Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File: LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier: L+glcPIOcf7zDNhxEtJrShQi91t61/iGYW/dpBVnh0Q=
Subject key identifier: 07:59:61:B6:CE:32:F1:AB:97:97:FE:C6:68:C8:F1:21:26:92:5B:B2
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial: 01984475C60B8B4A83C9A82ECE580A0C2C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number: 0403
Signing time: Sat 26 Jul 2025 02:00:25 +0000
Manifest this update: Sat 26 Jul 2025 02:00:25 +0000
Manifest next update: Sun 27 Jul 2025 02:00:25 +0000
Files and hashes: 1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: FpnJtKXoDiNxA3wvBwcYPLYU28/iNcqvYkqZFDswTLc=)
2: XEqexKJb2LrlBy7JmazWnnfRrCw.roa (hash: dfO0SxZnhpUVd2vYpZFuzNRZkTkzryjnbxAehzWWsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:c6:0b:8b:4a:83:c9:a8:2e:ce:58:0a:0c:2c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Validity
Not Before: Jul 26 02:00:25 2025 GMT
Not After : Jul 27 02:00:25 2025 GMT
Subject: CN=075961b6ce32f1ab9797fec668c8f12126925bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:67:ff:f8:b7:8e:46:8c:46:31:e3:bf:de:
40:50:2d:79:bc:d8:0a:60:00:74:d8:3e:fb:1b:bc:
19:e7:49:d8:d2:20:63:8e:8d:cc:ce:96:1f:78:cc:
f7:cd:ec:b7:c1:8d:f1:78:d5:76:04:7e:22:55:e1:
97:da:77:57:65:44:8c:0f:f0:9b:2f:28:8b:2e:a6:
24:a9:be:2f:f9:19:c5:76:f7:eb:2a:87:5c:3a:75:
c2:53:fc:72:bb:e1:9d:bd:d0:a2:b6:97:cd:34:12:
6f:d0:d0:40:ed:7c:e2:81:31:18:d6:1e:25:91:49:
2d:90:15:49:a3:2f:6b:7d:90:5b:6d:03:49:80:fb:
ca:d6:dc:fb:1e:fe:aa:6a:7a:da:8a:35:00:7b:f4:
6f:eb:94:bb:ea:26:4d:5e:72:a3:71:9f:02:b0:4a:
be:47:fb:2e:78:de:27:82:cb:06:06:d9:b6:1f:48:
5e:72:22:10:2c:a4:8a:ff:1b:9d:c2:3e:b4:14:4c:
ea:f7:72:19:6e:c3:53:62:0d:f9:8f:94:27:a8:df:
8d:34:be:2d:71:df:35:91:54:1c:ad:90:f5:69:38:
03:e0:c0:dd:71:a2:fa:b9:2f:17:89:20:3c:ca:13:
5b:45:25:24:d7:30:1e:0f:78:3c:fb:53:9d:72:8c:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:59:61:B6:CE:32:F1:AB:97:97:FE:C6:68:C8:F1:21:26:92:5B:B2
X509v3 Authority Key Identifier:
keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:86:97:c1:af:5f:f2:29:be:71:e8:3a:71:ac:f1:1f:6f:59:
29:c2:a6:e6:9d:63:57:ca:28:7b:91:0a:04:4a:8f:07:bc:f5:
cb:3f:22:88:6d:de:23:a8:39:c5:a7:e7:5d:76:89:3d:1b:80:
62:92:4a:f9:8f:9f:1c:db:31:02:23:60:a4:67:3b:51:53:45:
21:0b:e0:b0:38:8d:d8:6d:d9:a1:24:70:64:7e:a2:ab:18:0d:
4e:7a:fa:4a:c7:a3:8f:54:9c:3d:8d:16:46:5f:5a:9f:4d:0e:
ea:fe:9a:41:2d:f6:78:39:e1:82:6d:8f:b7:89:ab:88:5e:7e:
31:a2:d3:96:88:c0:9c:c6:0a:35:5d:24:e9:4c:11:cc:5f:6d:
bb:19:fb:d6:68:da:32:b8:17:9c:5c:99:26:aa:5b:3f:84:f5:
8c:94:d2:a5:b4:ec:6e:be:13:8b:86:91:42:2d:95:f4:70:bf:
28:7b:46:e6:79:f4:40:16:9f:ab:f3:27:ca:c0:d9:98:53:72:
69:1b:60:ce:69:a5:6c:0a:57:a9:25:61:5e:75:6f:96:ba:d4:
74:62:39:76:88:97:20:67:85:8b:4f:42:ef:c9:9d:b6:00:42:
8c:4d:f0:ca:68:2c:5b:87:7f:3a:98:dc:0e:68:f7:89:1a:8f:
b6:01:8f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:42:20 2025 by rpki-client