
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
File: LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json)
Hash identifier: fCYGquKKq8hDarynlNbtFqW9TLuS3MT3AG7HR5PqqZg=
Subject key identifier: 0A:6B:99:BE:0F:D6:87:67:49:D3:C5:4B:AE:85:D4:79:53:D2:72:4F
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial: 01984A0A0F5BAC40937C3CC3DDBAC98BD450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 04:00:29 +0000
Manifest this update: Sun 27 Jul 2025 04:00:29 +0000
Manifest next update: Mon 28 Jul 2025 04:00:29 +0000
Files and hashes: 1: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: lAz6vQJaASQ4X0eoLmIn2E6Z1nqZKpje7A8lLaR06C0=)
2: TZLeuUkI4CjEnpLLtWGzEA-joRI.roa (hash: YPtfqltU/oN+o/HH/QLZS2oxA/bwOyzCiodegvrQed4=)
3: ai_A7AG70LoK-2voHZXOhAOVMf0.roa (hash: hn2u5HU4dhrWeJ6INpgfQ8ZAf8MY3atf6SETHEmPiMU=)
4: c_zOfM7vLQJCIH9ZtTubpG60GUI.roa (hash: PR+2Ofr0AqtJDndUiUP4vY2xuU8uzBfHcV/JcyjNBZU=)
5: vMV24DhvZ51gpTgovgA0DHavZ5Y.roa (hash: pvB3MpylBNAYQdSCjBtx8G9c34zYXq6BUWOPnr06JNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:0f:5b:ac:40:93:7c:3c:c3:dd:ba:c9:8b:d4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Validity
Not Before: Jul 27 04:00:29 2025 GMT
Not After : Jul 28 04:00:29 2025 GMT
Subject: CN=0a6b99be0fd6876749d3c54bae85d47953d2724f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:68:43:5f:04:91:3b:fb:69:c1:0d:48:0b:
8c:4c:af:64:1b:d4:fa:9a:3a:70:28:b5:36:b2:ce:
ad:52:e1:05:00:14:b2:c6:7c:ba:26:31:94:61:41:
5a:d2:75:a1:b2:5d:6d:4a:56:19:47:05:8f:1e:18:
ca:4b:34:49:7c:81:7f:34:be:85:f6:fd:3e:4a:11:
33:62:64:f4:6f:f8:12:97:b1:e2:e6:50:76:41:cb:
11:3f:77:5b:f1:d5:26:de:43:01:52:24:1a:af:a5:
27:50:f1:4c:60:2b:02:01:f8:66:fe:47:7a:fb:9c:
3a:ed:72:1f:97:08:e9:e5:1a:8d:17:05:9e:6e:41:
db:d2:f3:f8:14:1a:2a:6c:3d:64:25:98:f0:a8:d7:
c6:69:3a:ec:d5:40:33:95:e4:da:95:73:44:b4:26:
2d:68:aa:64:d3:4d:e2:09:9f:29:52:8d:08:fd:8c:
d6:d9:a1:5b:ed:83:41:0c:25:f5:30:6a:32:e6:46:
04:48:c5:3b:a1:18:1c:c4:b3:61:7c:2d:3f:f3:a3:
79:c3:7d:af:8d:1e:91:5c:ca:05:9c:f3:bd:56:c9:
ec:6b:7e:4e:af:6b:b2:d5:0f:b1:ec:5b:fe:56:6d:
20:b2:29:d2:e2:4f:b4:12:17:0b:4f:bc:45:d6:5f:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:99:BE:0F:D6:87:67:49:D3:C5:4B:AE:85:D4:79:53:D2:72:4F
X509v3 Authority Key Identifier:
keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:67:25:e6:fd:63:d6:42:b8:8f:b1:04:74:77:10:2f:e9:8b:
64:ae:9f:8e:f2:2c:bf:11:b0:51:ec:16:dc:88:3f:5a:c5:d6:
69:d8:17:dd:3d:42:03:6a:67:f3:cc:d4:a0:b0:8c:90:18:14:
50:f3:38:4b:bd:bd:85:05:58:54:e6:6e:a1:0e:be:ad:f1:63:
da:d2:93:05:ff:75:7f:52:a7:d0:63:01:35:c1:49:ea:99:1c:
c0:73:79:73:3e:f5:fa:ab:66:1b:74:25:fd:05:ea:64:3f:33:
8c:05:28:9e:2d:9e:05:c3:a1:07:4b:c9:6c:b5:31:ed:96:9f:
23:aa:cc:37:1a:7a:c0:33:81:23:ea:6c:34:37:cd:68:f7:4a:
3f:06:77:b8:5a:f3:1a:c4:f2:e2:f7:e9:58:ee:63:f7:c1:17:
e4:9b:66:4a:35:55:d2:fc:ba:c5:f9:ae:88:e7:26:90:d8:40:
7b:69:6e:0e:bb:6a:4a:e8:4e:21:8f:5c:03:30:a1:82:24:70:
c5:e0:1b:19:f8:88:a6:72:4d:5e:36:3a:da:6b:60:c0:13:d5:
f8:d9:86:10:fa:f6:48:19:8b:72:68:bb:89:2d:3d:64:6d:5f:
a1:4e:88:c2:70:95:ff:e3:0b:4f:93:57:56:6d:d6:67:0f:91:
e6:6a:1b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:37:19 2025 by rpki-client