Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json)
Hash identifier: DVK2aorI0XQ39hiwMK3BUL5+n4TlaqXbZjD/iPn879s=
Subject key identifier: 22:96:E1:97:CC:D9:BA:67:E0:D7:AA:05:BF:B6:CA:04:4E:C3:FC:94
Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Certificate serial: 019A71EEB092E07671CCDDB893BEFFA3AE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: UADfQRfiU0qMqkC7bWaFEbHeHdA.roa (hash: WP9x47zoRlAi5Co+JqhZvWC2k3pFeOAzkBoA6TCx0aU=)
2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: 8N9T3caTo+UssYK41g1CaG4sKAbw/H/RZLo88mRMPy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b0:92:e0:76:71:cc:dd:b8:93:be:ff:a3:ae:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=2296e197ccd9ba67e0d7aa05bfb6ca044ec3fc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:80:3f:90:54:ac:57:a4:6d:e6:11:72:63:5e:
06:8d:99:0b:71:7a:4d:90:7a:12:5e:d0:52:7a:58:
42:43:98:54:e7:60:e0:16:c2:91:d5:fd:a6:7b:e2:
68:d8:66:d5:16:6d:97:64:24:15:fb:6b:0c:e0:39:
f9:b6:5e:8f:e8:55:29:c4:b4:11:ef:ac:79:00:c8:
6b:bc:2d:c7:7e:1b:83:81:53:ab:83:9a:e0:dd:21:
bf:5f:01:ac:f8:25:d2:7c:3b:46:09:74:24:93:7d:
9c:f8:53:de:ce:84:d8:b5:0b:55:29:11:c5:9c:54:
1f:6b:21:9b:76:a2:8e:12:da:9f:34:34:6a:7f:0f:
0a:3c:7a:df:2f:99:f5:68:c0:11:2c:1d:8f:52:f3:
b6:34:6c:05:cf:76:9e:d3:20:e2:93:a4:7b:15:83:
dd:46:a6:eb:19:83:47:cb:92:35:30:f5:99:83:a5:
06:83:63:49:84:05:f6:d2:69:93:1e:68:af:e6:c4:
85:4c:c5:43:bf:e9:5d:a6:da:8b:32:31:b7:fa:25:
fc:ac:c9:9a:91:51:50:e0:66:aa:85:d2:a5:84:c5:
e0:42:e7:e8:1f:70:69:6e:77:e9:67:b7:15:a5:ee:
c5:fc:3b:38:f3:64:e4:2c:18:93:8f:49:92:d2:92:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:96:E1:97:CC:D9:BA:67:E0:D7:AA:05:BF:B6:CA:04:4E:C3:FC:94
X509v3 Authority Key Identifier:
keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7c:41:74:7e:bd:c3:aa:73:3c:51:e5:99:7b:19:75:0c:a8:
f3:31:c1:ae:bf:8d:8a:4b:70:cc:1c:e1:d0:f8:fd:32:d6:6e:
e5:28:cb:0e:ce:30:a3:62:c7:13:68:95:15:44:a2:ab:20:50:
27:65:7e:ac:8f:da:9d:f1:7f:f3:fa:31:3b:82:60:1e:0d:ab:
d6:ab:8d:cd:5d:76:20:28:43:cf:98:f7:ea:6b:c3:22:1e:84:
0a:3e:d1:d2:94:5c:bc:5c:8a:75:3b:c0:8a:f5:58:5f:cc:09:
16:80:aa:99:e0:8e:c6:1a:18:51:6b:dc:59:63:2c:43:7f:20:
88:e1:74:65:e6:0e:a7:a9:a3:59:c6:ee:79:cc:f3:d1:21:4b:
48:a4:25:f8:77:a4:62:31:54:ca:94:d4:39:4f:1f:76:a0:3e:
62:bb:fa:33:27:70:19:65:10:d4:89:88:0d:74:01:ca:61:44:
83:23:cf:78:e7:fb:c6:fd:3c:7c:b0:cf:0a:c8:88:8c:71:a3:
3b:be:a5:4e:35:82:01:af:83:de:4c:72:3b:06:91:83:33:86:
3c:f4:69:b5:2e:28:ec:0c:47:23:ea:96:59:33:07:7b:7e:e0:
b6:cb:5c:dd:b0:75:e6:aa:df:57:4b:0b:6a:04:0c:5b:37:22:
eb:4c:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:22 2025 by rpki-client