Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json)
Hash identifier: 0kOC6szm4B5PMeCSpObwXB1nT9oe9P1J3TB97/YS0Ic=
Subject key identifier: 64:58:0D:B4:DF:05:8B:00:42:1F:A7:C8:37:39:9B:3B:3A:56:84:9B
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 0197512173FF576B9F018B27AE740C4D4769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 20:00:36 +0000
Manifest this update: Sun 08 Jun 2025 20:00:36 +0000
Manifest next update: Mon 09 Jun 2025 20:00:36 +0000
Files and hashes: 1: c2mbKi5UZ3GiOkTKMMsYLmmHWNU.roa (hash: UtxHj7i+M428S4MKPB9E9Q2PRXSjTUZ5FcXtjJA5bUs=)
2: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: yf82vehCMJT5WeI6vJAU4beDrywm16pWfPD3uE+ZyLs=)
3: oRfW2FP4FbeYSI3kehqgncp9gcc.roa (hash: XwGX8naDPDNcbpgigNakMaNKC6NSSrDBYhs82eP32R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:73:ff:57:6b:9f:01:8b:27:ae:74:0c:4d:47:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Jun 8 20:00:36 2025 GMT
Not After : Jun 9 20:00:36 2025 GMT
Subject: CN=64580db4df058b00421fa7c837399b3b3a56849b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:aa:cd:24:e6:f6:81:f3:8c:7c:32:59:71:
fb:e9:28:43:d8:8a:a2:c7:bd:fe:23:55:8a:80:2d:
df:3c:26:a0:89:4d:eb:b8:81:90:44:7e:9c:4a:8a:
d9:94:7b:f6:4f:34:be:69:8a:6c:d8:7a:aa:86:47:
53:c9:f7:31:77:58:6d:49:d3:66:7f:aa:86:b6:49:
c0:7e:b2:76:57:c2:00:ba:59:36:9d:4e:b5:fa:47:
9e:28:27:7c:56:b2:92:a5:e3:5e:2f:ef:9c:90:cc:
a7:ea:9e:c0:bc:ce:82:e7:cf:3c:ff:c8:4e:13:ec:
bc:17:df:04:95:81:3b:cf:85:46:4a:b1:23:2d:66:
c7:3e:99:29:1c:b5:0f:63:ad:94:4e:2b:27:64:d3:
71:8f:b2:06:d7:8a:89:a2:4b:57:73:aa:5a:42:cf:
07:f2:10:3f:c9:74:16:36:a4:98:30:70:cf:b7:c9:
ad:00:0f:e2:90:40:c7:3a:30:0e:8c:6e:15:b2:c5:
dc:29:3b:82:fa:7e:7b:1f:6d:c9:df:aa:f2:5b:7f:
aa:7f:d8:34:0d:2d:61:1c:fb:38:ec:17:cb:81:57:
cb:4e:ec:5b:c8:a0:95:e8:c1:18:06:18:b1:fc:4a:
41:62:b6:85:0a:b9:7f:5f:b4:3b:a6:29:0a:b7:4d:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:58:0D:B4:DF:05:8B:00:42:1F:A7:C8:37:39:9B:3B:3A:56:84:9B
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cc:c4:1d:67:9f:9a:40:c0:e3:36:02:3e:d9:2c:2e:1e:fe:
9c:62:97:39:48:29:68:78:2d:79:2e:74:0b:19:fc:fa:77:16:
3c:f5:c1:07:2c:17:3f:1b:23:05:0a:27:ff:d5:77:e0:b7:b2:
53:00:76:6d:09:58:b6:5e:88:54:7a:62:84:5d:a3:c9:04:45:
2f:4e:ab:56:db:68:46:1b:66:03:64:0c:6a:54:09:13:61:90:
69:d3:3f:9c:ab:68:72:c0:85:a5:6f:d3:e2:7e:6f:ba:a6:1e:
96:af:ae:20:93:ea:3d:4e:d4:2c:39:48:05:8d:3d:21:28:a3:
ec:5a:c2:c3:3c:c1:1e:76:23:9a:e2:fe:d5:ab:94:45:d4:e5:
6c:a5:35:45:8f:86:e0:6f:8e:ef:6d:0a:c5:73:27:4d:84:ee:
74:c9:78:b9:d7:78:db:2c:90:42:e4:c7:7b:a2:fd:a3:87:13:
ca:83:40:76:0e:0a:b7:a9:af:cd:fe:62:d8:dc:5f:5a:e9:fc:
af:56:88:f2:aa:66:76:c6:7d:14:a1:99:61:ba:f3:7c:99:59:
13:c7:19:2b:4d:63:64:ad:d6:91:64:54:83:a6:d9:3b:7f:1b:
49:27:9f:8e:78:92:47:aa:8c:a8:6c:06:78:9d:92:98:87:39:
fa:39:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:09 2025 by rpki-client