Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
File: lwhyRZO0dTF1shSBLPaJGmRfhMU.mft (raw, json)
Hash identifier: DSaorfxqmzlN4I17spQJRSDSw/XkXlUE8E9fryG9AZ8=
Subject key identifier: 48:62:86:2D:D2:43:56:40:A0:18:DF:33:6F:33:12:84:B9:C7:5F:CA
Authority key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
Certificate issuer: /CN=9708724593b4753175b214812cf6891a645f84c5
Certificate serial: 019A70A4DCEA1EBB5FFD321DF1219575C228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
Manifest number: 0244
Signing time: Tue 11 Nov 2025 02:00:43 +0000
Manifest this update: Tue 11 Nov 2025 02:00:43 +0000
Manifest next update: Wed 12 Nov 2025 02:00:43 +0000
Files and hashes: 1: lwhyRZO0dTF1shSBLPaJGmRfhMU.crl (hash: hecvK6ZNy4+/mrNcHW0gLVWg5lxTavbk4QkudpbOYBI=)
2: tTnQsLwHNO3gLW3S0MP8mMKmk64.roa (hash: DzDj3u7iBFvq9rklayzZVdsYdkT8c0vWssYs/0kky9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:dc:ea:1e:bb:5f:fd:32:1d:f1:21:95:75:c2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9708724593b4753175b214812cf6891a645f84c5
Validity
Not Before: Nov 11 02:00:43 2025 GMT
Not After : Nov 12 02:00:43 2025 GMT
Subject: CN=4862862dd2435640a018df336f331284b9c75fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:79:9a:78:c4:a6:65:50:3e:c8:dd:e4:9d:23:
97:62:0c:38:05:65:df:05:b6:24:14:30:db:69:a5:
c8:33:2f:ac:a0:f0:06:c1:ab:60:32:81:46:b6:50:
ef:f4:1e:d9:cb:b1:ae:02:73:40:e2:39:4a:b0:81:
b4:0c:84:53:02:75:a5:c6:1e:14:58:76:36:34:aa:
75:cf:83:89:24:90:62:a0:a0:27:41:d5:2f:d7:a7:
2a:2b:ba:2f:6a:bf:19:30:b8:f0:24:73:77:51:60:
0e:a4:77:01:9a:ac:3e:03:7b:b7:ba:2b:46:83:ed:
74:b6:34:b8:3c:cd:ef:af:73:9b:8d:38:ea:25:1f:
5f:29:c9:70:fa:9f:65:89:ef:76:30:01:ed:bd:3c:
7d:cf:b1:ff:bf:04:6f:ff:a9:d2:18:d0:14:41:6d:
12:8a:7c:5c:85:b8:53:51:b8:6e:da:4c:bc:c1:b1:
e2:82:08:fa:d9:a3:4a:60:9b:a0:52:cb:ab:b0:2b:
e7:89:6b:cb:c0:3b:0c:ec:04:43:37:2d:58:9a:0f:
60:11:cf:59:8b:38:73:69:35:94:4f:44:c8:52:35:
ec:91:f0:73:66:c1:75:bb:03:1a:8a:a0:60:04:ca:
8b:d3:bb:c4:40:8b:11:98:0a:bc:74:ee:1b:65:a2:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:62:86:2D:D2:43:56:40:A0:18:DF:33:6F:33:12:84:B9:C7:5F:CA
X509v3 Authority Key Identifier:
keyid:97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:47:c7:40:9d:a1:0e:22:50:5d:16:4c:d0:cd:e4:67:60:f2:
b6:83:f4:8e:86:22:0e:f5:4b:f9:97:96:78:98:c8:3f:ec:25:
50:df:d1:26:e4:57:b2:0b:1f:13:e4:21:c2:4a:1b:d8:50:bd:
00:c2:45:a8:1b:2b:26:04:ec:43:c3:9c:d5:ee:84:ea:68:af:
0c:76:18:04:c1:0f:ca:f1:4b:b7:86:5a:71:03:da:f1:56:3b:
85:5b:0b:c5:49:f7:71:05:a3:7f:67:82:58:7f:1f:33:1b:8d:
a1:80:0f:b8:03:b0:92:8d:f9:fa:92:07:d3:94:a7:05:6f:39:
95:1e:63:14:43:d9:da:33:10:70:32:97:a7:06:a8:48:dc:93:
3d:8e:b3:bc:9c:18:60:1a:b0:f9:9d:75:fa:48:8e:fc:f8:f0:
8e:f0:f0:5c:ef:f3:d9:59:92:29:42:f8:71:c5:cf:67:8c:3d:
1b:60:71:c1:0e:b8:42:b9:78:b3:b0:f9:fd:f9:aa:a0:80:c5:
8c:e7:37:63:6c:4b:0e:b6:79:0f:dd:fb:01:4b:b1:c8:f5:23:
c8:8d:77:20:2c:23:c6:89:92:66:2e:15:61:b1:23:e9:f0:ac:
b1:09:6a:c7:99:14:f6:70:9b:9f:3a:33:6e:ed:3e:8f:af:32:
5d:41:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:44 2025 by rpki-client