Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: D30A3P/xeyhrTHvwZMHDfRtqrDXurbMcQdeBFsfAxaw=
Subject key identifier: 3A:F9:DE:F0:AB:CA:1A:E2:FC:F0:46:83:0F:70:A8:62:12:59:DD:47
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 0198C67FBFFB912C622091CCA0383CC34FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 1643
Signing time: Wed 20 Aug 2025 08:01:57 +0000
Manifest this update: Wed 20 Aug 2025 08:01:57 +0000
Manifest next update: Thu 21 Aug 2025 08:01:57 +0000
Files and hashes: 1: LgyeVhb60AJRIPJ13YatbxO4AsM.roa (hash: +B/MY539hDGa2yzYS0WxkYZEnocpiOn/GpdxMJUzr84=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: vlij4hJnPKCzsLmnZFJWz0Z5/2NLFzb1xjEI5si9W14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:7f:bf:fb:91:2c:62:20:91:cc:a0:38:3c:c3:4f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Aug 20 08:01:57 2025 GMT
Not After : Aug 21 08:01:57 2025 GMT
Subject: CN=3af9def0abca1ae2fcf046830f70a8621259dd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:c1:cc:3d:c4:34:e0:31:97:43:c8:e5:dc:
98:90:3b:a1:54:a4:62:9e:13:53:33:86:cb:53:a1:
78:68:b3:3f:46:2e:c3:60:c8:9b:89:01:ce:17:ff:
aa:8d:60:73:e8:0f:c9:a9:19:fb:fa:20:57:e2:97:
71:e8:06:15:22:66:25:4b:c6:cb:f5:ca:84:c4:8a:
d1:a5:76:b4:9a:17:4a:9d:53:be:32:f1:97:8b:3d:
28:f4:75:37:fe:92:3b:96:9b:e7:9b:7a:05:5b:f1:
12:44:59:0c:c6:5e:15:e6:f9:1c:6e:6a:30:fb:a1:
5d:bf:46:3e:f2:d8:ff:98:d0:a4:69:94:26:db:b3:
c8:ba:39:98:6a:26:ae:38:6d:8f:ff:67:dc:f1:c0:
0b:de:7f:82:ce:41:15:8d:50:31:5e:13:2c:06:62:
4c:07:30:3f:9b:3a:48:88:6d:33:8f:b8:d7:94:f7:
45:d8:50:66:57:cc:d7:ff:43:6a:08:27:49:49:be:
66:13:45:30:2c:42:67:6d:47:c0:60:5e:5e:1a:f5:
4e:54:f0:f4:78:65:65:b3:8a:9f:e9:63:cf:f2:0c:
d7:b9:b2:19:7a:bc:29:bc:32:a5:b1:61:fc:f3:8b:
b5:76:81:7b:94:a8:0b:e5:d1:4a:fc:63:39:bb:7f:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F9:DE:F0:AB:CA:1A:E2:FC:F0:46:83:0F:70:A8:62:12:59:DD:47
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:33:d2:eb:f5:3a:aa:d8:57:9c:b6:6f:fb:6b:26:39:ac:f4:
3e:e9:8a:60:10:8d:95:f9:d6:fe:84:c1:a2:1f:e2:68:a4:70:
00:92:41:5a:3f:05:99:b8:f1:2f:56:b2:3a:65:60:17:5d:b9:
0e:2b:01:a5:08:81:50:ae:60:98:90:5c:02:00:d1:0d:56:46:
47:3b:42:76:27:aa:e2:9e:0f:cf:ed:70:4f:9a:74:c5:9f:a6:
f9:4c:43:0a:b6:ff:db:d2:28:f5:2c:85:6d:ca:28:67:0c:64:
4d:c2:e0:8b:6b:5e:58:c5:07:f8:41:43:6e:a3:19:58:40:39:
64:f8:b4:b6:92:7b:2e:9e:10:76:40:ec:b7:39:6a:73:45:bd:
87:5e:2c:eb:c3:97:10:aa:65:ae:84:ef:32:b9:7a:e3:7b:fb:
f8:8f:cc:39:cc:ea:74:05:38:95:8a:51:64:12:a6:81:35:10:
cf:aa:be:be:84:f6:b9:fa:93:56:14:28:03:53:c7:0e:17:88:
07:01:ff:40:d1:f6:79:0f:0a:d7:5a:7b:e9:a1:25:f7:92:40:
f6:ba:0e:ff:d6:2a:ad:68:7c:64:0f:46:8f:bf:5b:36:d6:85:
7c:4d:7c:77:80:e2:85:fd:02:68:6d:b7:0f:0b:95:83:77:f7:
5e:55:50:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjGf7/7kSxiIJHMoDg8w0+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMThhYTFmNTVkNjM1Yzk2MjA0Y2E3OWE4Mjk5M2ZiY2Vj
MTUxMmMwHhcNMjUwODIwMDgwMTU3WhcNMjUwODIxMDgwMTU3WjAzMTEwLwYDVQQD
EygzYWY5ZGVmMGFiY2ExYWUyZmNmMDQ2ODMwZjcwYTg2MjEyNTlkZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6nBzD3ENOAxl0PI5dyYkDuhVKRi
nhNTM4bLU6F4aLM/Ri7DYMibiQHOF/+qjWBz6A/JqRn7+iBX4pdx6AYVImYlS8bL
9cqExIrRpXa0mhdKnVO+MvGXiz0o9HU3/pI7lpvnm3oFW/ESRFkMxl4V5vkcbmow
+6Fdv0Y+8tj/mNCkaZQm27PIujmYaiauOG2P/2fc8cAL3n+CzkEVjVAxXhMsBmJM
BzA/mzpIiG0zj7jXlPdF2FBmV8zX/0NqCCdJSb5mE0UwLEJnbUfAYF5eGvVOVPD0
eGVls4qf6WPP8gzXubIZerwpvDKlsWH884u1doF7lKgL5dFK/GM5u38VNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr53vCryhri/PBGgw9wqGISWd1HMB8GA1UdIwQY
MBaAFC8Yqh9V1jXJYgTKeagpk/vOwVEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzIt
MGQyMDVmYjFhZDA1LzEvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzItMGQyMDVmYjFhZDA1
LzEvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDPS6/U6
qthXnLZv+2smOaz0PumKYBCNlfnW/oTBoh/iaKRwAJJBWj8FmbjxL1ayOmVgF125
DisBpQiBUK5gmJBcAgDRDVZGRztCdieq4p4Pz+1wT5p0xZ+m+UxDCrb/29Io9SyF
bcooZwxkTcLgi2teWMUH+EFDbqMZWEA5ZPi0tpJ7Lp4QdkDstzlqc0W9h14s68OX
EKplroTvMrl643v7+I/MOczqdAU4lYpRZBKmgTUQz6q+voT2ufqTVhQoA1PHDheI
BwH/QNH2eQ8K11p76aEl95JA9roO/9YqrWh8ZA9Gj79bNtaFfE18d4Dihf0CaG23
DwuVg3f3XlVQYQ==
-----END CERTIFICATE-----
Generated at Wed Aug 20 15:30:52 2025 by rpki-client