Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: UPDcLi4fX6SLkRfkH6ZhKUNbgLoKvGina13OaMEAjKY=
Subject key identifier: 33:80:89:CA:98:7B:41:3F:65:48:91:DA:E9:78:F3:3D:B4:9E:19:34
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 019A71B97D7407FCF60AA4C75ABCB734CEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:02:52 +0000
Manifest this update: Tue 11 Nov 2025 07:02:52 +0000
Manifest next update: Wed 12 Nov 2025 07:02:52 +0000
Files and hashes: 1: GPUtwAKGNzSr8rbND1H2VHmziE4.roa (hash: wN90966l4XV79/BKSCd9OwNn9HsZ4W1mhOHAW0ThFWA=)
2: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: tKi6lN9rHgV7amgDCcU//U5dXLeZIvoNtJpeHOi0wf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:7d:74:07:fc:f6:0a:a4:c7:5a:bc:b7:34:ce:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Nov 11 07:02:52 2025 GMT
Not After : Nov 12 07:02:52 2025 GMT
Subject: CN=338089ca987b413f654891dae978f33db49e1934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:b3:66:f2:0e:12:50:c3:22:3b:47:7c:2a:
f3:ae:7c:82:15:8e:1e:31:b4:43:da:8a:a4:7f:5b:
6a:f4:f9:0d:9b:23:d2:a3:e8:ef:8b:6b:e8:6a:5f:
4a:b8:08:5a:4c:23:50:0d:05:fb:55:15:c0:11:e4:
c1:2d:4a:ed:b1:e3:2f:cb:6c:31:39:64:d5:50:34:
5d:3b:8e:3e:6d:1a:23:81:5d:0b:fc:2b:27:fe:c1:
b9:fe:73:27:ea:7e:02:36:65:15:b7:b7:ab:01:53:
ba:42:ed:55:4f:38:e7:86:2b:8d:cd:8d:91:ba:cd:
e5:c4:c1:97:18:ca:6c:ef:3d:96:5e:27:78:a2:6d:
ed:e3:ca:ab:71:9c:8c:37:61:09:8a:97:12:9c:3f:
48:5b:0e:e0:43:e2:32:4b:62:c0:a5:2f:dc:92:6e:
e0:03:be:03:1d:dd:db:6e:67:af:05:9a:90:b2:c1:
cc:e5:8c:f0:9b:62:f2:19:ab:84:6a:71:d9:72:24:
8c:6c:05:4c:94:5e:2d:96:ca:2e:21:c1:6d:08:91:
f1:4c:53:e1:04:f3:36:97:7a:e3:51:68:f8:43:9a:
31:72:bc:be:93:37:55:d3:88:a0:b7:af:04:16:a6:
3f:46:da:b5:36:92:61:86:ef:d9:b4:c0:94:1a:8d:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:80:89:CA:98:7B:41:3F:65:48:91:DA:E9:78:F3:3D:B4:9E:19:34
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:67:8f:ba:74:4a:5d:86:db:82:e8:16:ab:8d:30:f8:17:51:
d3:0b:11:64:25:7c:a2:f1:18:ca:d5:19:09:b3:4c:d0:00:74:
b6:0d:61:67:d6:aa:e9:4d:94:3d:71:a5:73:bb:eb:f0:d0:fd:
4c:9b:db:ea:29:66:e7:a3:86:fe:6f:25:a6:3c:5e:19:86:20:
cf:31:54:69:7b:4c:8f:bf:e1:87:15:73:71:95:b5:6b:7a:10:
2b:a0:b6:68:e2:32:b6:93:f1:c9:32:c0:39:90:5b:96:0a:71:
43:db:56:1a:d4:a0:c2:b7:ee:ad:77:d4:85:f6:93:71:db:9c:
0a:10:7e:d3:53:96:50:9f:9d:7b:bc:9e:f3:58:12:4d:83:27:
78:7a:c6:d3:58:f8:3d:a5:81:ec:0d:f7:e3:09:ce:73:7f:2b:
a0:06:4e:44:ae:bc:34:f9:fa:90:08:4b:5c:ba:5d:17:fd:26:
86:e5:95:bd:7d:05:29:ba:26:bb:86:6e:97:5d:c9:33:18:ac:
d1:4c:da:dc:e9:34:d8:da:7d:c0:12:61:d0:f1:5d:15:d3:47:
05:70:c7:2f:d0:16:7b:96:99:a5:78:3f:2e:f0:91:b4:ce:aa:
8c:87:14:b4:0e:57:e8:40:c8:db:a1:58:5d:d8:35:05:c2:a6:
06:0b:00:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:36 2025 by rpki-client