Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
File: _LwbYj6YBVnjKlodtYD4pzRBdwU.mft (raw, json)
Hash identifier: nZtOpZh44oCTCFiMNa1Nm66IE/oGRWqOGTrbiCHfJbQ=
Subject key identifier: 96:D4:C4:D1:2C:7A:EE:B8:9C:E4:EA:70:D6:2B:30:1F:95:EE:22:E9
Authority key identifier: FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
Certificate issuer: /CN=fcbc1b623e980559e32a5a1db580f8a734417705
Certificate serial: 0199225549A122B5DEFB3FB5013F6A13F392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
Manifest number: 061C
Signing time: Sun 07 Sep 2025 04:00:38 +0000
Manifest this update: Sun 07 Sep 2025 04:00:38 +0000
Manifest next update: Mon 08 Sep 2025 04:00:38 +0000
Files and hashes: 1: HY2qqakYUKmGxzXSwPgmmaqbnWQ.roa (hash: ijxTXIq4WZ5WszUemCRN8Fg/4BF4CCUnIK9TDQDj4gU=)
2: _LwbYj6YBVnjKlodtYD4pzRBdwU.crl (hash: /nvETxA5A8Xm2eszZ4RITlvW8D2Hvro2n9QnMAxbatI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:49:a1:22:b5:de:fb:3f:b5:01:3f:6a:13:f3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbc1b623e980559e32a5a1db580f8a734417705
Validity
Not Before: Sep 7 04:00:38 2025 GMT
Not After : Sep 8 04:00:38 2025 GMT
Subject: CN=96d4c4d12c7aeeb89ce4ea70d62b301f95ee22e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:cd:bb:7d:11:73:c4:84:6c:c7:9e:fe:be:
28:38:b2:07:1e:fd:e9:a7:60:a1:aa:0e:15:fe:8f:
0d:5f:aa:73:a2:c6:41:a9:e1:0e:8a:18:1a:58:b2:
b1:d6:d9:8f:c0:f6:91:3e:09:d3:69:68:77:b5:eb:
dd:6c:c2:ad:76:cd:dd:f2:0f:fb:2c:ff:5e:8b:4a:
f5:ac:89:d9:1f:87:55:84:7c:1a:87:76:1d:41:17:
39:43:38:f6:b4:c3:5c:18:cc:d3:91:65:d7:11:d1:
a6:af:0d:a6:56:31:ee:42:e2:b2:84:b1:67:ff:55:
5a:0a:21:e6:23:4b:58:69:e5:10:6b:7a:e8:4d:86:
2b:0f:d5:ad:31:20:9b:97:7a:ee:d9:8e:c0:9b:15:
e3:34:ac:6f:72:45:95:ff:c4:10:53:8b:73:35:65:
15:a6:1c:c3:cc:c9:a3:64:ce:22:28:35:53:87:87:
7d:91:8e:df:61:98:1e:9b:0c:9c:d7:bf:2e:b7:88:
be:7d:10:f0:10:9f:7d:a5:18:1b:e8:81:c5:d5:7b:
28:20:ba:8e:27:3c:a8:64:fc:e5:74:7d:6a:dd:d7:
14:63:64:34:d0:09:60:fe:0e:01:a3:08:d2:15:25:
03:f4:98:19:24:b6:b5:d5:c2:7b:61:62:64:0c:f5:
25:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D4:C4:D1:2C:7A:EE:B8:9C:E4:EA:70:D6:2B:30:1F:95:EE:22:E9
X509v3 Authority Key Identifier:
keyid:FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:99:f6:ab:91:ca:e4:dd:ea:1d:28:0a:6a:b4:4c:de:a9:f6:
23:6c:ae:d4:99:29:b0:7a:37:11:2a:f0:1d:c9:24:c2:64:fa:
f1:22:f1:a8:1b:96:c4:88:32:4b:42:59:72:32:4f:f6:c6:fc:
23:11:f1:8b:dc:99:85:aa:7c:60:61:7e:b5:df:18:3d:d0:5c:
25:d1:75:30:8d:ce:3b:37:fd:a8:ca:e5:dc:3c:ce:40:b5:98:
66:7d:73:c4:31:21:83:32:93:e7:e1:31:29:24:f7:ed:6e:74:
7f:54:70:0d:ca:2d:20:6e:6f:2e:1a:61:75:bf:47:43:11:6e:
79:dc:c1:23:9a:48:30:00:6e:26:af:76:d9:a9:38:f8:0e:fd:
aa:27:73:f0:27:8b:0a:2f:b3:8d:e3:b9:50:e3:84:50:ea:6b:
f7:87:74:12:c3:2d:43:a6:cd:43:a4:de:82:dd:05:8a:5b:5f:
bb:03:23:47:95:7f:40:7f:3c:0b:5b:9c:e1:56:0b:f1:ab:2a:
c1:dc:83:21:aa:58:a3:17:6a:cd:e4:73:06:8e:ac:71:a2:c6:
2b:d1:c1:3c:02:46:cf:bb:09:e1:a0:6c:6f:47:23:3c:32:b3:
00:f0:42:a6:79:bc:93:cd:ab:9d:63:42:f4:8a:77:45:fe:67:
e9:7b:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:51 2025 by rpki-client