Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
File: lwhyRZO0dTF1shSBLPaJGmRfhMU.mft (raw, json)
Hash identifier: cQ3ePNcKA1yyFEcV0NQkyA5bkZ+VX8KB6X6bXLKvfRs=
Subject key identifier: 23:F7:52:14:2D:56:06:43:9B:C3:ED:52:06:C4:4E:A1:73:B9:92:C5
Authority key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
Certificate issuer: /CN=9708724593b4753175b214812cf6891a645f84c5
Certificate serial: 0199228C347D9B94B7D4D90575188CCC6067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
Manifest number: 0197
Signing time: Sun 07 Sep 2025 05:00:37 +0000
Manifest this update: Sun 07 Sep 2025 05:00:37 +0000
Manifest next update: Mon 08 Sep 2025 05:00:37 +0000
Files and hashes: 1: lwhyRZO0dTF1shSBLPaJGmRfhMU.crl (hash: /KJZ+MokK24BDyVOrEPEtYezLZraJDdStpxKaJa9n/I=)
2: tTnQsLwHNO3gLW3S0MP8mMKmk64.roa (hash: DzDj3u7iBFvq9rklayzZVdsYdkT8c0vWssYs/0kky9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:34:7d:9b:94:b7:d4:d9:05:75:18:8c:cc:60:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9708724593b4753175b214812cf6891a645f84c5
Validity
Not Before: Sep 7 05:00:37 2025 GMT
Not After : Sep 8 05:00:37 2025 GMT
Subject: CN=23f752142d5606439bc3ed5206c44ea173b992c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:da:7d:6f:4f:67:4f:99:2b:5c:4e:4b:e1:3a:
ad:18:fd:bd:a3:49:0f:1b:7e:f5:a1:85:de:69:2f:
e1:2b:40:5c:cd:49:5c:d5:00:7b:f9:3d:c9:a8:d0:
d9:75:a8:93:d7:76:d5:d4:8b:8c:c4:ee:5a:8e:38:
9e:7e:de:58:a3:2f:a9:5b:0a:5a:7d:05:9f:ae:67:
86:0b:7a:d0:eb:ef:e7:c3:cd:ba:d4:77:c4:8a:68:
9f:98:30:45:1e:a1:f6:d3:74:f5:42:0f:37:af:cc:
e2:db:fa:3c:16:d4:56:ee:1a:9a:8c:a2:40:d3:8f:
1a:d5:77:be:82:dd:b1:07:21:2f:c1:65:1e:3a:e6:
14:1b:c6:bc:4b:7b:4d:dd:a9:7f:ec:51:17:10:de:
fe:9e:18:1d:ce:77:e9:74:4f:f5:c2:9e:d0:db:73:
a5:ac:fa:bd:08:1d:54:a3:54:3e:4a:d9:3f:0e:54:
d4:97:f2:54:0b:b2:17:1a:41:ab:00:14:82:06:9f:
f5:ff:d9:b7:7d:67:23:99:44:d9:b9:14:a7:ec:87:
b3:60:b6:0a:0e:cb:f4:b3:5b:20:cb:a8:49:b3:bb:
c0:d6:29:01:ae:aa:c9:5e:03:cc:e5:f4:45:8b:66:
28:88:88:d6:4e:f3:7d:67:ae:e8:5b:52:74:c6:5a:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F7:52:14:2D:56:06:43:9B:C3:ED:52:06:C4:4E:A1:73:B9:92:C5
X509v3 Authority Key Identifier:
keyid:97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b1:b0:1c:df:7d:bb:a3:33:4d:26:a2:85:c9:4b:1b:e1:00:
40:3c:e6:8d:ae:49:d6:49:07:88:78:35:43:a4:d9:1d:11:ec:
d6:08:51:87:a8:f2:86:9a:b9:7d:25:72:a6:aa:8b:41:92:21:
66:df:66:f3:57:cb:8d:b2:01:46:2e:42:fc:a8:52:06:ac:ce:
1b:c2:f4:ed:25:97:23:f0:83:fe:20:1b:fb:c4:2c:51:0a:c3:
0b:6e:ad:6d:8e:cf:06:4f:55:54:14:5c:5c:60:10:56:1f:d5:
4e:be:2f:5d:c3:20:93:ff:69:98:e2:78:70:be:96:6b:a5:d7:
60:08:44:e8:0b:10:88:a7:e5:64:c2:6f:59:b9:32:c8:d4:05:
bf:1f:4f:15:c4:79:be:7c:1c:5f:8e:89:3b:57:08:90:30:8a:
a0:a8:6f:52:f3:92:9b:2f:d3:f5:3d:1f:50:2c:cb:07:d4:cf:
69:ad:ea:1f:cc:6a:7b:63:c1:b0:04:99:d1:36:97:8b:c0:0e:
7f:4f:85:70:40:eb:1a:db:82:ff:63:fa:a9:87:9a:f7:0f:e6:
0f:ab:83:92:b5:59:39:8a:72:86:2d:d2:55:b5:44:2d:f6:99:
13:b9:57:4d:2c:ef:e4:21:cb:74:f0:9b:a2:fc:17:66:20:76:
09:c4:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:31 2025 by rpki-client