Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: 0yyUdEUvUBvDmF23QOHJzrYOwMGLFtBFWCwryiwzf1I=
Subject key identifier: 5F:C5:10:A2:61:4F:9D:B6:6B:0A:CC:1C:A7:21:F2:86:5E:6E:6A:AA
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 01992F6CAD66E4798F1AAB7540F8F3810CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 11B3
Signing time: Tue 09 Sep 2025 17:01:15 +0000
Manifest this update: Tue 09 Sep 2025 17:01:15 +0000
Manifest next update: Wed 10 Sep 2025 17:01:15 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: nebqKogpCnnfBx9RjR7yZaqO2Q0F1q13uPldyr8Ul4Y=)
2: gtQV_zwRPLHuRPfREjsm-_muUpg.roa (hash: a0Tj7X+5b5MFb1rO/5kUp09wUYkeR9dP9zow62nRTzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:ad:66:e4:79:8f:1a:ab:75:40:f8:f3:81:0c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Sep 9 17:01:15 2025 GMT
Not After : Sep 10 17:01:15 2025 GMT
Subject: CN=5fc510a2614f9db66b0acc1ca721f2865e6e6aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:02:86:fc:e9:57:b5:38:35:75:b7:db:0d:
18:cb:93:96:7b:ee:83:3c:f0:fd:0c:b8:3d:cf:ef:
c8:c1:9f:c4:f0:67:f1:ce:84:bc:7d:7b:bb:ee:a6:
8e:db:dd:19:4b:dc:e2:32:a2:16:8e:d5:05:14:6c:
4c:b0:3a:c7:ec:ed:fe:15:c1:b5:cd:61:d8:97:61:
f0:49:c9:8d:d6:a4:36:54:26:40:99:4f:64:82:0f:
61:2f:25:08:35:ee:7d:b7:92:c0:3d:38:11:ae:e4:
90:1c:58:8a:04:b1:82:59:31:c8:46:1c:d3:ad:44:
0f:92:84:34:62:f8:fe:62:6d:03:b2:78:fe:ab:41:
25:db:4b:98:d8:a1:74:b9:b3:07:4e:25:d8:cb:82:
18:54:8c:2b:5b:72:e2:c1:28:9d:0f:e5:1c:09:af:
8c:ca:8b:4a:e8:39:7e:4e:bd:9d:98:e4:ac:68:06:
ef:44:09:5c:48:7d:0e:4a:67:54:12:ab:04:b4:5f:
33:f0:fc:ae:9b:6c:2e:68:10:3a:0a:20:53:f5:28:
e4:e2:99:60:7b:7f:90:fe:cd:fc:93:74:a8:e0:0d:
3f:03:06:60:04:29:4c:c4:fe:e2:f2:eb:86:a9:35:
4f:46:65:c2:4f:eb:7c:7c:6d:2e:65:3d:d9:50:d5:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C5:10:A2:61:4F:9D:B6:6B:0A:CC:1C:A7:21:F2:86:5E:6E:6A:AA
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2c:1c:e0:51:0e:1e:5d:ba:f2:d0:c5:b9:80:84:f3:d6:2e:
13:4f:38:27:21:a0:65:f8:1e:e3:af:db:0e:2e:28:87:c9:5b:
d3:6a:ee:e2:67:8b:d2:df:1a:c7:e4:6f:2f:0a:92:15:75:cb:
54:69:3a:61:46:a2:38:fa:eb:06:34:5e:92:3e:fd:b0:1d:a3:
8e:6d:40:9e:03:c0:0d:38:69:df:bc:a7:f5:cc:20:4a:69:1c:
83:40:30:7b:d0:8e:b1:ff:60:f5:58:ec:58:92:f5:f9:3f:32:
a0:df:4f:ed:2b:e2:6f:67:a9:9a:01:06:a2:90:26:09:6a:41:
8b:15:fa:97:51:46:a9:42:8a:51:ce:7f:00:97:d4:09:c5:3e:
f4:34:38:8a:b9:08:c0:a4:ea:2c:b7:db:af:e8:5e:83:52:ac:
63:94:30:17:32:95:ab:71:2f:4b:09:b0:74:66:2c:a5:76:e2:
ac:7d:f3:ab:25:27:98:ce:2b:4e:55:bd:a7:6a:87:37:0e:8b:
ef:aa:84:9b:c4:07:66:60:36:00:c1:d6:14:e6:ce:da:ff:a2:
db:74:db:17:56:e2:7b:b4:0f:e5:56:f6:31:44:bb:44:49:94:
47:06:61:69:22:17:23:cd:14:51:54:17:26:a1:f4:ca:ac:ec:
22:1e:38:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:48:42 2025 by rpki-client