
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: Avi0FOgjf2KZJXCD8cLd9Fd77Tb8xckGkUkEAv7aThM=
Subject key identifier: 18:9D:17:C2:A4:4F:F1:CA:56:50:14:0B:78:19:AA:FB:FB:B6:3B:BB
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 01974AE90F815397AE339A4A2C45EA395FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 15:01:17 +0000
Manifest this update: Sat 07 Jun 2025 15:01:17 +0000
Manifest next update: Sun 08 Jun 2025 15:01:17 +0000
Files and hashes: 1: 6wuoxtQ9bA6opmTkPy5nyUw0MFc.roa (hash: yaei0hfQngE+ZuEYmOizBFXF772vW3jT8cVqsppYXew=)
2: Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa (hash: YJd5NF7BnIFbCJZm98sSNpBsaL371EEDxMPWmL/C3GQ=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: UfTn0rY4FQhtYBQzYXEjJDPgGu3LyU1OqYL90vVwraM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:0f:81:53:97:ae:33:9a:4a:2c:45:ea:39:5f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Jun 7 15:01:17 2025 GMT
Not After : Jun 8 15:01:17 2025 GMT
Subject: CN=189d17c2a44ff1ca5650140b7819aafbfbb63bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:e8:5d:02:f3:30:75:41:e1:f7:de:39:3f:
0d:18:70:94:e0:11:78:31:26:fb:f2:85:8b:61:14:
d5:02:00:7c:42:2e:af:4c:df:88:48:1a:54:c9:c3:
e2:12:1b:fc:b0:8d:75:53:d5:b4:1e:a7:d7:ff:d5:
3c:db:1b:7f:61:41:e6:b8:fe:d0:e7:f6:c7:df:5c:
6c:03:a0:07:c1:41:a4:f0:89:ff:d0:75:58:16:38:
c4:0a:a7:9e:67:d1:72:4b:38:5a:ce:5c:4d:b9:76:
a4:57:2c:e0:92:d9:8f:42:af:a4:21:8c:18:df:0f:
61:f5:92:ff:d7:8e:5b:ce:ec:c5:d5:4d:98:cf:8a:
00:11:82:ba:37:dc:b1:29:79:e5:f6:d6:21:3b:0c:
22:a1:2f:00:66:30:46:fb:08:dd:de:15:d4:8f:ef:
ac:89:0e:44:c8:1b:73:f4:d2:fa:ad:03:45:74:d4:
ef:51:ca:1e:4c:17:75:a0:9c:58:05:5c:04:ba:ad:
60:d4:3e:80:3a:71:ad:91:92:dc:1d:8c:bb:2d:dc:
e9:99:a8:60:72:05:76:c8:2c:4e:4e:0b:a9:6d:e7:
d6:4c:55:b5:19:ec:1b:be:ce:9c:ec:06:57:80:25:
41:6e:c0:e3:08:4f:37:76:88:03:96:08:39:65:24:
10:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9D:17:C2:A4:4F:F1:CA:56:50:14:0B:78:19:AA:FB:FB:B6:3B:BB
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b6:e7:00:a8:27:60:40:1a:eb:86:6f:7f:d1:7b:54:17:87:
65:8a:d6:dd:a2:48:32:03:5c:3f:70:51:08:70:ee:cb:99:34:
9a:c9:c1:c9:f6:9b:19:de:23:95:e9:3b:64:9e:8d:0e:30:51:
f5:51:a9:a1:9b:9d:a2:22:9a:06:ed:19:a7:35:36:4f:02:06:
c3:6a:e6:d6:9c:77:98:c0:8b:8b:c0:49:51:65:54:a9:b4:d6:
04:06:fd:af:cb:c7:cb:a5:49:48:61:68:12:b0:fb:23:16:15:
b2:4c:b1:a0:5f:f7:c0:02:62:32:76:6a:cd:0a:a2:f4:02:5d:
e5:6c:91:d1:49:2a:5d:3d:09:da:74:0b:81:d4:e8:fd:de:ac:
3c:c6:8e:0e:4e:8b:91:b2:d4:ec:84:59:94:f4:85:94:46:8b:
da:09:33:53:24:e5:02:ce:72:68:b3:1c:a4:42:9b:7a:78:93:
d9:04:6b:89:c4:2b:e0:ef:5c:e8:93:17:98:75:24:73:87:07:
2f:68:53:d6:eb:8c:37:f3:e5:7c:2a:8b:f7:e2:64:b8:70:7e:
cf:57:17:ff:8c:78:d2:04:bb:0f:bf:62:8f:4f:8d:3a:1b:e7:
74:d0:bb:c9:eb:ec:7b:42:7c:6f:0d:37:1c:e9:41:2b:7c:45:
07:76:d9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:01:14 2025 by rpki-client