Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
File: LKw-jWOxw6_HxsC_2p1ayBe27m0.mft (raw, json)
Hash identifier: aPHeO4mlX6RIw5cnfP6cConXRJV2z2VSl70KRUKuBVg=
Subject key identifier: DA:02:49:29:15:76:38:D9:67:E7:D4:50:9A:0D:FE:E6:A5:75:E8:08
Authority key identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
Certificate issuer: /CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Certificate serial: 019922FA85F46BFC19198D66A1071C89010C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
Manifest number: 104E
Signing time: Sun 07 Sep 2025 07:01:07 +0000
Manifest this update: Sun 07 Sep 2025 07:01:07 +0000
Manifest next update: Mon 08 Sep 2025 07:01:07 +0000
Files and hashes: 1: LKw-jWOxw6_HxsC_2p1ayBe27m0.crl (hash: nfYHmK659oqUZ3zsQkYzEoytgOa0n0TZRrrexAj6qxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:85:f4:6b:fc:19:19:8d:66:a1:07:1c:89:01:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Validity
Not Before: Sep 7 07:01:07 2025 GMT
Not After : Sep 8 07:01:07 2025 GMT
Subject: CN=da024929157638d967e7d4509a0dfee6a575e808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a5:56:36:aa:75:5b:cf:80:4f:7e:d4:8b:9d:
a9:08:77:91:82:0f:58:e2:3c:6d:b5:1d:48:e5:6a:
f7:e8:33:ba:f1:bd:a5:ea:0d:3c:20:8e:62:5a:60:
bc:ad:ec:8d:65:ec:33:e0:0a:ce:78:5d:ed:80:92:
2e:16:9e:22:04:9a:8f:b4:6f:65:46:4f:46:71:71:
73:0c:39:64:ca:15:02:a2:86:6c:15:5a:f6:14:63:
25:ce:15:5b:59:70:d1:f0:42:72:b4:f3:c0:19:79:
61:5a:44:b8:3e:2e:f9:d0:a1:e3:18:44:ab:54:1e:
79:66:c2:0c:54:72:fe:87:6f:a6:67:a1:34:0e:13:
f8:59:ea:c2:2c:ff:a3:0b:30:20:3f:2d:94:51:73:
f8:dd:e2:08:4e:51:57:6b:0c:90:8b:33:f7:02:a4:
2a:6e:a7:57:7b:b2:e2:65:1a:38:70:58:95:bc:84:
85:7b:7c:52:59:78:3d:e2:94:2f:ba:3f:f7:c8:ff:
fd:af:52:3b:5d:2e:76:09:e8:c9:ba:8f:a1:f5:e8:
22:cd:54:16:ff:58:0e:5e:00:9a:95:19:3c:9a:5e:
36:5f:b5:bc:fa:36:24:1d:b6:c0:d3:94:ea:df:2d:
e8:b1:15:ee:21:81:8c:dd:b8:24:a9:82:a8:11:74:
1b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:02:49:29:15:76:38:D9:67:E7:D4:50:9A:0D:FE:E6:A5:75:E8:08
X509v3 Authority Key Identifier:
keyid:2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0f:bd:f4:54:7d:b5:09:91:44:21:ab:cc:bd:78:35:98:04:
cc:b9:a0:49:b6:39:bd:97:c9:02:52:32:26:0e:6a:8e:96:0a:
76:82:e8:d8:7f:7e:9e:b1:e6:75:60:81:1f:f0:58:72:15:af:
82:5f:d5:8f:a4:3a:ff:71:a9:65:10:5f:24:f4:7a:ec:cf:79:
01:3e:b4:0a:25:b7:59:e6:7b:59:b4:5e:42:26:f4:66:bd:40:
65:61:f6:99:f3:72:41:8c:58:c9:8e:19:5f:e6:46:41:ce:4d:
a7:95:f7:6a:dd:5e:a1:22:ea:65:0d:a9:f2:e5:51:6d:b0:1f:
64:51:30:4b:f6:1e:e6:03:5f:5c:47:b7:b1:1c:db:73:c7:05:
ca:2e:9d:ba:56:3f:aa:27:71:11:6c:fa:19:bf:51:6e:e7:06:
e6:a7:53:63:d1:76:3f:f2:20:7a:a8:f9:f6:41:ff:c6:e9:d4:
6a:19:fc:92:8d:5c:c6:9f:e3:49:93:c4:46:a8:f0:c7:82:0b:
80:51:6f:87:0f:34:66:ab:a4:7e:34:de:da:b1:47:46:fb:7a:
76:49:cd:60:90:fd:6c:8d:3d:bd:2e:e9:35:0b:12:ed:6b:0f:
7c:04:48:39:bf:b3:ca:b2:0c:cf:66:9b:1d:da:59:d6:fc:c6:
5d:c1:92:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:56 2025 by rpki-client