Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json)
Hash identifier: HukMpjpvzuAh6CQ7z4osxqVkOEgz26TAiSGZHxHrLbk=
Subject key identifier: 9D:0F:D5:9F:58:EC:03:CE:F3:B9:F6:CE:C7:54:26:E7:E5:F3:AC:E3
Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Certificate serial: 01974AB1768C9D5F0BB55633C137BB888988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 14:00:33 +0000
Manifest this update: Sat 07 Jun 2025 14:00:33 +0000
Manifest next update: Sun 08 Jun 2025 14:00:33 +0000
Files and hashes: 1: UADfQRfiU0qMqkC7bWaFEbHeHdA.roa (hash: WP9x47zoRlAi5Co+JqhZvWC2k3pFeOAzkBoA6TCx0aU=)
2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: GNIvsHGoxzQZXb+ZoLquzcSh6irOwyD2QO+6UREY3bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:76:8c:9d:5f:0b:b5:56:33:c1:37:bb:88:89:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Validity
Not Before: Jun 7 14:00:33 2025 GMT
Not After : Jun 8 14:00:33 2025 GMT
Subject: CN=9d0fd59f58ec03cef3b9f6cec75426e7e5f3ace3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:df:01:c6:bc:b0:b8:f7:c6:9f:d7:a1:04:
7a:8e:72:93:9d:7b:c5:ab:54:b7:ad:1e:32:48:2d:
3f:79:78:c0:f8:17:53:70:bb:1b:58:3d:b4:52:1a:
65:f2:3d:6a:51:0b:09:eb:53:50:15:ec:a1:2a:1e:
da:00:6a:a6:04:a1:2c:dd:26:ac:a5:64:a7:49:dd:
2c:b1:3f:ca:2f:5a:d7:c7:2c:4b:39:9b:54:11:42:
ee:6e:19:d5:c3:69:a6:7b:66:81:42:da:94:48:cf:
53:87:81:32:f8:33:5b:0c:d5:e4:ba:56:db:91:28:
3e:99:06:f9:df:bf:18:29:a2:88:21:0c:6b:fa:01:
20:e0:bc:8c:60:eb:04:35:73:e3:8c:db:bc:fa:2a:
89:13:fb:25:c7:2d:dd:c8:a2:e7:dd:89:c6:86:3e:
bd:f3:e6:2a:aa:33:fc:1f:e4:c8:d1:cb:1b:26:90:
af:21:be:62:ef:d2:21:0a:40:02:b9:15:e7:f1:57:
a9:37:14:ab:9e:d6:5a:00:a8:86:10:0d:85:d4:dd:
37:8d:51:37:61:dd:24:0c:7e:97:4d:a1:93:75:f6:
9b:d6:62:fc:36:42:0d:9b:a8:9b:0a:dc:93:43:e0:
34:95:9b:3f:2b:8b:14:9f:6a:10:04:d5:89:56:19:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0F:D5:9F:58:EC:03:CE:F3:B9:F6:CE:C7:54:26:E7:E5:F3:AC:E3
X509v3 Authority Key Identifier:
keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2d:70:3e:13:b7:d8:b2:a7:d9:93:cb:5c:a2:91:47:ba:c7:
fd:db:1e:e1:ca:c5:f4:40:a3:a5:2c:1e:71:35:bf:c0:aa:28:
b7:fc:1d:3e:9b:7a:b8:7e:0d:56:0e:8f:93:33:fe:c5:6e:88:
0c:28:f6:77:c6:de:f5:6b:9c:9b:7e:0f:d9:3f:d3:a3:b5:02:
06:9a:a9:4e:20:7a:5f:4c:43:9f:d6:db:fe:e6:40:7b:a6:65:
54:e8:10:43:b6:81:42:e6:ef:be:48:79:bb:d7:68:23:a3:eb:
b4:96:9f:43:06:b2:15:59:d2:7a:2e:c2:6c:c6:08:26:6e:8b:
74:a0:84:61:2f:cb:20:a9:b8:33:16:63:a8:ce:84:67:7f:3c:
9f:ba:a3:d1:8d:e1:67:74:ed:7e:ec:ce:f7:aa:6e:61:d8:57:
21:1c:a5:31:b1:79:fb:39:3c:e7:01:f8:3e:a0:1f:50:0e:92:
8c:fc:db:fb:bb:7e:1a:3c:72:c1:77:ab:a0:1e:29:68:f0:59:
52:24:63:bd:af:93:ac:03:eb:ab:3b:d6:b9:ab:7a:a9:a7:3b:
74:67:53:5f:a7:ad:e6:6b:5b:6b:04:4c:95:ce:fe:df:e5:b9:
7e:70:76:dc:b7:ab:99:18:d4:ac:fc:40:f4:c9:61:5b:b4:a0:
88:a9:9c:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsXaMnV8LtVYzwTe7iImIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTAyYzY5M2FmM2EwOTBmOGY5NGJhMWZkMDgyZGIwOTI0
ZWFmMTIwHhcNMjUwNjA3MTQwMDMzWhcNMjUwNjA4MTQwMDMzWjAzMTEwLwYDVQQD
Eyg5ZDBmZDU5ZjU4ZWMwM2NlZjNiOWY2Y2VjNzU0MjZlN2U1ZjNhY2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfvfAca8sLj3xp/XoQR6jnKTnXvF
q1S3rR4ySC0/eXjA+BdTcLsbWD20Uhpl8j1qUQsJ61NQFeyhKh7aAGqmBKEs3Sas
pWSnSd0ssT/KL1rXxyxLOZtUEULubhnVw2mme2aBQtqUSM9Th4Ey+DNbDNXkulbb
kSg+mQb5378YKaKIIQxr+gEg4LyMYOsENXPjjNu8+iqJE/slxy3dyKLn3YnGhj69
8+YqqjP8H+TI0csbJpCvIb5i79IhCkACuRXn8VepNxSrntZaAKiGEA2F1N03jVE3
Yd0kDH6XTaGTdfab1mL8NkINm6ibCtyTQ+A0lZs/K4sUn2oQBNWJVhnDHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0P1Z9Y7APO87n2zsdUJufl86zjMB8GA1UdIwQY
MBaAFJcQLGk686CQ+PlLof0ILbCSTq8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQt
ZjUzZWY1MjFkYmUwLzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQtZjUzZWY1MjFkYmUw
LzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAS1wPhO3
2LKn2ZPLXKKRR7rH/dse4crF9ECjpSwecTW/wKoot/wdPpt6uH4NVg6PkzP+xW6I
DCj2d8be9Wucm34P2T/To7UCBpqpTiB6X0xDn9bb/uZAe6ZlVOgQQ7aBQubvvkh5
u9doI6PrtJafQwayFVnSei7CbMYIJm6LdKCEYS/LIKm4MxZjqM6EZ388n7qj0Y3h
Z3TtfuzO96puYdhXIRylMbF5+zk85wH4PqAfUA6SjPzb+7t+GjxywXeroB4paPBZ
UiRjva+TrAPrqzvWuat6qac7dGdTX6et5mtbawRMlc7+3+W5fnB23LermRjUrPxA
9MlhW7SgiKmceg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:23:01 2025 by rpki-client