Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
File: LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json)
Hash identifier: XOF1cIyLZvWdFEOyF5ex8lmOM2+37PaHMLGxnNNI3Vg=
Subject key identifier: D0:AA:57:BF:A2:26:6E:40:2E:70:E7:9D:99:11:7A:86:70:AC:B0:6C
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial: 019A725CEF59DBA2FD82C3A7B8C7E051C736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 10:01:24 +0000
Manifest this update: Tue 11 Nov 2025 10:01:24 +0000
Manifest next update: Wed 12 Nov 2025 10:01:24 +0000
Files and hashes: 1: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: gybJjwUb8+0hs2n7LX4x6n0CoJCjJsKzCXqQgiqv5oE=)
2: RysabfgSrooxUAVkb0Cu2rOa1B8.roa (hash: kDFtRPNIEsF7OH+wALA7E+fu8R+E9Lu/M1W1e9aWGpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ef:59:db:a2:fd:82:c3:a7:b8:c7:e0:51:c7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Validity
Not Before: Nov 11 10:01:24 2025 GMT
Not After : Nov 12 10:01:24 2025 GMT
Subject: CN=d0aa57bfa2266e402e70e79d99117a8670acb06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:c4:a5:3b:c4:82:b3:e2:a0:02:81:6f:c3:
f8:45:4f:aa:82:4a:7d:62:55:d3:5d:77:ff:99:0b:
25:37:a0:e8:1c:25:f7:3d:a3:ea:d7:a5:a1:db:97:
8a:5e:e5:04:6b:23:9b:1a:f5:dc:b6:19:02:2e:5c:
e9:c0:b8:e0:90:9b:5c:63:40:8f:e8:96:e0:2a:59:
c2:14:a9:c7:af:9b:f4:e4:7c:fb:ca:0c:e3:4e:91:
f7:08:5e:ac:42:e6:88:65:77:04:53:f9:d1:86:ae:
b8:fb:72:b4:c4:a7:53:41:5f:c8:de:d2:af:46:05:
59:24:0c:da:ff:42:ff:f5:79:48:cf:a0:11:09:37:
2c:59:5a:58:43:07:7c:fc:78:d4:c4:07:c2:98:94:
fa:32:a7:95:63:fb:25:1f:81:e9:a8:6b:75:02:5f:
2c:26:e0:9e:e5:35:69:0c:23:5a:cb:31:05:3f:d5:
31:cf:73:51:28:82:b3:46:28:12:aa:fd:67:ff:ed:
84:aa:80:fc:b7:58:8b:80:62:6e:59:4c:80:c8:89:
72:bb:1c:3d:3e:60:03:32:b0:ee:bc:a2:96:aa:b4:
a0:ea:23:87:53:25:33:b7:f8:a3:49:26:86:59:96:
c9:8c:af:db:4a:db:de:36:1f:2e:5f:d5:9c:d4:63:
9c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AA:57:BF:A2:26:6E:40:2E:70:E7:9D:99:11:7A:86:70:AC:B0:6C
X509v3 Authority Key Identifier:
keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:61:12:52:9c:e8:32:ef:4d:26:96:da:79:1a:12:ab:4a:c8:
23:90:8b:03:7e:f6:f2:fb:5d:92:4e:4f:58:9d:86:25:85:df:
eb:d7:05:d5:94:e3:aa:02:71:43:d4:d5:4b:4f:67:b0:68:ba:
2f:6b:25:37:ca:0c:fc:98:1e:55:d2:42:93:a5:ff:b7:04:7f:
61:46:5d:9b:32:b0:69:7a:42:03:df:e6:b7:b0:70:c2:96:58:
07:8a:a2:3d:3a:c6:d0:c9:ad:00:e7:eb:18:05:5f:62:6a:16:
e0:56:47:c1:e7:e0:b4:96:54:b5:ea:7d:52:45:f8:68:b7:fe:
c0:0d:f4:06:98:2c:46:44:52:14:9e:ad:15:36:e6:2a:65:d6:
26:a8:e7:bf:8c:df:88:89:65:19:82:45:d3:50:ee:25:64:89:
45:fc:c9:75:0a:be:1b:0b:ba:74:47:cb:b6:70:7c:b0:5b:5b:
70:17:94:f6:67:f9:c5:fe:79:a3:3e:80:c1:6b:e7:17:a8:a3:
09:c1:30:04:4f:68:07:82:cd:58:8c:1c:e3:e7:de:4c:3e:38:
64:7f:b9:69:95:0b:7c:bf:0e:ce:53:f4:de:4e:22:f7:8f:e9:
47:b4:ad:a9:54:d8:04:e5:c4:08:26:c3:c6:c4:25:02:9a:da:
59:b1:b9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:19 2025 by rpki-client