Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File: LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier: W99h3rXjTeAkHkkZ8fF2oqB99vzqa2ckIjRSWguZvU4=
Subject key identifier: 90:A7:57:2F:AE:98:AC:0A:2C:3F:1E:C0:BC:8D:89:48:80:6D:D1:67
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial: 01992E233101B880A7C82E6702492870ED87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number: 047C
Signing time: Tue 09 Sep 2025 11:01:22 +0000
Manifest this update: Tue 09 Sep 2025 11:01:22 +0000
Manifest next update: Wed 10 Sep 2025 11:01:22 +0000
Files and hashes: 1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: /h8l3elu209cj0MCc2kGcHilg3+6edDNznqCfdruHzk=)
2: XEqexKJb2LrlBy7JmazWnnfRrCw.roa (hash: dfO0SxZnhpUVd2vYpZFuzNRZkTkzryjnbxAehzWWsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:23:31:01:b8:80:a7:c8:2e:67:02:49:28:70:ed:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Validity
Not Before: Sep 9 11:01:22 2025 GMT
Not After : Sep 10 11:01:22 2025 GMT
Subject: CN=90a7572fae98ac0a2c3f1ec0bc8d8948806dd167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:87:86:f7:bc:20:cf:ab:d7:15:ef:6a:84:c1:
b7:d3:3c:4f:81:86:87:a4:2b:37:20:7d:1a:9b:bf:
60:7d:8a:63:ea:79:7c:9a:d5:b2:bb:5d:f7:45:69:
80:c1:88:7c:1f:08:04:5d:0d:76:37:15:16:09:cc:
53:f8:44:f1:8d:86:76:5a:66:69:7c:77:cf:bc:20:
49:4d:f5:ae:27:5a:8a:19:1f:be:dd:6f:ef:c3:23:
37:20:fd:e0:44:74:f7:80:55:01:d0:da:89:17:84:
89:dc:2b:ca:34:b0:b7:32:30:e8:a7:f1:7b:c4:10:
7b:b1:fd:ff:20:d4:97:84:25:3f:fa:2e:44:51:36:
30:c5:3b:f8:59:91:34:5d:0d:ae:7d:6e:b1:21:6d:
0f:f6:e9:fa:2b:71:6d:12:0d:82:ac:86:45:7d:20:
07:b5:23:b0:a5:47:16:e0:e0:b7:f5:c7:b9:51:bd:
69:f1:01:5b:cc:c9:91:43:36:66:aa:ea:6e:09:c4:
d8:3e:f8:82:c5:e7:8b:19:cd:d7:79:02:b2:dd:aa:
2c:88:68:74:9d:60:22:fb:c9:b2:12:71:37:1e:f8:
32:68:6c:15:ad:1a:97:7f:50:f8:e4:c8:75:84:6a:
c7:02:c2:1b:35:66:e2:3c:8d:43:72:b2:6b:07:ed:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A7:57:2F:AE:98:AC:0A:2C:3F:1E:C0:BC:8D:89:48:80:6D:D1:67
X509v3 Authority Key Identifier:
keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:16:cc:92:a0:fa:ad:ee:d1:fa:6e:da:26:c3:c8:58:63:27:
bb:61:14:bc:34:89:e2:ea:4e:d9:3d:6c:53:a9:2f:55:06:b7:
d0:38:00:66:12:0e:85:fb:e8:ef:60:db:20:fd:d9:fe:b0:10:
f4:fa:ff:8d:49:a5:6a:e8:53:e0:b5:5c:2d:3f:e4:fe:77:1c:
ef:a0:7b:ff:8a:28:be:c5:8f:3d:df:45:c6:7c:57:fe:6d:78:
9b:93:c9:22:5d:53:95:50:4c:a0:97:39:2a:af:97:b7:68:6e:
33:fa:cd:b6:03:82:2f:b7:c8:f9:33:7e:da:43:5e:d4:d0:3e:
31:e7:dc:9e:2f:5c:bf:2b:97:26:79:34:2e:19:b2:4e:74:81:
6b:ac:c5:64:23:0e:48:7d:a9:fc:e6:40:b3:da:8d:bb:6f:57:
5e:6f:a6:2c:f5:72:b9:67:57:4f:cd:ae:15:40:78:fa:51:10:
d7:2e:62:46:be:b2:5f:86:c9:7b:64:d6:1a:fc:c3:83:b5:6d:
28:40:69:29:dc:09:35:b0:ef:9f:e0:d2:4e:18:be:bc:3d:16:
bb:0a:a6:60:ef:fe:89:99:e5:d2:e5:64:5f:bb:6c:7f:1d:70:
f0:dd:c8:6b:81:8e:e8:2e:34:3d:6b:f7:8d:a6:e9:09:b3:6f:
ba:10:83:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:39:58 2025 by rpki-client