Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
File: LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft (raw, json)
Hash identifier: LMxQSvb/5WpUItCamGtuFWdKFwR2P24iRPsNaew0TNw=
Subject key identifier: 79:1D:06:2F:A5:BB:E0:6F:2A:37:3D:59:82:C2:EC:E7:CC:F6:7D:63
Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
Certificate issuer: /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Certificate serial: 01974AE885041F22C0DC4D86EC91D3028BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:00:41 +0000
Manifest this update: Sat 07 Jun 2025 15:00:41 +0000
Manifest next update: Sun 08 Jun 2025 15:00:41 +0000
Files and hashes: 1: J1sR_X7OX5sAAqL6nR2mRajFZCc.roa (hash: JEROqpt8+G0T5t0g0HCpE0svxugQA9UuID00O94SMT0=)
2: LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl (hash: sDbdc2MuViQUA82EIQ42obCiJUEYRmIePXkpeaVK6hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:85:04:1f:22:c0:dc:4d:86:ec:91:d3:02:8b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Validity
Not Before: Jun 7 15:00:41 2025 GMT
Not After : Jun 8 15:00:41 2025 GMT
Subject: CN=791d062fa5bbe06f2a373d5982c2ece7ccf67d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e0:a1:1b:69:a5:9e:77:f1:c7:f3:a5:d4:bf:
c0:ad:72:92:53:c0:3c:0b:4f:bd:25:ee:9b:17:e0:
b6:83:0e:58:77:5d:02:6f:0f:f8:95:06:88:1a:cb:
2b:12:b4:43:d8:54:f0:ba:ce:9f:15:f5:7f:9e:4b:
ea:a8:40:fb:d0:4b:21:2a:f3:d0:01:3d:6f:10:98:
fc:f0:ad:2d:d0:81:26:06:97:fa:09:43:b1:a4:2e:
2a:4e:03:47:38:61:81:6f:e4:66:7e:10:f7:f1:99:
93:f6:31:09:d5:b6:f9:89:91:58:12:d9:68:b9:27:
98:54:5c:ad:f9:a7:9b:16:28:96:ae:5c:0a:ea:cf:
c0:e5:b1:64:b0:1b:a9:bd:2f:22:ef:80:c5:a8:4b:
5c:9a:78:cd:2f:ac:f1:23:ab:a5:5c:9e:0d:43:c8:
c9:74:7a:21:b1:51:49:3d:fe:87:6d:20:63:c3:93:
7b:5f:0b:d6:03:32:d5:10:11:da:7b:67:4b:f0:a0:
e9:28:49:be:32:8a:39:72:e1:b4:76:1c:17:77:18:
8d:2a:05:d5:5f:b4:32:1c:9a:84:cb:15:d5:3f:30:
30:f2:5a:5f:34:d1:21:92:18:d0:72:9f:8e:3b:b9:
a7:91:e9:1b:90:85:1b:8a:c0:f3:d1:ae:8f:ef:d0:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1D:06:2F:A5:BB:E0:6F:2A:37:3D:59:82:C2:EC:E7:CC:F6:7D:63
X509v3 Authority Key Identifier:
keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:dd:5f:20:9e:8d:c2:44:c1:4b:cf:ff:57:58:57:a5:aa:8f:
94:72:7b:e1:b3:3e:05:0a:b9:8e:0a:e0:aa:29:b9:15:32:dd:
7c:7a:9f:eb:bd:d4:88:ce:f7:75:a4:6f:be:ce:39:90:b2:65:
c8:81:dd:c2:b3:9f:0b:82:4f:d2:45:05:43:f4:55:16:25:1f:
4f:15:50:ed:3c:83:68:ff:00:91:91:71:f4:e6:c5:e3:4e:c3:
23:9f:09:cc:91:98:ab:70:8e:b7:ba:19:82:e7:e6:fd:62:ae:
a0:13:81:22:b4:fe:79:dd:76:0b:bc:3c:7f:0b:33:47:e8:6e:
d3:1c:98:ce:5f:35:f0:c0:bc:58:4f:3a:42:7e:60:91:95:36:
f6:ce:a4:14:5a:a2:50:66:92:e3:a3:d3:b3:39:04:7e:58:f4:
fe:55:ed:ac:76:5e:f7:51:03:ce:26:2d:e6:81:4f:c2:73:65:
79:e4:9b:92:41:12:ee:4a:5f:78:40:3c:98:71:27:8b:21:5b:
c6:83:71:99:c5:78:55:7e:be:d7:64:f7:57:33:fc:68:23:2f:
06:7f:01:b2:e4:8e:87:f6:66:da:ac:9d:98:36:fd:c1:84:a7:
09:ef:c7:67:7e:2a:b1:ad:1d:90:5a:6a:38:e2:21:ee:e8:e8:
0d:02:ae:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:27 2025 by rpki-client