Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
File: LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json)
Hash identifier: sc7DIITfIydUVXKLC82WbriQ6OnEQ50+V4ukh61vYFs=
Subject key identifier: 44:A6:BD:9B:A6:00:53:15:B9:05:34:25:33:1B:A6:CD:D3:EE:10:9F
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial: 019A722598E330F87B9289A3A40D9724ED09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:00:57 +0000
Manifest this update: Tue 11 Nov 2025 09:00:57 +0000
Manifest next update: Wed 12 Nov 2025 09:00:57 +0000
Files and hashes: 1: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: ixV/wzeIz/q52woxAblcpvQQz1ZnETmampCjD0aWb7M=)
2: TZLeuUkI4CjEnpLLtWGzEA-joRI.roa (hash: YPtfqltU/oN+o/HH/QLZS2oxA/bwOyzCiodegvrQed4=)
3: ai_A7AG70LoK-2voHZXOhAOVMf0.roa (hash: hn2u5HU4dhrWeJ6INpgfQ8ZAf8MY3atf6SETHEmPiMU=)
4: c_zOfM7vLQJCIH9ZtTubpG60GUI.roa (hash: PR+2Ofr0AqtJDndUiUP4vY2xuU8uzBfHcV/JcyjNBZU=)
5: vMV24DhvZ51gpTgovgA0DHavZ5Y.roa (hash: pvB3MpylBNAYQdSCjBtx8G9c34zYXq6BUWOPnr06JNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:98:e3:30:f8:7b:92:89:a3:a4:0d:97:24:ed:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Validity
Not Before: Nov 11 09:00:57 2025 GMT
Not After : Nov 12 09:00:57 2025 GMT
Subject: CN=44a6bd9ba6005315b9053425331ba6cdd3ee109f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:d9:d2:8c:da:6c:63:88:37:73:24:82:ad:
16:be:9d:09:be:d3:c9:31:54:82:1c:81:c9:57:8d:
26:15:3c:6c:8a:6c:f3:b8:79:b3:5b:f1:5d:79:92:
88:f8:05:7f:12:ec:d6:22:92:ef:f2:8a:b0:4e:06:
5a:f2:cb:19:8e:c6:9f:e7:69:c2:0a:28:f4:88:8c:
f1:12:0e:b3:17:ea:38:ff:3a:a1:c6:09:cf:a9:6d:
86:06:4c:a8:dc:72:26:5d:83:72:aa:f7:b2:5b:fb:
4a:f2:11:cf:3f:29:3f:66:f8:ad:5a:a8:5d:a8:e2:
66:bf:e4:b9:98:f8:bf:c1:7f:a3:f3:06:08:22:ea:
21:cd:11:bc:21:55:ca:60:20:3d:ca:d6:2d:c6:30:
6b:7e:c3:4d:0f:72:91:da:96:a2:89:9b:3a:88:86:
b7:9d:8a:80:7a:ca:22:4c:d9:08:3a:55:fd:c9:58:
eb:a9:a6:85:0f:b3:41:f9:a3:15:60:1c:b1:99:1f:
8f:83:90:30:8f:70:bf:65:ba:05:49:f1:e0:cb:11:
10:19:4a:99:cf:56:1b:3e:8b:09:19:0a:85:d3:a9:
09:93:74:68:3f:58:a9:af:e9:3d:b1:d1:f8:8b:74:
4f:9b:b0:34:53:bf:14:36:76:61:15:22:4c:5b:f2:
7a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A6:BD:9B:A6:00:53:15:B9:05:34:25:33:1B:A6:CD:D3:EE:10:9F
X509v3 Authority Key Identifier:
keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bc:ed:5d:cd:a7:b5:41:ff:1c:ee:44:17:73:3b:5c:de:09:
a2:3a:f6:a6:c9:ca:c5:3d:a4:3d:e8:4f:f8:57:a7:ce:74:d5:
94:8d:6c:76:b5:81:80:0d:85:af:c1:a6:a0:de:06:6a:e1:38:
c7:1c:3d:64:ae:5a:23:f0:66:2f:41:16:e0:ae:9c:36:3a:91:
30:fe:d7:14:36:21:f7:12:2e:65:48:2b:77:c8:11:0c:3a:c8:
ce:5d:d9:c4:3c:7f:cf:6c:ff:c5:f2:1c:28:eb:7f:93:a0:44:
9b:a0:78:6d:2e:c6:ec:f5:7e:f1:75:7d:f5:d1:da:22:28:b5:
d9:45:53:4a:7d:c7:de:96:b7:fc:a0:70:31:69:12:30:89:96:
63:17:d4:3a:ca:53:95:48:29:f0:e9:39:fc:f8:f1:87:ac:ba:
d8:34:0c:c3:57:e7:e7:ea:d5:6d:3e:25:c7:b8:47:0a:44:83:
87:3f:c2:95:38:d2:be:48:dc:63:73:9d:1a:12:32:65:e2:b9:
4f:10:a8:72:2a:17:a9:49:be:1c:1e:9f:b9:86:78:d1:30:67:
49:14:6f:b1:12:aa:75:a9:c9:73:e7:7a:e3:9e:e1:49:b7:17:
85:56:7f:93:be:d5:81:52:ab:57:80:2f:24:29:bc:37:71:de:
6e:1d:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:48 2025 by rpki-client