Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: frAOzgQQWqNW6zRmmbkbj2VAL3Vsr/w2O7K48LY43UI=
Subject key identifier: 3C:09:25:BC:5F:3F:F8:9E:C2:18:69:A5:20:34:52:F7:10:67:98:C3
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 01984B53BFE2CEAA43625C22013C1D94731A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 10:00:36 +0000
Manifest this update: Sun 27 Jul 2025 10:00:36 +0000
Manifest next update: Mon 28 Jul 2025 10:00:36 +0000
Files and hashes: 1: aRRMx2LpXrXzb91tfKNbEYwqTy4.roa (hash: u9ed+0pIjkL2kAKw6TtOQkn9W9RbAQ792y7vYcRd71M=)
2: eV3A69o5dbmXhkcbRscNdwCcmUw.roa (hash: 1+RfsWC1iIY4uoQdBg4VWebMYcz8BpqPe7dmv43mNg4=)
3: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: WAVlvQBU0s9XN6oJ5O1zt24QUO4/Mel0ns6MlHWvSio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:bf:e2:ce:aa:43:62:5c:22:01:3c:1d:94:73:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Jul 27 10:00:36 2025 GMT
Not After : Jul 28 10:00:36 2025 GMT
Subject: CN=3c0925bc5f3ff89ec21869a5203452f7106798c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:fc:1c:4a:fc:44:d6:51:de:ef:38:f2:6f:
f1:07:e4:80:16:3d:bd:3c:ac:35:f6:b6:3e:fe:1c:
8f:45:1f:ed:8f:0b:bf:3e:9f:ea:92:18:a1:1c:56:
2c:62:e5:13:76:51:e4:ac:78:37:b0:6f:1e:c0:cc:
ac:b5:69:a0:b1:5f:17:91:e3:97:cc:50:8c:3a:03:
ee:c0:50:b6:c8:88:6c:2e:66:60:25:82:a3:14:d4:
79:cc:72:24:ca:dd:ba:da:0a:a1:17:c6:24:28:a9:
0a:7a:af:13:8e:4f:37:aa:c2:94:50:e4:3d:da:b1:
04:e3:dd:a2:f7:6d:23:a9:ea:d7:00:16:53:5f:e8:
d3:01:6a:2b:07:5c:b0:aa:23:8e:03:95:87:c5:45:
4a:3f:5c:0d:eb:86:3a:67:3e:b4:1a:e7:b4:ad:df:
13:38:d0:13:50:9d:92:b4:d9:80:12:85:8b:f9:97:
24:70:85:a6:ff:6a:17:b1:cc:8b:1b:c3:da:26:f4:
8d:63:93:85:24:10:b0:c9:5b:33:ab:5c:9d:0e:76:
e7:6f:f1:e6:ab:fe:cd:a7:4e:6e:b3:1e:b2:48:ce:
db:67:5f:45:40:9c:a3:38:a4:66:f5:3b:88:d7:7d:
ba:fa:29:23:d3:ef:b1:69:30:51:b5:3a:b3:2b:d5:
53:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:09:25:BC:5F:3F:F8:9E:C2:18:69:A5:20:34:52:F7:10:67:98:C3
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ab:be:df:db:08:b8:58:8e:a6:5c:3f:92:93:73:63:db:10:
61:f8:06:59:a0:b5:6a:89:84:c1:41:82:a0:31:6a:34:71:7e:
85:cf:de:af:b7:c7:1e:c7:74:7d:b8:24:7a:06:8b:6a:cc:58:
23:30:d3:3c:4c:5e:f7:e1:19:27:2b:5c:95:ec:09:ac:37:d8:
65:c8:81:4b:cf:51:a6:53:d3:e1:7e:c6:3f:30:ac:ae:01:5a:
46:52:c7:65:55:42:4e:b8:ab:82:f5:e8:36:0e:09:f0:1b:4d:
8e:25:fc:95:ef:c1:46:4e:57:47:d4:84:5c:33:66:b4:f9:7e:
69:a8:02:45:9a:12:15:c9:63:75:e0:b6:5e:b9:2d:dc:b5:16:
d9:16:e9:fd:f9:09:07:3b:d5:64:e4:4a:f3:b9:37:e6:ca:57:
06:99:ea:5b:2b:80:e4:13:97:41:96:01:bd:de:7f:c2:14:70:
6e:a0:fb:e6:f3:15:fe:53:fb:ee:d9:9d:7b:d6:19:b2:40:cd:
83:39:d5:78:e8:f5:e4:56:8f:2c:33:f3:dc:a9:0b:cc:35:0d:
95:6b:d6:c2:a7:9c:b2:29:7a:4b:f3:6c:d0:b5:66:a8:21:da:
2e:62:6c:0a:c0:7e:d0:57:c9:4d:60:bf:f9:8d:af:eb:fc:47:
d7:22:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:39:31 2025 by rpki-client