Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
File: LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json)
Hash identifier: XwS9Mxm3zFY6tpxECSkcuznAe4zHU+R/a/DYlbJda3E=
Subject key identifier: 5B:BF:82:B4:73:B9:6C:41:B9:CA:84:A4:B2:95:E9:28:C0:79:C8:27
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial: 01974EFC9E549E39F568578F83DB7A80A7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 10:01:07 +0000
Manifest this update: Sun 08 Jun 2025 10:01:07 +0000
Manifest next update: Mon 09 Jun 2025 10:01:07 +0000
Files and hashes: 1: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: mGDqXJU+esxD19X0/0vuF36nXzdKbsH0GDP0fzoFKCY=)
2: RysabfgSrooxUAVkb0Cu2rOa1B8.roa (hash: kDFtRPNIEsF7OH+wALA7E+fu8R+E9Lu/M1W1e9aWGpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:9e:54:9e:39:f5:68:57:8f:83:db:7a:80:a7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Validity
Not Before: Jun 8 10:01:07 2025 GMT
Not After : Jun 9 10:01:07 2025 GMT
Subject: CN=5bbf82b473b96c41b9ca84a4b295e928c079c827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:8e:95:63:c6:c3:86:60:a8:f0:df:ca:f0:
24:b4:7e:f2:77:a4:32:7e:8c:c3:03:f2:55:3e:18:
c0:8f:23:e5:cf:72:0c:f3:4a:b9:e7:03:05:f5:ac:
0c:29:11:cf:e7:ab:19:e2:70:ea:f5:16:b6:63:f1:
4a:a6:53:ba:95:7e:43:81:3e:4a:5d:fa:95:9a:c7:
90:c4:21:59:f3:bb:9f:c6:e1:96:60:43:09:39:b2:
bd:9a:05:09:fc:74:16:76:e3:1e:93:4c:3c:66:8b:
f4:ec:a0:1e:91:2b:c4:62:58:fd:22:40:56:47:4f:
02:ba:60:c4:a9:4b:f6:31:f6:d9:5b:c4:0b:c3:ec:
9c:7f:af:16:e8:39:bc:bf:19:c6:dd:ae:09:26:0e:
99:24:a9:41:00:d4:e1:e0:78:de:13:45:8b:12:3a:
23:79:05:cf:b0:1a:3a:1e:0f:70:a0:e2:d3:6d:b6:
77:52:5d:82:f7:d1:84:89:5e:80:21:95:a7:ed:8e:
d2:4f:9f:eb:17:88:b2:7b:14:e1:44:37:c3:87:3a:
a2:e6:e7:02:c2:ac:ff:d9:bd:32:cf:83:1a:40:70:
69:e9:19:b1:84:a5:bd:f4:9c:da:f3:e7:7f:eb:eb:
af:ae:7e:e9:86:e7:ed:37:06:bd:a4:38:ea:24:37:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BF:82:B4:73:B9:6C:41:B9:CA:84:A4:B2:95:E9:28:C0:79:C8:27
X509v3 Authority Key Identifier:
keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8a:f8:5e:e6:05:28:91:83:53:ba:eb:de:ff:d8:51:62:d4:
a6:1b:fd:7e:3f:06:22:62:74:11:6f:f5:4c:5c:9d:6d:12:76:
ec:76:3d:60:ac:7e:99:20:85:ea:e5:2b:6f:85:94:6a:42:bb:
39:88:68:75:15:7c:28:15:fd:83:23:11:e2:a0:c5:de:4b:de:
32:fc:f5:98:66:0a:ec:7d:f1:55:24:bf:6a:8b:77:7e:dc:0f:
0f:38:4b:25:36:d1:82:9b:ee:9c:70:07:93:00:90:3d:14:74:
05:b6:40:3a:40:22:d2:97:62:4f:c3:dd:f4:9a:c8:5f:2b:8c:
73:81:4e:b7:94:9f:a4:27:15:c5:26:d7:48:68:c3:8d:79:4f:
e0:26:76:07:9a:a4:0b:8f:d5:23:72:f5:60:a9:1c:39:ba:71:
89:82:05:a5:80:63:bd:fa:27:47:88:0f:0e:f7:b1:19:9d:fa:
3f:e6:40:c5:64:f6:fd:4b:3d:c3:06:01:93:e3:fa:80:b1:2c:
8b:6e:2e:a4:41:3f:dd:2e:dd:32:8d:f7:c6:bd:0b:c3:48:ab:
a3:c3:8e:c3:54:43:d3:87:77:17:16:fa:c6:71:90:6d:13:fe:
a3:1a:5b:43:cc:92:50:7f:07:c1:25:5e:33:5e:21:f8:ef:39:
56:9c:43:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:46:40 2025 by rpki-client