Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
File: LWNPtoGAIUTwZMGxnxH2qudZbc8.mft (raw, json)
Hash identifier: Ts6LFEm5RsgAyAKyA6qXFsb8ZlcgcFHPz/yN/XpxE1s=
Subject key identifier: 4C:57:CD:B4:55:AB:02:A9:50:D2:44:67:B9:2D:82:96:8E:AD:54:D2
Authority key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
Certificate issuer: /CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Certificate serial: 0199221EF2E506A8A5C0E7C960BB203B23FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
Manifest number: 0967
Signing time: Sun 07 Sep 2025 03:01:17 +0000
Manifest this update: Sun 07 Sep 2025 03:01:17 +0000
Manifest next update: Mon 08 Sep 2025 03:01:17 +0000
Files and hashes: 1: LWNPtoGAIUTwZMGxnxH2qudZbc8.crl (hash: vv7efNzZCUVFfkTT4wIT4evL6OBjeEf1Kj7bPF+Jyxg=)
2: VLvU695jlmxr_Aa_-diXqvNVQGY.roa (hash: /bKiG14xP3FUaKqcC1XqqIaBQA/QOWOmJHyp9J37dmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f2:e5:06:a8:a5:c0:e7:c9:60:bb:20:3b:23:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Validity
Not Before: Sep 7 03:01:17 2025 GMT
Not After : Sep 8 03:01:17 2025 GMT
Subject: CN=4c57cdb455ab02a950d24467b92d82968ead54d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:01:88:bd:62:08:2e:10:9b:72:88:44:a1:
be:52:94:38:09:81:e7:83:6f:04:cd:14:b1:af:85:
a9:83:e6:b8:17:2d:10:4d:21:6f:b0:12:6d:9c:eb:
7f:0d:c8:89:c1:ed:63:b8:10:c0:c9:b3:b6:30:88:
95:8b:3e:5d:58:22:9e:9d:7b:15:15:dd:77:7c:4e:
57:2a:0f:01:95:0c:fd:42:a6:a7:7c:20:ee:ee:90:
d4:ad:21:f1:42:ef:43:16:61:93:d9:99:2d:ae:4a:
2b:b3:5b:74:b3:2f:17:fa:35:42:69:09:d9:67:1b:
3c:73:4f:26:6a:19:9d:82:f7:54:95:83:a3:54:b4:
b0:7a:9c:59:e2:04:92:d0:72:b1:60:f3:b6:87:80:
ce:11:49:26:68:8f:b4:84:a7:30:08:38:54:b5:78:
c4:12:df:ac:54:55:2e:e0:ce:89:36:d2:eb:29:93:
a3:60:c5:db:a4:e9:f7:ae:4a:89:e7:24:e4:9e:42:
53:06:d8:a6:d5:37:c8:be:15:cc:9d:43:03:c5:d9:
d3:06:5d:fd:00:a5:53:f7:2c:ed:09:4b:a9:1c:96:
ff:2d:25:eb:32:9c:02:49:98:11:e1:10:ef:a1:0f:
34:88:a1:d0:49:b3:62:7a:ba:23:cd:88:5b:04:6e:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:57:CD:B4:55:AB:02:A9:50:D2:44:67:B9:2D:82:96:8E:AD:54:D2
X509v3 Authority Key Identifier:
keyid:2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8a:0a:11:74:e1:9c:8e:b7:ff:27:06:98:d9:c4:0e:35:1d:
8b:10:be:9d:c8:b8:5d:5b:f6:ac:e0:55:39:15:54:c2:f0:db:
