Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: E2nSpVBunhIher+3CyXjuMBWGgm7UlxXlcO2ybZCOqY=
Subject key identifier: 76:38:3B:AE:25:6D:50:F3:7E:2E:9D:57:EA:FD:D8:C9:5F:64:22:25
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 01993795124969A0BB6C7D55AA83FA6DDC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 167F
Signing time: Thu 11 Sep 2025 07:02:20 +0000
Manifest this update: Thu 11 Sep 2025 07:02:20 +0000
Manifest next update: Fri 12 Sep 2025 07:02:20 +0000
Files and hashes: 1: Ai3_NgCb2mwvHHHWVo7OjI6Wj04.roa (hash: mxmvKEH6k3H+fHWxr8AaesSD9p5zVNhT7qFX1XU+vIQ=)
2: EZLjMnt3YY1uGOfZ3nimgNl-yLU.roa (hash: Ko07ZGo7IwS8NL/yJPyHpJ9m0iW9ngaJs3DqWmHrpi0=)
3: RIQPOEjptB8udCiUyrk1eA7kGsQ.roa (hash: iUSixJ9qOvizzSlye8GPbxagX4TAp65dTuqFovVtZ00=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: LTZlmyk9vP8ODASIkWheGUm7PxGaX0ntX0ImcaQLDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:95:12:49:69:a0:bb:6c:7d:55:aa:83:fa:6d:dc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Sep 11 07:02:20 2025 GMT
Not After : Sep 12 07:02:20 2025 GMT
Subject: CN=76383bae256d50f37e2e9d57eafdd8c95f642225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:c5:1c:59:92:55:2d:47:3b:5f:31:6b:48:
64:1b:af:90:55:9a:d2:07:1b:db:af:a6:10:82:eb:
85:f1:72:c6:f5:00:7b:d5:1a:f8:b9:be:37:c4:0e:
46:7a:eb:94:85:cd:60:0e:c9:f6:c5:69:1d:26:31:
1a:ce:b9:01:a7:4d:6a:68:55:b1:04:e4:71:3a:09:
b0:ba:97:cf:ba:c5:4c:e6:c6:40:37:cb:0b:8d:68:
5a:0f:e9:29:15:d0:4e:d9:d2:f2:d3:14:4d:31:8b:
ef:f8:23:fb:29:db:92:bd:9a:6c:79:af:48:0c:a1:
12:1b:94:ac:d9:96:ff:f6:52:5e:4b:2e:a2:6d:b4:
44:8e:78:c3:6b:1d:19:2c:78:9f:45:28:c2:a8:1d:
53:e3:7a:24:90:85:ae:a3:fe:5e:b8:d5:04:a0:6f:
17:d9:13:36:46:db:af:e9:0d:a5:90:66:5e:0c:fe:
43:18:3b:c4:3e:dc:f8:5b:03:f4:f0:b4:86:b7:ed:
af:b8:83:9a:b1:d0:af:72:84:cc:2b:6c:b6:5a:b1:
8e:59:64:ee:70:fc:ff:75:96:e1:0e:10:09:10:64:
f8:2b:93:3f:ba:35:d9:92:d1:93:4e:2b:30:90:c8:
d5:3d:2e:bd:af:90:20:27:9e:a7:ab:7a:5c:e5:87:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:38:3B:AE:25:6D:50:F3:7E:2E:9D:57:EA:FD:D8:C9:5F:64:22:25
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:07:70:4d:5d:ff:9e:9a:4b:32:a1:dc:60:5a:a7:c0:0f:29:
e3:74:89:0b:76:ed:68:33:10:66:cd:f6:97:13:b3:a5:6e:62:
8a:80:92:9b:1a:b1:ad:ba:2e:18:ff:e8:53:57:b4:25:d9:52:
a8:94:e3:ea:2b:3c:76:fe:6c:5d:45:83:90:f5:fb:95:b6:5d:
d8:4f:b3:ec:a9:f5:3a:d4:c9:8f:75:b5:ec:0c:aa:ff:ad:cb:
a9:4e:34:c0:d7:7c:24:ad:5e:b3:0e:80:5f:43:dd:82:a1:19:
7f:a0:65:6f:58:1d:07:a9:ac:a5:dd:e9:45:e0:0f:77:72:c9:
a0:25:f0:c0:f5:0d:9b:ea:e5:15:16:05:fa:e8:f5:80:df:01:
42:70:81:54:a8:00:f4:34:ce:49:a5:7b:fc:08:e1:fb:6b:d6:
5b:df:d1:5a:75:3e:b9:69:77:1f:15:b7:c3:7e:18:a6:b0:49:
44:52:95:ce:37:2b:5b:f0:13:55:5f:d7:4d:a5:49:20:1d:bc:
9b:b0:26:10:25:11:d2:0d:38:0b:96:5a:a5:bc:8d:00:a4:d9:
1b:69:6d:c3:89:80:7c:e8:4f:2e:f3:b9:57:21:9f:d8:36:3a:
ab:f9:d5:55:0f:11:12:33:d1:9f:bd:8e:d1:d0:69:f2:e7:e6:
0e:fe:89:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3lRJJaaC7bH1VqoP6bdwtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MWFlZWVhODc5OGY3NmVjOWE0MzRlNzU2MzdlY2Q4ODEw
OTJlYzIwHhcNMjUwOTExMDcwMjIwWhcNMjUwOTEyMDcwMjIwWjAzMTEwLwYDVQQD
Eyg3NjM4M2JhZTI1NmQ1MGYzN2UyZTlkNTdlYWZkZDhjOTVmNjQyMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhvFHFmSVS1HO18xa0hkG6+QVZrS
Bxvbr6YQguuF8XLG9QB71Rr4ub43xA5GeuuUhc1gDsn2xWkdJjEazrkBp01qaFWx
BORxOgmwupfPusVM5sZAN8sLjWhaD+kpFdBO2dLy0xRNMYvv+CP7KduSvZpsea9I
DKESG5Ss2Zb/9lJeSy6ibbREjnjDax0ZLHifRSjCqB1T43okkIWuo/5euNUEoG8X
2RM2Rtuv6Q2lkGZeDP5DGDvEPtz4WwP08LSGt+2vuIOasdCvcoTMK2y2WrGOWWTu
cPz/dZbhDhAJEGT4K5M/ujXZktGTTiswkMjVPS69r5AgJ56nq3pc5YdDLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHY4O64lbVDzfi6dV+r92MlfZCIlMB8GA1UdIwQY
MBaAFJca7uqHmPduyaQ051Y37NiBCS7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4Njkt
YmRmNTVkYjRhOTBhLzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4NjktYmRmNTVkYjRhOTBh
LzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAdwTV3/
nppLMqHcYFqnwA8p43SJC3btaDMQZs32lxOzpW5iioCSmxqxrbouGP/oU1e0JdlS
qJTj6is8dv5sXUWDkPX7lbZd2E+z7Kn1OtTJj3W17Ayq/63LqU40wNd8JK1esw6A
X0PdgqEZf6Blb1gdB6mspd3pReAPd3LJoCXwwPUNm+rlFRYF+uj1gN8BQnCBVKgA
9DTOSaV7/Ajh+2vWW9/RWnU+uWl3HxW3w34YprBJRFKVzjcrW/ATVV/XTaVJIB28
m7AmECUR0g04C5ZapbyNAKTZG2ltw4mAfOhPLvO5VyGf2DY6q/nVVQ8REjPRn72O
0dBp8ufmDv6Jdg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 11:46:11 2025 by rpki-client