Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
File: lwVGLL_Idkd35toxtZXXzL_jgkM.mft (raw, json)
Hash identifier: j/69rJYyz9JRa4aLCWA7hwYbpN9hC+O4rf2zvL6jVdE=
Subject key identifier: F2:E7:ED:06:34:60:CC:B5:7A:88:8A:87:90:10:5E:5F:0F:B7:A2:54
Authority key identifier: 97:05:46:2C:BF:C8:76:47:77:E6:DA:31:B5:95:D7:CC:BF:E3:82:43
Certificate issuer: /CN=9705462cbfc8764777e6da31b595d7ccbfe38243
Certificate serial: 01984AE5B0956AFE68E457214245F4657851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 08:00:23 +0000
Manifest this update: Sun 27 Jul 2025 08:00:23 +0000
Manifest next update: Mon 28 Jul 2025 08:00:23 +0000
Files and hashes: 1: lEI_MOdsZG2OMiuHNjhGSX3G2Ww.roa (hash: WZPve5/FqG40sOt1irS1yUXHzP/enqPHMB84PLUtsCU=)
2: lwVGLL_Idkd35toxtZXXzL_jgkM.crl (hash: ax2J8AL5EgtE38+jvm+Fl1QhUCthSmTHAsZ3+v6rjfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:b0:95:6a:fe:68:e4:57:21:42:45:f4:65:78:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9705462cbfc8764777e6da31b595d7ccbfe38243
Validity
Not Before: Jul 27 08:00:23 2025 GMT
Not After : Jul 28 08:00:23 2025 GMT
Subject: CN=f2e7ed063460ccb57a888a8790105e5f0fb7a254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f5:db:d6:5c:41:c2:c9:16:25:5a:bc:77:ff:
d0:7c:ba:24:7a:ee:98:3e:91:79:ba:2f:f0:8d:2e:
c8:ae:2f:d6:1b:1a:e0:d3:15:f9:05:9a:2b:cd:b5:
c0:dd:7f:09:71:f5:22:24:b0:57:24:77:7a:2c:bf:
6f:f6:65:1e:3b:0c:ca:5a:4a:2e:fe:97:8c:54:ab:
2c:97:5f:74:0e:f0:10:94:1f:22:b5:23:c9:d6:af:
b9:2d:5b:17:91:d1:50:0e:55:9b:aa:8a:1b:73:f9:
db:8a:04:de:ee:5f:b1:e9:f2:13:86:b7:98:88:f4:
20:56:98:4e:be:7f:7f:e0:0b:3c:f3:b6:9a:0b:ca:
f0:92:94:d1:b0:5a:da:f6:0e:1c:34:18:ed:2a:50:
90:66:51:bd:ab:78:ed:11:9a:7c:f2:23:11:48:db:
30:0f:b3:ce:42:ba:0b:be:08:aa:e5:f4:76:88:f9:
aa:b9:05:27:d1:fd:c6:e1:ec:c3:39:71:ff:2c:82:
ec:34:c3:df:bb:2c:d4:a9:54:19:1f:40:53:6f:15:
c5:b4:f8:c3:4c:16:48:df:9c:9f:28:e3:bc:83:04:
ad:79:2f:76:56:63:2f:a2:66:f6:ef:2f:21:d1:cb:
a2:fb:d8:ac:8c:40:77:04:5e:c0:f0:6d:64:5b:fb:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E7:ED:06:34:60:CC:B5:7A:88:8A:87:90:10:5E:5F:0F:B7:A2:54
X509v3 Authority Key Identifier:
keyid:97:05:46:2C:BF:C8:76:47:77:E6:DA:31:B5:95:D7:CC:BF:E3:82:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0e:ae:c2:8a:b5:d6:ce:20:15:9d:93:86:e2:98:ad:3b:5f:
aa:c7:7a:0b:68:ca:ea:be:db:22:7a:59:a7:33:8f:4e:e9:a8:
3b:f1:c4:d2:2e:01:65:49:3f:da:34:05:9a:b2:fb:0f:6c:c5:
d3:16:c9:2d:c6:b4:1e:07:e6:f1:42:bd:41:8f:80:d8:5d:23:
11:cb:8a:ac:98:b1:3b:c6:5b:fb:a8:ee:fd:17:26:42:49:99:
52:36:06:a2:9e:30:6c:b2:1f:c7:67:4d:80:57:74:40:f1:9d:
e3:9a:17:2d:07:98:2d:d7:14:f7:66:c7:6c:3f:a8:56:e0:b9:
dc:5e:43:e2:6d:b8:c6:c9:30:a4:8c:d3:df:c4:6f:d3:2f:2d:
73:12:57:1b:a5:a3:a8:5b:1f:0d:cb:5f:42:35:f6:32:de:55:
c0:0d:48:e0:05:26:f2:c1:21:8e:83:9f:a0:a5:f6:7b:24:13:
b7:ec:6a:ea:3b:25:a7:19:5a:c0:4c:6a:f1:8e:18:00:e1:01:
a5:64:97:08:28:b5:ea:ea:10:a2:1a:4c:b6:c6:15:77:b9:02:
65:ff:50:26:91:52:15:ae:f9:fc:0b:82:ee:c5:f9:35:9c:46:
90:67:3c:a8:62:87:1c:f4:c9:91:ad:e4:20:31:e2:c6:f4:12:
69:68:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:12 2025 by rpki-client