Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: 5VNUZWyg9ptK81vIhgXvjolEaWHFiDJvz9FBcUyPz28=
Subject key identifier: A7:E6:C5:66:27:65:4C:B0:1A:49:68:21:D3:96:5C:EA:F1:02:AC:02
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 019A22F7D7E1A51654A50266F97F58D0A429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 00:00:59 +0000
Manifest this update: Mon 27 Oct 2025 00:00:59 +0000
Manifest next update: Tue 28 Oct 2025 00:00:59 +0000
Files and hashes: 1: 6wuoxtQ9bA6opmTkPy5nyUw0MFc.roa (hash: yaei0hfQngE+ZuEYmOizBFXF772vW3jT8cVqsppYXew=)
2: Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa (hash: YJd5NF7BnIFbCJZm98sSNpBsaL371EEDxMPWmL/C3GQ=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: es+e6kFnEp1Vu4e15dpacnNqO7zL8+J82ZrhyDS7loA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:d7:e1:a5:16:54:a5:02:66:f9:7f:58:d0:a4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Oct 27 00:00:59 2025 GMT
Not After : Oct 28 00:00:59 2025 GMT
Subject: CN=a7e6c56627654cb01a496821d3965ceaf102ac02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e5:fc:3d:6c:a8:89:68:e9:4e:0f:cd:a9:ae:
bf:b4:cb:04:e0:de:2b:ad:13:34:7f:8f:0c:f6:f4:
63:d8:be:07:d3:1a:10:c1:35:65:24:4d:66:d2:7c:
aa:6b:ca:b7:7f:75:03:92:eb:f7:ad:97:c6:fd:a5:
ff:7b:b9:d7:4b:f3:f6:c3:f3:5a:4c:3c:6f:ac:7a:
04:b3:e5:83:24:a4:92:5a:45:95:3b:de:d6:70:9e:
b8:0f:e9:8d:9f:e5:75:ad:9f:3f:41:a8:c9:6e:91:
05:af:97:c1:e3:0f:e1:05:14:ad:fd:b0:e4:2a:68:
e4:1a:d3:3b:57:02:aa:23:73:ee:9d:86:fb:1e:50:
0a:60:a0:91:a3:7f:a7:39:23:bf:99:93:57:d8:02:
0c:75:b5:e2:f3:33:d1:23:39:eb:cc:3b:f6:cf:22:
10:02:c2:b2:b0:e8:05:3e:c2:9b:7b:8e:5d:a3:28:
0d:d9:bd:5f:85:0c:10:7d:ac:a0:20:10:09:9b:aa:
3a:9e:04:15:78:27:71:2e:44:9f:01:d8:d7:85:20:
01:be:2c:5b:2d:bb:85:dd:62:c6:24:31:ad:63:20:
a5:c6:62:17:2f:d2:45:c6:28:f8:f0:ad:05:03:80:
98:2e:31:5e:b1:c7:71:a2:49:41:57:16:7a:21:9a:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E6:C5:66:27:65:4C:B0:1A:49:68:21:D3:96:5C:EA:F1:02:AC:02
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3d:d8:52:9d:59:d8:3e:db:6d:b2:c9:13:1d:a2:6b:2b:9f:
e6:54:c4:33:72:93:2a:19:49:cd:54:e9:20:0d:04:d6:00:57:
8a:18:90:5c:8d:e2:55:ea:15:de:18:9e:d3:b0:e4:3a:6c:e1:
84:e5:9c:92:77:7c:29:35:ee:bb:91:05:45:2a:52:98:f1:8a:
fc:9d:bc:79:ad:97:61:69:d0:14:a2:70:d0:a7:ad:cc:f7:ee:
39:21:79:e8:52:f5:ab:13:d2:ea:9f:bc:c0:5c:d7:a6:be:f0:
90:e0:e3:02:a9:ff:39:78:1c:da:4f:30:ed:e8:2e:a8:ff:27:
b5:14:88:3a:05:06:78:b9:d1:f1:91:8e:39:f9:cb:c8:92:22:
71:94:13:12:e1:b3:63:04:c7:43:bb:90:68:1d:1b:c8:7c:3b:
ee:c1:98:61:cf:aa:2d:07:81:a6:4d:c4:4a:6e:ce:b7:b8:7f:
61:da:9c:f8:a4:d7:ca:b7:89:be:4f:29:9d:3c:95:45:32:cc:
69:a8:c8:5a:06:4f:77:85:9a:94:fb:2d:e6:3b:16:a8:44:8e:
4c:01:ef:14:64:46:1b:86:54:50:f3:98:aa:21:34:ab:74:63:
17:ab:19:77:9c:7e:71:7f:22:fe:fd:14:2e:a9:44:0e:e9:21:
51:49:43:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:43 2025 by rpki-client