Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json)
Hash identifier: bRnDqndLbdV2xDxD1LZwsmjZLwJ1urgHRQTumAXKFUU=
Subject key identifier: 97:36:2F:BF:9E:AC:81:C8:4A:15:52:DA:CD:23:CF:5E:B9:3A:B9:42
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 019859B4B348C38933D0DA2D33D0890D7AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
Manifest number: 1609
Signing time: Wed 30 Jul 2025 05:01:11 +0000
Manifest this update: Wed 30 Jul 2025 05:01:11 +0000
Manifest next update: Thu 31 Jul 2025 05:01:11 +0000
Files and hashes: 1: c2mbKi5UZ3GiOkTKMMsYLmmHWNU.roa (hash: UtxHj7i+M428S4MKPB9E9Q2PRXSjTUZ5FcXtjJA5bUs=)
2: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: OVBpTiV0E4UAk3GMxJgqa/TT0pe/nRbBS9vhEOQ0fNM=)
3: oRfW2FP4FbeYSI3kehqgncp9gcc.roa (hash: XwGX8naDPDNcbpgigNakMaNKC6NSSrDBYhs82eP32R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:b4:b3:48:c3:89:33:d0:da:2d:33:d0:89:0d:7a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Jul 30 05:01:11 2025 GMT
Not After : Jul 31 05:01:11 2025 GMT
Subject: CN=97362fbf9eac81c84a1552dacd23cf5eb93ab942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7f:a7:ee:d2:a0:bd:8e:74:af:fd:15:61:a6:
55:2d:cb:cc:51:53:21:93:ad:62:f9:1e:5a:f8:72:
d1:27:6e:4b:87:fb:4f:f6:51:4b:e7:77:da:03:be:
f3:7c:4a:b8:dd:95:74:1c:c9:15:86:6b:52:97:73:
39:27:61:f1:89:4e:dc:f6:c9:27:28:fa:05:09:8e:
9c:7c:93:e7:8c:a5:d7:d5:93:ae:8d:e3:ef:aa:ab:
f4:73:65:73:d9:56:62:13:b0:dd:a7:39:09:e1:a1:
c4:5a:96:e3:ad:3e:74:74:e9:cb:ae:0d:fb:4c:5b:
e0:21:23:5f:4b:aa:4b:1f:ad:78:32:6c:a6:8a:d1:
a3:8c:43:98:0f:be:b1:11:0e:43:cf:89:86:ef:f2:
d8:dd:21:95:80:62:71:4f:93:13:5c:2d:3b:12:63:
d1:29:c4:84:95:be:fc:f2:2c:01:3a:a7:28:10:92:
e6:6b:d6:2b:4f:d5:c5:64:96:7c:a1:26:38:3f:8a:
9b:1b:1b:4c:17:44:43:0b:3e:3c:9b:a9:9c:a4:68:
94:51:04:a3:15:8e:7f:c7:13:71:89:9c:d6:17:65:
b1:46:88:2e:cc:6c:8c:ea:c4:f7:56:64:27:2a:56:
3c:bd:18:14:dd:2a:d0:38:eb:62:85:14:5d:38:7e:
a0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:36:2F:BF:9E:AC:81:C8:4A:15:52:DA:CD:23:CF:5E:B9:3A:B9:42
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d4:53:18:61:df:83:55:5b:b3:7a:63:66:85:75:1d:a2:78:
eb:ff:10:c1:03:c0:3a:17:58:9d:a1:a7:ee:d8:4e:3b:be:09:
82:96:57:ce:cf:f2:15:9e:ca:8f:4c:3d:33:9e:40:57:a9:58:
aa:24:7a:69:82:50:0a:f6:3a:7b:81:73:3a:75:df:26:c5:cc:
d6:01:4a:81:ef:1e:59:d1:e5:64:81:d3:7b:94:0b:de:48:1f:
40:4a:27:a5:0c:fc:74:b2:3c:b8:50:71:72:da:f2:f6:d6:9b:
c5:33:7b:57:ae:93:49:b4:fa:63:fd:ec:03:80:c4:d5:d7:43:
27:7c:68:d6:ee:52:d9:0f:87:aa:30:12:09:66:c8:db:fe:60:
a6:23:3a:ff:46:11:71:8b:9d:b9:89:32:c0:3b:b3:34:c9:aa:
77:8d:2d:b6:5d:aa:12:f9:aa:cb:64:6a:5a:45:64:3c:01:ed:
0a:5a:ea:f4:a5:82:5c:b2:24:19:6a:bd:8c:20:09:93:c9:28:
20:f2:cf:59:f5:db:69:af:a8:15:16:79:13:b5:52:4d:59:45:
21:db:b0:36:65:dd:91:4e:f0:24:b8:00:b6:d1:4d:68:ab:24:
1a:43:54:64:3d:fb:05:89:0a:56:bb:6b:10:c9:78:71:80:96:
71:52:d0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 14:46:31 2025 by rpki-client