Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
File: LHwKdxsw0nQoUIDdxC42eYOW8iw.mft (raw, json)
Hash identifier: c0LisAnsfUV23q4E1ghTAVqvVY28dyrZr2pT2bKXLBI=
Subject key identifier: 26:F6:61:69:03:05:8C:03:68:C5:28:9F:E2:CB:89:92:5B:D4:95:CA
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Certificate issuer: /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial: 0199608FDD5B8B904FF639CAFF538A089624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
Manifest number: 13B4
Signing time: Fri 19 Sep 2025 06:01:04 +0000
Manifest this update: Fri 19 Sep 2025 06:01:04 +0000
Manifest next update: Sat 20 Sep 2025 06:01:04 +0000
Files and hashes: 1: LHwKdxsw0nQoUIDdxC42eYOW8iw.crl (hash: qnFA4kzhKeODKIl9fL/sUR9I9n7pj17TAP0BGE1YpE8=)
2: _wYBYYAWsBdIPcz67gJjf_cpxBc.roa (hash: WT5EAFrH+ID6hV4wr/zaJ0InnDxoXdrcj+f2kf7QcuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:8f:dd:5b:8b:90:4f:f6:39:ca:ff:53:8a:08:96:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
Validity
Not Before: Sep 19 06:01:04 2025 GMT
Not After : Sep 20 06:01:04 2025 GMT
Subject: CN=26f6616903058c0368c5289fe2cb89925bd495ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:a7:23:ae:fd:7a:af:cb:18:e6:6c:c9:80:
f1:e8:0e:b6:70:cf:64:f1:e5:58:8b:70:e6:3c:65:
cc:f1:18:0b:bd:b2:8e:ee:54:1e:7d:6c:26:d5:ce:
80:e6:22:ab:0d:e9:1b:c3:01:b8:84:cf:c7:c8:bd:
c5:13:2c:bf:a5:4b:00:6f:37:61:7b:41:df:10:01:
ef:24:fa:33:8c:ba:d7:6c:28:23:ab:8e:64:32:2a:
26:7e:ef:3d:07:6a:51:a5:ab:a2:b6:21:cf:1b:d7:
3f:26:a9:38:8b:6b:05:95:51:d6:06:67:5a:ee:b9:
ae:75:f0:a9:d1:23:3a:d1:ac:16:2a:be:fe:6d:ae:
57:83:7e:61:54:10:6a:95:19:77:fb:01:24:85:82:
f2:4a:53:43:c7:94:8e:ac:e7:ca:86:68:55:e1:71:
63:24:6f:54:05:f1:2c:ba:cb:64:5e:46:ab:a6:ff:
c5:30:27:cb:30:50:07:84:cc:46:c4:57:ba:5b:68:
69:c3:40:25:9b:a5:c8:a3:07:17:9b:c3:fd:26:e3:
c3:69:a9:a7:0d:23:5b:f1:59:f2:62:fc:5c:3c:f0:
5d:df:e5:e2:67:87:15:d6:1c:db:14:db:e8:c6:c7:
6f:a2:da:c3:af:20:ac:74:2b:0d:01:61:16:af:0d:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F6:61:69:03:05:8C:03:68:C5:28:9F:E2:CB:89:92:5B:D4:95:CA
X509v3 Authority Key Identifier:
keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f0:b0:3e:26:ec:60:c8:ac:3e:0c:1b:ac:0c:73:9c:56:86:
f5:f4:07:fe:57:42:d7:66:3f:44:33:45:9a:47:48:ea:2e:db:
96:5e:20:3b:7f:cf:ff:e4:1d:74:55:84:07:46:1b:f5:31:8d:
47:15:1b:f3:e1:87:f6:a9:4b:34:88:ff:e2:1a:24:61:5a:d6:
35:dd:18:26:b2:50:11:b7:aa:bf:b2:9b:8e:ef:94:49:ac:c8:
e6:d1:3b:88:e8:91:51:88:c1:47:ab:a3:5c:a3:ea:25:3a:df:
9c:ba:f9:79:37:9b:e6:42:74:cc:85:01:3e:0a:76:d3:e8:aa:
00:90:c3:59:6e:a7:41:b5:4a:83:b9:85:a9:68:b7:cb:d7:6f:
f2:5e:a8:67:27:6f:2a:90:d3:18:f3:55:f2:c2:d5:3f:d1:fe:
1f:ea:fb:19:f9:e3:c5:f3:aa:ec:ad:61:0a:18:46:ba:d6:c0:
f7:f7:61:fe:af:b1:ab:27:a0:7c:20:dd:da:e0:c6:ce:ab:09:
c6:ad:90:43:64:dc:18:44:71:0c:cb:fc:f3:cd:17:67:ac:64:
38:ac:33:4f:cc:1a:39:fd:03:f4:bf:21:a0:37:45:70:6a:f1:
4b:41:56:8c:50:dd:98:ac:de:86:f1:54:b2:5a:9e:cc:db:40:
76:33:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:27:59 2025 by rpki-client