c:3b:ef:18:ee:11:a4:a7:61:5c:6b:11:c2:
87:c3:34:6b:e0:d1:2c:a7:50:9a:ba:87:85:04:2c:
35:af:98:97:4a:76:cd:3b:82:16:76:cf:c4:d4:31:
0d:41:1e:9b:0f:ef:4e:05:41:bf:c7:f5:98:e9:a6:
81:5f:40:82:3a:78:83:dc:0e:c1:3d:39:3e:c9:f2:
53:22:af:6d:26:44:67:1a:ed:db:a3:71:a5:4b:ec:
67:d3:5f:20:50:20:2e:39:ac:68:d0:1d:c4:1d:17:
16:d6:2f:2d:8a:79:03:7b:3a:46:14:6b:59:cd:55:
89:ec:49:5e:50:0f:fb:36:2e:c0:cc:f3:14:6d:d5:
d0:83:46:0b:80:e9:0b:51:05:fe:23:c9:8b:da:72:
5c:06:3c:83:6c:4c:7d:de:43:25:72:d2:16:c3:7b:
f5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FE:8F:0A:77:F8:FF:1C:8D:90:2A:F0:76:29:9B:70:C8:27:5B:01
X509v3 Authority Key Identifier:
keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e5:cd:03:65:1a:ac:9c:f5:50:f9:a0:eb:c5:94:7c:50:a7:
65:f7:ca:ae:9b:45:ae:d2:68:b4:82:d8:3b:03:0a:3a:da:65:
a9:ab:b6:20:fc:8d:79:8d:9d:f7:c0:66:ef:16:1f:fb:cb:39:
01:25:ea:a7:6d:62:25:7a:20:79:f7:f0:bd:42:27:69:82:f4:
78:20:50:ac:00:74:9f:2a:fe:01:6a:7a:51:f7:76:8f:81:f6:
1c:61:aa:9c:ab:16:53:d0:d4:cb:c0:2c:dd:2d:f2:9b:48:08:
aa:93:fb:49:f5:26:78:f8:63:38:87:62:8a:2d:64:a3:3f:35:
17:98:9c:e7:01:18:bc:9c:e3:a5:10:ce:48:dc:35:ee:b0:b1:
4b:42:6e:8b:ac:a4:44:f7:a4:fe:5d:62:48:1a:4c:3b:9f:5b:
e6:d3:a7:74:90:16:41:70:6c:9a:f2:5d:e3:8c:c2:66:9b:01:
24:94:4d:d7:08:a8:03:b2:7a:d2:18:ca:0d:ca:57:54:41:94:
b9:ca:32:66:c0:d7:4e:3c:2a:c6:66:48:e4:34:29:6c:d6:d3:
2b:31:b8:62:4e:41:d0:84:2b:15:3c:6d:97:b3:e1:e0:a4:67:
a9:02:5f:22:e3:ab:8d:21:47:90:49:b8:8b:89:c2:c3:42:fb:
ba:2e:62:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:48 2025 by rpki-client