Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft
File: LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft (raw, json)
Hash identifier: ln7YNX0TTNlYbSjNv79Hlgh2Nu0aBz6l56L59ms7Z1k=
Subject key identifier: 12:B0:05:27:B4:DB:7F:E6:54:1D:13:3B:D1:5A:E5:53:E4:4A:0D:2E
Authority key identifier: 2D:6F:9B:DA:F6:9D:CA:1C:DB:9E:44:0C:97:C1:0A:09:2E:C1:B3:9C
Certificate issuer: /CN=2d6f9bdaf69dca1cdb9e440c97c10a092ec1b39c
Certificate serial: 019754C73F5CF5DF544952829A5219FED429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft
Manifest number: 1588
Signing time: Mon 09 Jun 2025 13:00:33 +0000
Manifest this update: Mon 09 Jun 2025 13:00:33 +0000
Manifest next update: Tue 10 Jun 2025 13:00:33 +0000
Files and hashes: 1: 1xQ2-mQTJ0Gbl5USkA38nfw--zI.roa (hash: Bmj7Dd8JxoYoJUgJkT98vzeeRsbATtejXxg70Xp0XBw=)
2: LW-b2vadyhzbnkQMl8EKCS7Bs5w.crl (hash: ZhJPNs7ve+T0H3w2UHS3PX+0gU6zWAH9k6gWUYH5xWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:3f:5c:f5:df:54:49:52:82:9a:52:19:fe:d4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d6f9bdaf69dca1cdb9e440c97c10a092ec1b39c
Validity
Not Before: Jun 9 13:00:33 2025 GMT
Not After : Jun 10 13:00:33 2025 GMT
Subject: CN=12b00527b4db7fe6541d133bd15ae553e44a0d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:68:98:33:66:6f:f1:1e:a3:cb:f3:80:5e:
3c:ab:b4:28:eb:71:2f:0f:9d:7f:1f:60:3d:44:b7:
b3:9f:0a:93:cb:f9:25:05:b2:3a:e8:56:58:ee:89:
f6:23:da:94:e1:ab:96:19:23:2f:2f:ff:2b:75:1c:
55:e6:a1:e4:d7:fa:8d:de:0e:db:39:71:b9:6d:3d:
9d:6a:c6:86:8d:b6:99:0c:dd:42:d0:f1:24:47:5d:
81:7a:e4:5e:ff:43:3a:93:dd:22:48:8d:0f:64:5b:
64:4f:9f:0e:b3:10:21:5a:30:cd:c5:bb:1c:dc:cb:
98:a7:49:28:4b:5b:2f:af:a7:28:94:92:5e:05:90:
4f:78:cd:22:37:06:3b:49:25:cd:bf:e3:e0:f6:81:
0d:21:2c:f3:2c:89:c4:ea:e7:d3:fe:18:27:bb:f3:
13:c8:3d:8c:79:bb:7d:06:89:56:b8:a1:12:1e:eb:
89:e3:fa:25:5c:2b:cb:d8:2f:7e:33:43:c2:8d:c8:
d4:1b:6f:82:52:91:63:1a:03:c5:52:87:f0:b6:67:
74:d3:71:53:47:a1:ef:e6:14:6a:96:ad:8b:44:64:
7a:a5:ca:57:19:2e:7e:a3:b5:ff:54:03:aa:f3:bd:
04:c3:00:64:e9:0b:40:04:a5:6c:f2:87:6f:ac:9d:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B0:05:27:B4:DB:7F:E6:54:1D:13:3B:D1:5A:E5:53:E4:4A:0D:2E
X509v3 Authority Key Identifier:
keyid:2D:6F:9B:DA:F6:9D:CA:1C:DB:9E:44:0C:97:C1:0A:09:2E:C1:B3:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d6:da:9f:15:15:9c:7d:a6:3e:e0:8b:74:e0:c8:c4:df:50:
31:ab:20:4d:73:2c:7a:cd:6b:90:6f:34:c6:fe:7f:89:65:c3:
80:10:0b:3e:00:e3:ca:80:c6:33:df:83:f9:60:24:fc:9d:b6:
90:ef:74:21:54:f4:9e:2f:7f:89:2d:02:18:91:4c:e8:8f:d5:
ed:28:ae:12:0c:5d:07:ce:a8:59:41:1c:9c:99:28:12:59:dc:
36:33:89:72:d9:8d:98:2b:2c:d5:3e:99:b6:4b:55:ed:3a:e5:
dd:9d:a2:00:d5:aa:60:9e:cf:4b:24:44:8b:a9:71:b2:a5:cf:
8e:f9:d6:43:03:ca:67:d2:0d:a7:db:07:38:e7:fb:6e:da:25:
2c:b0:f2:50:60:ab:fa:f8:a2:89:55:ac:e7:fb:12:43:87:63:
b8:7f:75:44:3b:a7:e3:a4:52:c1:15:bf:22:af:57:50:c6:48:
63:34:13:91:3d:c1:ec:f6:9a:c5:56:83:f3:72:21:2d:87:58:
e7:3f:0e:15:ff:49:ab:0f:43:37:1e:33:86:e4:f6:3d:37:b8:
06:c1:23:0d:e4:29:e6:d7:86:cd:21:3b:46:06:2f:fb:ef:65:
74:e8:93:52:10:0e:ac:55:53:95:d5:ce:dd:12:9f:c3:26:2e:
da:c2:07:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:31:10 2025 by rpki-client