Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
File: LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json)
Hash identifier: w1jDHy+OFxMzWR0zXcc7ChnsSzwm6YGA/wPJrsRXFUA=
Subject key identifier: 23:90:3C:4A:A3:43:43:FC:1D:B6:E6:F9:9A:79:AE:E2:E7:60:AB:1E
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial: 0196447B785A3D34C8A37760F5C4EE47C531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
Manifest number: 14F8
Signing time: Thu 17 Apr 2025 16:01:04 +0000
Manifest this update: Thu 17 Apr 2025 16:01:04 +0000
Manifest next update: Fri 18 Apr 2025 16:01:04 +0000
Files and hashes: 1: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: 1D8CcsFthu7hkyMJ0vtGCnum0exGChslIgbpuXR52ok=)
2: RysabfgSrooxUAVkb0Cu2rOa1B8.roa (hash: kDFtRPNIEsF7OH+wALA7E+fu8R+E9Lu/M1W1e9aWGpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:78:5a:3d:34:c8:a3:77:60:f5:c4:ee:47:c5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Validity
Not Before: Apr 17 16:01:04 2025 GMT
Not After : Apr 18 16:01:04 2025 GMT
Subject: CN=23903c4aa34343fc1db6e6f99a79aee2e760ab1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:66:32:c3:2b:f8:cb:cd:bf:f1:b7:6b:84:
40:33:c1:db:9e:be:5f:39:65:87:ec:c2:c6:f9:e0:
5f:9c:e7:63:24:dd:c8:aa:c2:10:30:50:e0:9f:99:
ea:8f:91:6e:58:37:5b:c9:18:3a:03:9e:9f:76:7e:
71:f6:de:0b:9b:cf:22:56:d7:26:2e:21:bd:7a:ff:
9e:40:5e:94:29:24:60:20:f2:48:da:96:1d:b5:14:
77:7d:90:a7:00:28:d7:03:18:89:49:a4:38:24:d8:
1b:26:e5:aa:91:72:50:f6:eb:15:f1:56:93:d5:08:
44:9c:21:8e:a7:68:15:cb:4b:b1:7c:15:4f:38:8f:
af:5e:d4:46:99:d8:9a:20:70:ab:7d:5e:1a:00:45:
45:b4:53:14:91:df:bf:36:ad:89:7f:2a:28:45:03:
c3:98:60:94:72:55:c2:da:71:d5:7c:2c:d1:0a:c4:
dc:27:6b:a8:cb:79:04:18:54:03:68:1c:0f:62:0f:
11:80:4d:ad:23:11:18:bd:c6:6a:ef:9d:77:9f:18:
3c:b9:b5:32:2d:e2:2f:9a:9d:11:4a:97:83:c3:be:
2e:a7:7e:09:61:5a:94:0e:10:24:d7:53:24:1f:0f:
89:9e:db:b2:21:39:4e:a6:62:38:4d:ae:50:fb:ff:
15:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:90:3C:4A:A3:43:43:FC:1D:B6:E6:F9:9A:79:AE:E2:E7:60:AB:1E
X509v3 Authority Key Identifier:
keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e7:61:b0:4f:c6:e8:61:57:57:42:59:fa:70:f1:22:b0:a2:
a1:13:4a:10:4a:99:56:f4:78:6b:a3:39:a9:fb:36:74:6d:21:
81:fc:17:34:4b:d9:60:6d:ab:24:5f:1e:36:d3:82:56:0d:b0:
ad:20:43:01:ea:57:71:03:e7:9c:49:e8:65:7f:6c:12:35:db:
33:a2:cc:ae:be:74:cc:72:fd:d7:2c:4b:81:69:0a:5d:2b:8a:
06:72:7b:51:f1:8c:5f:07:c7:99:c2:e4:fa:fb:1e:e5:e8:b9:
94:d0:9b:3d:86:0a:fa:40:14:5e:26:8b:2f:ad:3a:c5:62:8c:
c8:22:1b:30:9a:37:12:ca:12:e8:8f:ff:8f:bf:12:e3:2c:2d:
05:b1:1e:2d:81:d5:10:c7:e8:ad:41:22:87:ec:4a:25:1c:e0:
3f:2e:a8:e0:b0:d0:75:59:82:76:f4:e6:18:c3:e4:3d:aa:d2:
21:82:64:b0:9f:72:d8:89:34:cc:c0:41:b0:28:63:cf:b0:08:
b7:a4:7a:7b:f8:b4:14:df:da:66:59:ca:7e:65:b4:2a:c4:02:
6b:bf:f9:d1:b4:20:80:98:2f:bf:d3:27:9f:c2:21:5e:86:a9:
24:63:de:88:0c:d7:48:9c:b8:f3:46:90:23:92:00:c6:b9:e7:
e3:36:cd:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEe3haPTTIo3dg9cTuR8UxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMDM0MmUwZDIzZWY3ZTA2YjFkZmY1Y2M2ZWU0ZmExN2Fm
OGJkOTgwHhcNMjUwNDE3MTYwMTA0WhcNMjUwNDE4MTYwMTA0WjAzMTEwLwYDVQQD
EygyMzkwM2M0YWEzNDM0M2ZjMWRiNmU2Zjk5YTc5YWVlMmU3NjBhYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtklmMsMr+MvNv/G3a4RAM8Hbnr5f
OWWH7MLG+eBfnOdjJN3IqsIQMFDgn5nqj5FuWDdbyRg6A56fdn5x9t4Lm88iVtcm
LiG9ev+eQF6UKSRgIPJI2pYdtRR3fZCnACjXAxiJSaQ4JNgbJuWqkXJQ9usV8VaT
1QhEnCGOp2gVy0uxfBVPOI+vXtRGmdiaIHCrfV4aAEVFtFMUkd+/Nq2JfyooRQPD
mGCUclXC2nHVfCzRCsTcJ2uoy3kEGFQDaBwPYg8RgE2tIxEYvcZq7513nxg8ubUy
LeIvmp0RSpeDw74up34JYVqUDhAk11MkHw+JntuyITlOpmI4Ta5Q+/8VWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOQPEqjQ0P8Hbbm+Zp5ruLnYKseMB8GA1UdIwQY
MBaAFC8DQuDSPvfgax3/XMbuT6F6+L2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHdOQzROSS05LUJySGY5Y3h1NVBvWHI0dlpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kMWZkNDgtOTE2Yi00ZDgzLTk2Y2Mt
YzkxMGFmOTNlNDI2LzEvTHdOQzROSS05LUJySGY5Y3h1NVBvWHI0dlpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kMWZkNDgtOTE2Yi00ZDgzLTk2Y2MtYzkxMGFmOTNlNDI2
LzEvTHdOQzROSS05LUJySGY5Y3h1NVBvWHI0dlpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsudhsE/G
6GFXV0JZ+nDxIrCioRNKEEqZVvR4a6M5qfs2dG0hgfwXNEvZYG2rJF8eNtOCVg2w
rSBDAepXcQPnnEnoZX9sEjXbM6LMrr50zHL91yxLgWkKXSuKBnJ7UfGMXwfHmcLk
+vse5ei5lNCbPYYK+kAUXiaLL606xWKMyCIbMJo3EsoS6I//j78S4ywtBbEeLYHV
EMforUEih+xKJRzgPy6o4LDQdVmCdvTmGMPkParSIYJksJ9y2Ik0zMBBsChjz7AI
t6R6e/i0FN/aZlnKfmW0KsQCa7/50bQggJgvv9Mnn8IhXoapJGPeiAzXSJy480aQ
I5IAxrnn4zbN4g==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:31 2025 by rpki-client