Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: KXg5LWT1S5Yob7xKXNEVWwXUsWNgmPCZXkAZgYGa2Mw=
Subject key identifier: AE:2B:25:6B:13:8A:E7:86:48:A7:3C:51:55:9F:56:75:DE:2C:72:AB
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 01984708E6FAD823B1DCD72C4C527E7A7181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 0E89
Signing time: Sat 26 Jul 2025 14:00:22 +0000
Manifest this update: Sat 26 Jul 2025 14:00:22 +0000
Manifest next update: Sun 27 Jul 2025 14:00:22 +0000
Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: 4rCsTjmZqaWCURXSqSBuBC/KPxBKhRa0XTzPSnYsXQE=)
2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:e6:fa:d8:23:b1:dc:d7:2c:4c:52:7e:7a:71:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Jul 26 14:00:22 2025 GMT
Not After : Jul 27 14:00:22 2025 GMT
Subject: CN=ae2b256b138ae78648a73c51559f5675de2c72ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a6:dd:43:30:32:80:4c:a3:54:5f:b5:43:3f:
5d:a2:d4:7b:a5:b1:ec:be:1d:e9:1b:3b:e9:19:c2:
9c:15:a2:af:48:c5:8e:08:d8:84:fe:cd:4d:4e:c4:
ce:09:57:3f:f4:1c:8e:7a:28:c2:4b:6d:18:21:c8:
72:c5:cb:60:ad:1a:a2:2b:72:88:a0:74:24:41:f3:
13:6a:37:4d:29:8c:55:cd:be:48:e9:4e:71:7d:65:
86:84:97:da:26:a5:a1:41:f6:63:c9:8f:04:20:13:
08:1b:8e:2e:da:45:cc:c8:8f:7e:3b:29:be:95:cf:
7a:b7:df:e1:a3:6e:26:aa:ef:81:bc:3b:a4:29:17:
ae:ab:67:b4:be:9d:c8:7b:cc:36:1c:78:5a:03:8f:
18:8f:d1:11:23:d6:67:ea:73:22:b4:19:58:cc:15:
73:6c:0b:a2:2f:7c:8b:14:3d:2e:59:54:0f:2d:f2:
c0:f1:89:7e:62:68:bd:cd:e9:8f:73:d2:b9:93:0f:
26:30:d8:8b:88:9d:d4:24:52:8b:f7:f2:cd:d7:6a:
6f:67:31:09:85:d5:30:e3:56:eb:e5:d4:23:f4:16:
1a:26:ff:6b:bb:b2:e1:5b:73:a6:6f:b7:51:92:46:
d4:93:9d:fa:2d:0a:b3:60:0d:10:d4:69:98:ee:d3:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2B:25:6B:13:8A:E7:86:48:A7:3C:51:55:9F:56:75:DE:2C:72:AB
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2e:13:22:d6:2f:4b:dd:fe:15:73:64:06:4c:f3:8b:98:e9:
e9:20:46:c9:11:3a:bc:a3:9e:51:45:ab:e5:40:24:62:92:d2:
a5:df:51:a1:50:ea:7d:31:f7:3e:79:b0:3d:2d:7a:26:7d:37:
1b:91:3e:12:27:e8:f6:ca:51:68:ac:e4:70:bb:84:7a:64:85:
8f:59:1d:28:29:b9:10:f8:d2:97:fd:76:e6:c1:4e:e0:eb:58:
20:b6:10:e5:00:ec:b2:36:55:61:b2:3a:25:55:3a:5c:38:96:
35:89:f3:a8:ab:a1:68:e2:2c:2f:9c:47:99:84:91:f7:a1:fd:
3f:c4:13:95:05:c2:49:bb:f2:28:52:f7:ef:d9:d8:a9:60:15:
10:5b:3c:5d:af:c8:2e:3e:ca:41:88:dd:1b:85:24:22:5b:3c:
f8:50:0b:0b:3a:1d:cb:60:0c:d9:3a:7b:b5:34:9a:de:06:d1:
8a:06:a9:58:fd:b1:f7:5d:ca:3b:18:0f:61:90:6b:c7:23:78:
d0:5c:67:17:e8:5f:45:48:10:4b:3d:ac:73:a1:81:75:1d:47:
d8:2b:04:62:15:80:e6:4d:5c:65:f8:df:54:68:06:d0:3a:55:
f6:a1:a1:4a:25:aa:9c:3a:83:62:72:e1:1c:35:0d:83:1c:c5:
96:c7:cf:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCOb62COx3NcsTFJ+enGBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjk4YmFmOWZmM2VlZWJlNjYyODQ4ODlmYmY2ODlkNGU2
ODNjODEwHhcNMjUwNzI2MTQwMDIyWhcNMjUwNzI3MTQwMDIyWjAzMTEwLwYDVQQD
EyhhZTJiMjU2YjEzOGFlNzg2NDhhNzNjNTE1NTlmNTY3NWRlMmM3MmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qbdQzAygEyjVF+1Qz9dotR7pbHs
vh3pGzvpGcKcFaKvSMWOCNiE/s1NTsTOCVc/9ByOeijCS20YIchyxctgrRqiK3KI
oHQkQfMTajdNKYxVzb5I6U5xfWWGhJfaJqWhQfZjyY8EIBMIG44u2kXMyI9+Oym+
lc96t9/ho24mqu+BvDukKReuq2e0vp3Ie8w2HHhaA48Yj9ERI9Zn6nMitBlYzBVz
bAuiL3yLFD0uWVQPLfLA8Yl+Ymi9zemPc9K5kw8mMNiLiJ3UJFKL9/LN12pvZzEJ
hdUw41br5dQj9BYaJv9ru7LhW3Omb7dRkkbUk536LQqzYA0Q1GmY7tOvjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4rJWsTiueGSKc8UVWfVnXeLHKrMB8GA1UdIwQY
MBaAFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzkt
ZGZmNWEwOWE4MmNiLzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzktZGZmNWEwOWE4MmNi
LzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAky4TItYv
S93+FXNkBkzzi5jp6SBGyRE6vKOeUUWr5UAkYpLSpd9RoVDqfTH3PnmwPS16Jn03
G5E+Eifo9spRaKzkcLuEemSFj1kdKCm5EPjSl/125sFO4OtYILYQ5QDssjZVYbI6
JVU6XDiWNYnzqKuhaOIsL5xHmYSR96H9P8QTlQXCSbvyKFL379nYqWAVEFs8Xa/I
Lj7KQYjdG4UkIls8+FALCzody2AM2Tp7tTSa3gbRigapWP2x913KOxgPYZBrxyN4
0FxnF+hfRUgQSz2sc6GBdR1H2CsEYhWA5k1cZfjfVGgG0DpV9qGhSiWqnDqDYnLh
HDUNgxzFlsfPkw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:44:34 2025 by rpki-client