Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
File: LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json)
Hash identifier: em5aBxU5fQeo9t8DI5/vRQLEj1DYq5h4ZzFfFwZnaLQ=
Subject key identifier: DD:CB:3A:18:AC:DD:63:70:5B:95:07:A2:4F:D0:4A:B9:88:9F:07:27
Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
Certificate issuer: /CN=2f15d78b256d28459b869b726f23294ab3ff173f
Certificate serial: 019A2477D22DD0AC6983A6E2AE3758804672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
Manifest number: 071C
Signing time: Mon 27 Oct 2025 07:00:23 +0000
Manifest this update: Mon 27 Oct 2025 07:00:23 +0000
Manifest next update: Tue 28 Oct 2025 07:00:23 +0000
Files and hashes: 1: GsPXdLp5QJlWkWRdf0s9RY21G1E.roa (hash: nU6YD2kez+ifewp2jdSiMb6xmsln2dG1JjZlNr4WuwQ=)
2: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: SQCoYV7P58E3g8/rDoArPjTSgeoBLcJK2ScX2Zz5GnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:d2:2d:d0:ac:69:83:a6:e2:ae:37:58:80:46:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f
Validity
Not Before: Oct 27 07:00:23 2025 GMT
Not After : Oct 28 07:00:23 2025 GMT
Subject: CN=ddcb3a18acdd63705b9507a24fd04ab9889f0727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:22:23:7b:e9:4f:1d:dc:3a:eb:55:fc:f1:
50:d8:ff:d6:42:d2:bf:21:9e:69:5d:7b:d2:ee:02:
30:01:ce:da:0d:5e:49:01:8d:2f:65:9b:e3:f8:80:
b8:e8:f4:ce:18:ab:c5:94:0b:a0:3e:11:fc:58:1b:
07:c3:dc:08:8b:ef:af:f2:08:6f:69:50:f9:21:78:
9c:40:73:d5:b5:1c:ea:fc:69:0f:c1:a7:2c:8a:9f:
df:53:26:78:5c:53:2d:17:e9:b4:d6:df:72:bb:54:
5e:7c:1d:2c:28:6b:0f:65:01:6c:e7:d0:4a:c8:c9:
37:46:ad:8c:c0:51:2e:c4:2c:19:ec:13:3d:cc:2e:
aa:eb:46:bf:7b:49:97:3b:bd:04:e2:3b:4c:ed:35:
86:e1:c7:b8:e9:38:ad:21:86:7a:bf:38:7a:fe:48:
72:1d:85:85:4d:d1:f3:ba:58:09:15:70:04:e7:79:
da:82:2e:e3:b0:8f:37:e0:a9:f9:41:5f:e0:53:f1:
23:93:b4:71:05:81:1a:30:de:4a:ec:22:f4:c6:60:
77:81:fe:4b:1f:90:c7:df:10:3d:1e:33:21:8d:b0:
c1:c2:40:a7:44:c2:f5:f6:e0:74:7b:eb:13:3a:67:
e3:e7:22:de:aa:db:f1:c9:df:a6:e9:f4:d9:60:3a:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CB:3A:18:AC:DD:63:70:5B:95:07:A2:4F:D0:4A:B9:88:9F:07:27
X509v3 Authority Key Identifier:
keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:78:84:11:92:3e:e6:db:8d:73:44:3c:de:cd:b6:a5:7d:40:
94:5a:c0:9f:24:c7:89:57:82:9a:e4:64:7c:41:77:4f:25:cd:
6b:fa:7f:11:e3:18:1b:b6:de:2c:b2:f1:7c:5b:7b:5e:04:dd:
cb:ce:0d:9e:2e:cb:49:84:31:51:86:cc:21:b1:ac:f5:4c:18:
86:ae:c5:65:f1:8c:5f:34:c2:bd:1a:e3:99:50:7c:06:8e:04:
b6:80:ef:45:b6:3b:db:e2:3f:4a:28:a8:06:10:bb:9c:36:cc:
a9:dd:1f:7b:81:fc:8f:90:9a:a7:35:44:51:db:ab:52:06:8a:
48:7b:6f:ac:48:64:42:7e:af:37:2c:ce:73:c3:c1:66:f3:3d:
2f:1a:4b:41:ba:d4:a0:56:e1:9e:3e:03:33:c4:0b:d2:cd:61:
5c:72:6e:ed:d8:8c:37:a4:a3:65:b6:3a:1c:15:63:c9:73:cc:
91:e8:1d:17:84:e8:2f:de:ff:24:07:a6:3b:ec:7b:8f:8d:a2:
cb:5b:36:7f:03:12:ca:8c:93:63:97:35:c2:c2:48:04:0f:7f:
00:21:98:32:bb:b8:0b:1a:f8:c2:9a:93:a1:2a:75:0e:81:44:
e8:69:02:7f:b0:18:be:70:c8:cc:f3:7f:ac:b5:c3:55:b8:d4:
a8:b0:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:34:38 2025 by rpki-client