Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
File: Lw47dY4ki4AfwfMNNF1giwevG_Y.mft (raw, json)
Hash identifier: qdRS8JP4+D9LtepEC/XxvVopTOWYgx7WdPuVA79UtIw=
Subject key identifier: 83:25:13:B1:B1:42:FF:AD:3C:F6:77:FF:05:08:15:A0:75:4C:55:0C
Authority key identifier: 2F:0E:3B:75:8E:24:8B:80:1F:C1:F3:0D:34:5D:60:8B:07:AF:1B:F6
Certificate issuer: /CN=2f0e3b758e248b801fc1f30d345d608b07af1bf6
Certificate serial: 0199356E87F6AC12E9CE909C1CD34125F3CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lw47dY4ki4AfwfMNNF1giwevG_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
Manifest number: 06A1
Signing time: Wed 10 Sep 2025 21:01:00 +0000
Manifest this update: Wed 10 Sep 2025 21:01:00 +0000
Manifest next update: Thu 11 Sep 2025 21:01:00 +0000
Files and hashes: 1: Lw47dY4ki4AfwfMNNF1giwevG_Y.crl (hash: iGtJksJO5W+A+hOEQ0tu1e4vVsFPVuJaFUQ7laDLZSY=)
2: MBtZdpS4ymxgginyDhvfCoGQ29s.roa (hash: Taga/JoIPOZ2TxBr6cVw0HmmUo2VGq5/DtsPjFffmvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lw47dY4ki4AfwfMNNF1giwevG_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:87:f6:ac:12:e9:ce:90:9c:1c:d3:41:25:f3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0e3b758e248b801fc1f30d345d608b07af1bf6
Validity
Not Before: Sep 10 21:01:00 2025 GMT
Not After : Sep 11 21:01:00 2025 GMT
Subject: CN=832513b1b142ffad3cf677ff050815a0754c550c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:77:85:ce:9b:4d:16:cb:3d:a9:c2:98:c8:
0d:31:1c:21:2f:e9:8e:a9:d0:5b:05:d5:d1:cc:c0:
54:a9:75:27:a7:c2:19:fd:52:98:44:f7:cc:59:e7:
87:0f:bd:cc:c6:f3:89:bd:ab:f4:67:30:24:41:10:
a2:ca:e1:6c:a9:b6:9c:04:9a:64:e6:39:b6:d4:31:
cf:4e:9d:21:78:25:0c:6b:3f:6a:9f:ad:b5:ae:78:
e5:51:1c:f6:90:60:4b:85:93:78:bf:dc:48:9a:a4:
11:e8:70:0c:de:f1:df:f2:54:97:ac:32:e1:7b:f6:
6b:64:1f:b3:d2:c5:58:6b:50:fa:72:cd:c0:96:28:
a2:6c:19:ba:6c:81:1e:32:1e:eb:24:c3:b7:88:df:
37:f1:33:5a:bf:ae:45:51:c6:a5:04:3a:4d:da:a2:
f7:3f:0e:ff:09:10:fc:5f:84:42:5d:cb:f8:7f:ad:
48:ff:18:d9:03:b3:27:88:cc:f6:c3:67:5f:3f:b5:
7b:d4:6f:e4:98:be:73:0e:d8:61:68:e3:71:b0:8c:
5c:e4:07:fe:13:27:f8:74:22:54:ce:33:ca:45:92:
10:4b:f2:01:b9:78:8b:80:4f:d9:40:40:52:e4:95:
29:9b:5d:f7:fb:10:6e:37:23:fd:a1:f4:bc:4c:7a:
f5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:25:13:B1:B1:42:FF:AD:3C:F6:77:FF:05:08:15:A0:75:4C:55:0C
X509v3 Authority Key Identifier:
keyid:2F:0E:3B:75:8E:24:8B:80:1F:C1:F3:0D:34:5D:60:8B:07:AF:1B:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lw47dY4ki4AfwfMNNF1giwevG_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fc:db:a6:38:54:fb:b8:fb:6a:1d:e8:b9:83:0a:e6:33:fe:
64:39:a9:fe:52:ce:3a:cb:43:fa:1b:d0:1a:26:cf:10:15:21:
44:25:27:e5:5a:1e:af:f5:81:ca:01:1a:eb:35:79:fc:54:4d:
37:34:a0:f9:1f:6a:c4:ab:9b:60:c8:7f:64:a6:19:9f:23:97:
0f:9c:ac:bc:4b:af:f8:88:14:10:b9:1e:b0:68:ad:e6:51:b3:
c7:af:e3:9e:64:5e:f7:9f:89:98:9a:22:e4:80:2a:f8:dc:63:
93:90:0c:74:0c:1c:8a:d8:63:29:23:fe:5f:50:c5:ef:60:62:
d8:50:41:9d:57:cb:50:91:dc:3f:7b:01:29:29:96:cb:b8:9d:
44:da:69:ea:39:3d:0b:99:42:68:5a:91:dc:2f:f0:1e:b1:9e:
29:68:e5:17:ba:39:22:fb:da:8f:79:b2:e1:74:6c:f4:40:cf:
40:df:cd:f5:ba:4a:2b:23:40:25:af:b8:60:f7:8b:c1:3f:c6:
f4:cb:46:f1:eb:32:03:ac:08:15:63:04:5e:68:ae:3d:0d:18:
c9:a8:35:35:a8:5e:15:98:9c:ef:31:c0:29:c4:ec:12:13:08:
e9:5b:3a:ea:27:90:83:93:4f:13:db:20:38:ad:26:51:46:2f:
e9:ca:f7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:22:22 2025 by rpki-client