Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
File: LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json)
Hash identifier: R+ryo04GgfXMxSDt5+fHHbKMOcXJY7OJ2mq+dvBb/oU=
Subject key identifier: 42:92:0E:19:94:87:6B:73:B1:FE:17:B2:70:C4:80:6D:3B:9B:6B:BC
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial: 01992255B865579BF812946D0AF410784639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 04:01:06 +0000
Manifest this update: Sun 07 Sep 2025 04:01:06 +0000
Manifest next update: Mon 08 Sep 2025 04:01:06 +0000
Files and hashes: 1: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: IUWR3BnucIM7LNkgw1XTjyGxumslriaCDR20rGz+lSk=)
2: RysabfgSrooxUAVkb0Cu2rOa1B8.roa (hash: kDFtRPNIEsF7OH+wALA7E+fu8R+E9Lu/M1W1e9aWGpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:b8:65:57:9b:f8:12:94:6d:0a:f4:10:78:46:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Validity
Not Before: Sep 7 04:01:06 2025 GMT
Not After : Sep 8 04:01:06 2025 GMT
Subject: CN=42920e1994876b73b1fe17b270c4806d3b9b6bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4a:6b:d1:0a:06:8b:a7:34:8d:13:22:c6:84:
f7:73:57:70:d6:c2:02:89:dd:02:ae:7a:0e:9b:7c:
d5:73:02:9a:b0:7f:17:9c:c4:a7:a7:d4:99:bc:d0:
42:e6:6b:d7:44:e2:69:e3:b1:91:ef:6f:4c:66:3f:
a7:25:82:87:16:ac:66:a5:04:b8:e9:59:7c:c6:97:
64:6c:93:99:ad:0b:0b:d4:4d:3a:42:22:ba:7e:7b:
3f:47:6c:ab:8e:e9:8f:7a:7a:5d:88:6d:82:ad:de:
51:4b:dc:0f:66:18:1a:9a:8f:dc:2c:11:f2:bc:f6:
e7:35:d4:ca:f6:bf:3a:2f:7f:38:27:d2:41:8c:15:
42:42:cd:00:e0:1e:65:5d:ea:a1:7c:3a:aa:87:3d:
36:7f:f6:49:8d:27:f0:da:8a:aa:bc:6a:17:24:aa:
51:dd:12:88:0d:90:ac:d5:2a:4d:ea:a3:fd:70:77:
5d:b9:ef:10:7b:5a:43:d0:5c:e6:2e:94:39:ee:e2:
fb:e8:ff:7a:7c:a3:50:a3:cc:86:c9:59:51:fc:8a:
d6:07:4f:c9:58:90:08:40:a1:48:ce:01:f3:66:f9:
31:8e:7a:35:51:08:00:14:ce:ab:c3:ae:5e:63:3a:
30:ef:6c:58:1f:30:da:6a:70:99:7d:61:d3:7e:e4:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:92:0E:19:94:87:6B:73:B1:FE:17:B2:70:C4:80:6D:3B:9B:6B:BC
X509v3 Authority Key Identifier:
keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ef:a0:52:c4:bf:34:63:fc:ae:fc:7f:c9:f4:97:87:bd:a8:
fb:0a:d9:7d:70:b2:72:7b:80:f7:39:af:b1:2b:62:b8:0c:b6:
fb:e1:12:2d:ec:5d:2e:17:14:04:3a:09:f7:e1:c0:ad:29:ea:
0a:f3:56:2d:34:f0:5e:a9:60:39:30:20:92:85:9c:a6:24:7c:
b8:2a:b5:69:c1:68:09:85:8d:a6:b6:55:eb:8a:ef:ad:d5:cc:
66:54:45:4f:39:6b:ad:df:cd:62:3d:7c:f8:52:84:cf:ab:ee:
d5:be:bd:d2:50:7d:76:0e:7e:c4:4c:68:4e:28:da:41:64:af:
f6:48:8d:a6:49:2f:70:c0:e3:16:f9:1d:ad:69:d3:cd:2d:45:
73:be:18:3e:1b:ad:26:75:95:03:0b:85:37:37:a0:5d:26:ef:
1d:95:39:4b:62:eb:f5:17:2a:8d:8d:1c:6e:eb:c8:3d:a6:3d:
fd:8f:df:01:c8:c0:78:fc:4c:f0:91:cf:b4:d2:9e:fa:f2:0c:
22:13:00:fc:34:4a:c5:b2:6e:cd:da:4e:af:4e:a5:8a:c9:3e:
9c:f0:cc:22:14:3a:47:b3:92:a7:ff:71:26:da:cc:cf:51:a5:
9d:be:de:db:93:f7:dd:97:5b:6a:be:90:14:2b:0f:00:24:39:
15:97:61:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:26 2025 by rpki-client