Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: cErZ2AvjgalKdt60n0AllEdcFQDX8eG0MPJQlSatPAI=
Subject key identifier: A6:7E:91:28:70:BA:43:3C:17:41:BD:6B:E1:45:E9:40:5A:51:66:2E
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 0199356E639FEBD40B5E21985A60651B2523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 21:00:50 +0000
Manifest this update: Wed 10 Sep 2025 21:00:50 +0000
Manifest next update: Thu 11 Sep 2025 21:00:50 +0000
Files and hashes: 1: 6wuoxtQ9bA6opmTkPy5nyUw0MFc.roa (hash: yaei0hfQngE+ZuEYmOizBFXF772vW3jT8cVqsppYXew=)
2: Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa (hash: YJd5NF7BnIFbCJZm98sSNpBsaL371EEDxMPWmL/C3GQ=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: 0+HqsQVqwYbcMK6O5pi3UeM/ZVjdsrcmN34qeHZajPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:63:9f:eb:d4:0b:5e:21:98:5a:60:65:1b:25:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Sep 10 21:00:50 2025 GMT
Not After : Sep 11 21:00:50 2025 GMT
Subject: CN=a67e912870ba433c1741bd6be145e9405a51662e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:ed:28:29:b0:d3:80:f1:d0:f4:ea:a5:fc:
90:48:ab:56:55:cd:c5:c3:6c:8d:81:a0:38:1b:cc:
c8:29:ca:47:22:b6:d7:92:ed:73:b5:0d:ca:29:0c:
4c:96:7f:ef:c3:71:de:54:d0:29:af:42:e1:6c:fe:
c2:ec:35:14:3d:e0:55:32:76:fa:8e:90:0c:4d:89:
d1:b7:b4:1d:86:d2:c2:9c:f3:f8:d3:08:75:bc:02:
c2:21:c4:9d:97:3c:e7:f1:db:77:21:b6:66:6c:e3:
e8:dc:97:36:46:dc:90:6e:fd:8c:e0:5b:b4:98:58:
45:1f:4a:4e:af:84:08:2b:cb:bd:f7:4e:b1:96:a1:
fe:f2:11:66:d7:d2:d9:cc:52:5c:19:80:31:9a:6d:
e4:60:8d:f2:2a:19:22:d5:4e:04:cc:9d:69:79:b1:
16:07:63:4d:d0:57:58:7a:85:d1:2d:59:27:fa:b1:
2e:fb:65:07:9a:31:c6:3e:c0:98:3f:90:06:83:55:
3d:a8:99:82:23:5c:a5:4a:07:ba:a0:b0:28:76:7b:
1b:bf:2b:30:b8:d4:0e:60:cf:b0:f7:83:9b:24:b1:
69:37:fd:47:18:af:aa:32:21:c0:aa:e0:20:c1:ba:
41:76:fd:87:15:3d:09:02:0f:6b:f5:33:23:f4:c5:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7E:91:28:70:BA:43:3C:17:41:BD:6B:E1:45:E9:40:5A:51:66:2E
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f2:ea:1f:16:1d:bb:65:18:35:0b:2b:f9:e5:44:82:83:1e:
ac:90:83:0e:7c:e0:f1:fc:c7:74:3c:06:2d:0f:9e:c7:ff:e4:
ac:9b:3d:97:ba:d1:bf:b0:8d:28:aa:69:5f:61:47:17:a0:f2:
05:70:21:60:87:d9:37:58:20:c2:61:dd:29:4c:0d:3c:91:12:
aa:49:d1:a1:42:a5:c9:98:c9:a6:ba:de:98:2c:1a:a8:14:74:
c8:74:09:7c:f7:68:0e:9d:20:ff:b6:cf:69:d9:bc:9c:28:ec:
18:df:f4:19:af:e7:14:f3:e9:89:0b:f8:32:88:c9:a3:3e:a3:
70:cd:72:e1:7d:7b:77:8d:3d:c5:72:1d:ec:19:48:61:78:25:
90:77:d7:e9:65:b1:08:c3:b1:69:c4:6c:f1:4a:7d:ca:fa:71:
ff:82:4c:2d:3a:bf:13:37:0f:47:2b:8c:b1:0d:1c:41:29:de:
a9:a7:56:aa:74:f0:02:95:00:c3:30:f6:ac:ca:a8:4a:93:f9:
3f:38:d9:bb:2f:38:e7:3f:ed:9e:cc:da:c1:7d:7b:b0:7f:21:
22:52:8d:83:96:08:1f:4d:de:c0:f2:92:d9:4f:c8:41:1a:d6:
82:eb:c7:28:91:c7:00:d9:fb:9c:79:a9:4f:6c:05:0f:40:43:
83:48:e2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:03:20 2025 by rpki-client