Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: djcVg3j+rbW+JPZV3/BoA6W/L5I1QhNfs56oGQ4ZX04=
Subject key identifier: 96:18:29:F9:C9:E4:15:52:ED:CD:0C:8B:9C:B9:8A:F9:83:6D:61:FE
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 0197485580B167F8105BA5149589D96A093A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 03:00:52 +0000
Manifest this update: Sat 07 Jun 2025 03:00:52 +0000
Manifest next update: Sun 08 Jun 2025 03:00:52 +0000
Files and hashes: 1: GPUtwAKGNzSr8rbND1H2VHmziE4.roa (hash: wN90966l4XV79/BKSCd9OwNn9HsZ4W1mhOHAW0ThFWA=)
2: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: eqPcV3TOEKML4hyX9cuts1nGZuxuGbMVayHJs0iZtgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:80:b1:67:f8:10:5b:a5:14:95:89:d9:6a:09:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Jun 7 03:00:52 2025 GMT
Not After : Jun 8 03:00:52 2025 GMT
Subject: CN=961829f9c9e41552edcd0c8b9cb98af9836d61fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:6c:b3:f6:ac:78:42:d8:7d:d5:6f:44:51:
1d:e5:76:cf:8f:96:a5:28:07:5b:c1:aa:01:4d:3d:
f0:5c:21:a3:d7:73:1f:76:f1:a0:b6:0b:f8:a9:c0:
db:99:92:70:6c:95:75:20:7f:89:38:73:e6:20:3e:
c5:0c:5b:69:30:89:11:eb:ca:e1:df:8b:fa:55:3e:
1c:1e:2a:cb:db:6a:9b:56:16:a9:92:57:fe:27:06:
af:04:bf:dc:2c:15:28:ab:f4:f6:55:e8:51:e9:15:
88:6e:61:1c:44:49:f3:70:fa:ee:60:e9:dd:f8:5b:
b5:fc:55:e7:ef:d5:93:a5:15:06:bb:30:3f:7d:9c:
c3:30:4f:d8:ff:1f:ff:60:94:49:c6:ea:bb:0d:28:
c0:c5:8c:2f:ad:25:17:1f:c1:cd:ff:f7:e9:7e:91:
30:50:bb:c6:58:9c:cc:d5:e7:0a:19:ad:13:68:87:
41:cd:0b:bc:c3:a3:16:ed:5b:8f:79:94:88:9b:05:
d2:40:ba:08:2a:2f:56:0c:ee:f8:96:74:70:d6:9d:
53:df:a8:10:bd:02:c5:61:b1:1c:88:2a:f6:8f:05:
df:f8:09:05:15:cc:0b:2a:21:37:de:31:ff:26:b3:
2c:36:50:71:12:aa:1b:c2:52:c9:5e:ac:b2:d9:9d:
25:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:18:29:F9:C9:E4:15:52:ED:CD:0C:8B:9C:B9:8A:F9:83:6D:61:FE
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f4:a6:d8:0f:0a:dc:ab:8e:81:35:ca:af:c8:fc:9b:1f:aa:
5d:b9:97:ad:1b:eb:8f:27:74:0d:58:35:29:0d:61:c4:63:c1:
a2:73:3f:cb:7f:f4:fd:f5:7f:d8:66:e0:e2:ae:a1:bd:67:65:
45:bd:54:d9:2f:39:f2:1a:13:5d:86:16:fc:ae:f4:94:e9:08:
8b:0f:a7:94:f7:c8:17:21:1f:d8:12:2b:54:af:c4:cd:11:64:
6d:18:93:ba:ac:1c:02:79:37:f2:0f:15:9a:31:d2:1e:15:65:
3f:d7:f2:fd:5f:71:20:69:1d:59:00:22:18:5e:3c:c3:a0:cc:
3c:f0:41:ae:f1:ba:cb:b1:61:36:c9:3c:ef:b0:9b:e0:1f:b0:
ab:86:4c:3c:0b:da:de:52:fb:ee:48:c3:50:b4:e6:0b:3f:96:
89:07:fa:fb:e3:54:80:42:94:ae:da:3c:ee:a6:e0:c7:1c:1f:
89:f7:c3:aa:b5:96:d3:c2:41:f0:16:f3:01:31:57:c4:16:4d:
b2:9c:ab:5a:e8:0f:3b:51:3c:61:07:1d:ff:a9:3b:61:db:2e:
40:27:23:25:f7:56:9f:9c:d6:a3:6d:fa:a7:d6:fe:79:3c:ee:
bc:e4:2a:45:c6:3c:b2:f9:8b:68:fa:ce:4e:ca:54:e3:ad:eb:
54:c5:e3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:08 2025 by rpki-client