Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: OzSOv/yG7R+ULy8+eb4H5I0G3VZRjLrZtiFWhgRrXfM=
Subject key identifier: 1F:81:B7:5D:3F:73:00:7C:01:40:BD:21:72:0B:EC:A4:E1:12:76:1E
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 019933124D79D71F6DCE9182C757BE97CD48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 10:01:01 +0000
Manifest this update: Wed 10 Sep 2025 10:01:01 +0000
Manifest next update: Thu 11 Sep 2025 10:01:01 +0000
Files and hashes: 1: aRRMx2LpXrXzb91tfKNbEYwqTy4.roa (hash: u9ed+0pIjkL2kAKw6TtOQkn9W9RbAQ792y7vYcRd71M=)
2: eV3A69o5dbmXhkcbRscNdwCcmUw.roa (hash: 1+RfsWC1iIY4uoQdBg4VWebMYcz8BpqPe7dmv43mNg4=)
3: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: PbHXPPG9EsCbD8WONROHIrKmFhKwz7imY8FE/4ooYdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:4d:79:d7:1f:6d:ce:91:82:c7:57:be:97:cd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Sep 10 10:01:01 2025 GMT
Not After : Sep 11 10:01:01 2025 GMT
Subject: CN=1f81b75d3f73007c0140bd21720beca4e112761e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:0a:00:a7:30:57:72:e1:ad:24:24:f6:5d:
b4:30:9c:7b:03:61:1e:f1:e7:ae:6a:bd:be:db:c4:
48:ef:47:83:4e:a2:f7:6a:58:ca:a5:92:4b:ad:8d:
8e:4e:74:98:2c:59:58:5c:c7:ce:0a:a4:9f:98:0d:
e6:af:ba:f3:6f:88:b6:33:68:c3:06:58:2e:9c:47:
ee:34:4e:9c:f1:5d:c4:0c:80:cc:da:3a:ae:25:9d:
4e:d3:27:0e:1a:5e:05:21:98:a6:a5:3d:52:29:70:
17:61:85:ba:76:e8:07:59:46:ed:2b:d3:c3:59:b5:
c2:aa:c2:c9:93:51:bd:41:02:7e:ad:6e:12:31:b5:
32:ba:d1:fa:24:1c:ec:66:bb:43:d3:94:57:b3:0a:
be:17:53:f8:98:88:c8:2f:60:f9:77:6e:13:1e:f3:
89:fa:9e:08:05:1f:f1:85:f7:74:2c:44:10:af:6c:
55:85:b4:14:9a:15:d1:36:3d:6e:68:5b:05:23:f4:
0a:41:f7:0d:cc:79:ad:05:e2:a5:71:ce:22:4a:e4:
a0:a9:d6:70:9d:78:01:bf:4a:cf:c5:63:04:ee:a0:
25:3d:04:b0:60:eb:cc:86:50:93:91:b7:71:6e:60:
b1:44:95:f2:91:36:0c:03:e9:4f:39:56:c4:6e:c0:
d3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:81:B7:5D:3F:73:00:7C:01:40:BD:21:72:0B:EC:A4:E1:12:76:1E
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:be:66:bf:a7:8c:a5:6f:a1:5f:0f:2a:58:0b:92:22:86:ce:
c5:5c:bc:bd:cb:47:1e:fc:2d:36:9f:27:9e:f1:9c:1c:9b:22:
dc:0c:f0:fa:38:86:de:40:10:85:49:62:1d:b5:49:85:f8:d2:
4c:03:5a:7a:dd:bc:4e:fb:0d:05:32:d6:0a:19:1d:44:b2:9d:
6c:37:db:cd:18:bf:2b:c2:a5:d3:4e:57:92:da:9a:ca:79:04:
14:9e:28:56:c3:84:38:3d:b5:4c:ba:08:cf:c2:6f:a8:82:b4:
f4:95:b3:dd:c7:1d:c8:da:e1:a1:9a:f5:81:ce:96:42:e2:08:
65:da:3a:b8:2e:36:4a:73:b2:92:24:64:df:25:8c:8b:0a:90:
81:41:4d:1b:44:0a:ce:21:87:5b:b5:a9:fc:78:63:23:60:8e:
af:90:fd:2b:38:31:d3:ed:d7:df:f9:90:f6:4c:eb:78:e7:23:
80:bc:1d:41:22:4c:1e:52:42:a9:d5:6b:ef:27:82:64:2b:8e:
76:0b:eb:37:d8:cb:29:c6:77:5b:b8:25:8a:82:31:26:b1:aa:
a5:a9:6d:4a:6c:45:63:51:dd:30:83:70:95:74:d6:1e:c3:1a:
0d:95:ce:19:64:8a:57:e3:d4:1a:3a:07:3d:5b:ea:5f:83:70:
d4:ac:97:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:26:17 2025 by rpki-client