Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
File: LWNPtoGAIUTwZMGxnxH2qudZbc8.mft (raw, json)
Hash identifier: MmDMpoCXomvJmZZ369WJ1IEjx8cdqFUKjwHzCIC0z6Q=
Subject key identifier: A5:9B:47:F0:C3:83:B9:4D:36:BA:17:AD:33:19:D5:A6:D0:15:C6:50
Authority key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
Certificate issuer: /CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Certificate serial: 019A7225DAD03C15EA605493D63CD2A1CCB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
Manifest number: 0A15
Signing time: Tue 11 Nov 2025 09:01:14 +0000
Manifest this update: Tue 11 Nov 2025 09:01:14 +0000
Manifest next update: Wed 12 Nov 2025 09:01:14 +0000
Files and hashes: 1: LWNPtoGAIUTwZMGxnxH2qudZbc8.crl (hash: aatPlriZyMGoKDj7eOvlMoHpmywnZPJx81g2818CgDY=)
2: VLvU695jlmxr_Aa_-diXqvNVQGY.roa (hash: /bKiG14xP3FUaKqcC1XqqIaBQA/QOWOmJHyp9J37dmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:da:d0:3c:15:ea:60:54:93:d6:3c:d2:a1:cc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Validity
Not Before: Nov 11 09:01:14 2025 GMT
Not After : Nov 12 09:01:14 2025 GMT
Subject: CN=a59b47f0c383b94d36ba17ad3319d5a6d015c650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:9c:83:36:28:1a:5a:87:96:95:d7:c7:b8:
d7:12:e3:5b:b9:f3:a0:3b:46:6e:61:68:32:ca:d7:
c0:b6:9b:46:f1:81:3a:f0:56:38:a9:14:63:1c:d0:
e8:02:b0:d7:45:55:1e:20:02:6c:88:3d:aa:8b:d7:
a3:11:6a:9e:92:6f:c8:32:bc:80:51:ad:83:5d:7e:
6e:68:27:ee:66:7c:c8:53:a6:6e:19:53:89:99:bc:
58:33:52:be:fc:1b:7d:12:c6:c8:84:62:eb:21:d6:
bc:d0:71:72:35:6b:c4:5f:ad:d8:9d:78:c0:a8:49:
b8:83:b0:6d:57:f2:81:7a:0d:d1:13:bb:a9:90:34:
6b:14:84:d6:c0:23:d7:9e:78:05:47:aa:44:58:fb:
92:15:bb:a7:7c:0c:47:1b:ec:3c:4f:d7:cb:87:f8:
6d:64:13:13:43:d0:a8:3a:2b:b7:e3:bf:f4:bb:f6:
8d:e9:56:18:85:76:8d:1f:94:81:42:91:4b:c5:b8:
ae:83:04:7e:7f:3f:6f:bd:e8:39:d2:3c:f3:0a:f2:
4e:30:ca:52:11:b4:da:98:e5:7e:0b:7a:78:98:56:
e4:75:1c:f9:8c:26:9d:8a:7c:df:7d:de:8c:ac:cd:
f2:df:92:6e:63:77:ad:ed:15:13:dc:8e:06:12:29:
44:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9B:47:F0:C3:83:B9:4D:36:BA:17:AD:33:19:D5:A6:D0:15:C6:50
X509v3 Authority Key Identifier:
keyid:2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8b:c7:0c:c5:db:e3:7a:63:bf:ef:4a:e2:3a:c9:52:34:78:
6b:4c:38:b4:76:a0:0a:e1:ec:23:5b:cb:12:40:f9:40:fe:1e:
fe:a9:f8:bf:e0:1e:6b:e9:a4:cc:60:51:52:5a:57:6b:3d:88:
88:e7:db:b7:02:df:aa:25:71:c5:c1:48:bf:f9:66:3c:73:db:
22:6c:a8:d3:fb:56:fe:95:d5:76:7a:f5:8d:b8:b3:a0:78:d5:
f6:e5:1b:f9:04:20:31:b1:68:65:de:50:50:f4:b1:bf:58:a3:
0c:d9:a7:b9:b3:3e:6c:be:99:d1:e9:f3:b4:18:ad:aa:22:10:
20:a4:fe:89:c8:d0:a4:43:21:b1:36:35:5e:b4:ac:f1:5f:26:
4a:0b:a7:00:a7:db:67:28:ec:15:06:f2:c2:fc:cd:fa:42:9b:
b7:7d:82:c7:4c:97:59:e2:be:bb:97:f6:d6:fe:0e:6c:ab:7e:
51:6d:ff:ed:80:1c:36:f7:ed:4a:b8:f6:86:88:fc:5d:8b:cf:
6f:a6:79:49:b3:71:dc:82:f0:07:ad:8a:7e:8b:21:04:f1:c7:
22:53:f9:e5:1c:30:4a:99:bf:b4:ab:8d:0c:a9:b1:cf:bc:51:
c6:8a:48:62:f3:1f:00:b8:37:7f:9e:20:fa:d3:02:c0:61:6e:
7d:47:90:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:29 2025 by rpki-client