4c:4b:b8:ea:ad:b3:44:0b:3b:65:bf:23:53:f2:b5:35:c5:bb:
90:2f:d0:05:52:03:9f:65:73:90:b5:61:39:bf:97:c3:f2:f8:
5d:9c:0b:78:72:da:68:4f:9d:1c:c9:4c:52:1d:ef:93:6f:d3:
6c:eb:b0:b7:25:7e:07:06:99:d7:e8:9a:2a:49:fe:51:74:e6:
fc:ac:b7:94:4c:b8:ae:93:f4:b4:92:8e:2b:db:6c:ea:a1:76:
72:0a:38:a7:e7:fb:6c:a4:b9:09:3c:ed:c9:6b:09:12:94:67:
6f:3e:b2:62:c4:a5:6a:2b:dc:ee:69:50:42:ee:dc:66:ad:2d:
3a:c2:f7:98:b9:fe:9a:0d:17:eb:9f:de:4f:e9:49:a1:88:3b:
a7:d8:5d:e9:42:82:31:14:df:8f:21:18:70:87:1a:13:8d:5d:
54:0d:ec:97:d0:7b:2e:62:b7:c0:7a:25:21:89:be:e9:50:40:
69:09:dd:7b:53:e6:ea:eb:e7:c6:4d:08:c0:c2:2f:98:17:a5:
b4:68:38:ac:d9:a2:d4:3d:64:3e:2a:8b:06:7d:aa:96:45:64:
5b:ea:ed:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHvLlBqilwOfJYLsgOyP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjM0ZmI2ODE4MDIxNDRmMDY0YzFiMTlmMTFmNmFhZTc1
OTZkY2YwHhcNMjUwOTA3MDMwMTE3WhcNMjUwOTA4MDMwMTE3WjAzMTEwLwYDVQQD
Eyg0YzU3Y2RiNDU1YWIwMmE5NTBkMjQ0NjdiOTJkODI5NjhlYWQ1NGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/gBiL1iCC4Qm3KIRKG+UpQ4CYHn
g28EzRSxr4Wpg+a4Fy0QTSFvsBJtnOt/DciJwe1juBDAybO2MIiViz5dWCKenXsV
Fd13fE5XKg8BlQz9QqanfCDu7pDUrSHxQu9DFmGT2Zktrkors1t0sy8X+jVCaQnZ
Zxs8c08mahmdgvdUlYOjVLSwepxZ4gSS0HKxYPO2h4DOEUkmaI+0hKcwCDhUtXjE
Et+sVFUu4M6JNtLrKZOjYMXbpOn3rkqJ5yTknkJTBtim1TfIvhXMnUMDxdnTBl39
AKVT9yztCUupHJb/LSXrMpwCSZgR4RDvoQ80iKHQSbNierojzYhbBG5NFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExXzbRVqwKpUNJEZ7ktgpaOrVTSMB8GA1UdIwQY
MBaAFC1jT7aBgCFE8GTBsZ8R9qrnWW3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdOUHRvR0FJVVR3Wk1HeG54SDJxdWRaYmM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iYTE5ODctNTIyZS00OThjLWEzNTkt
NzZhMGY3Yjg0MWRjLzEvTFdOUHRvR0FJVVR3Wk1HeG54SDJxdWRaYmM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iYTE5ODctNTIyZS00OThjLWEzNTktNzZhMGY3Yjg0MWRj
LzEvTFdOUHRvR0FJVVR3Wk1HeG54SDJxdWRaYmM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIooKEXTh
nI63/ycGmNnEDjUdixC+nci4XVv2rOBVORVUwvDbTEu46q2zRAs7Zb8jU/K1NcW7
kC/QBVIDn2VzkLVhOb+Xw/L4XZwLeHLaaE+dHMlMUh3vk2/TbOuwtyV+BwaZ1+ia
Kkn+UXTm/Ky3lEy4rpP0tJKOK9ts6qF2cgo4p+f7bKS5CTztyWsJEpRnbz6yYsSl
aivc7mlQQu7cZq0tOsL3mLn+mg0X65/eT+lJoYg7p9hd6UKCMRTfjyEYcIcaE41d
VA3sl9B7LmK3wHolIYm+6VBAaQnde1Pm6uvnxk0IwMIvmBeltGg4rNmi1D1kPiqL
Bn2qlkVkW+rtJA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:48 2025 by rpki-client