Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
File: LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json)
Hash identifier: 0Kewlo5TNWAxw6nBw2ve/oOZsJVwrzHD4t1YVlbGvQE=
Subject key identifier: 51:8C:9C:3E:F6:19:9A:85:15:F0:5C:EA:3E:5B:C7:41:9F:5F:6E:F3
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial: 0198936CCB79BB865438CD97371353AC5959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
Manifest number: 162A
Signing time: Sun 10 Aug 2025 10:00:37 +0000
Manifest this update: Sun 10 Aug 2025 10:00:37 +0000
Manifest next update: Mon 11 Aug 2025 10:00:37 +0000
Files and hashes: 1: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: aI5Y4LXxXclcCrG36DrlI8bkQTYW7OSIESoed6CxFus=)
2: RysabfgSrooxUAVkb0Cu2rOa1B8.roa (hash: kDFtRPNIEsF7OH+wALA7E+fu8R+E9Lu/M1W1e9aWGpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:cb:79:bb:86:54:38:cd:97:37:13:53:ac:59:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Validity
Not Before: Aug 10 10:00:37 2025 GMT
Not After : Aug 11 10:00:37 2025 GMT
Subject: CN=518c9c3ef6199a8515f05cea3e5bc7419f5f6ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:17:b5:5d:55:5a:be:dc:3e:ca:3a:36:48:
2d:b5:e1:ac:cf:65:ce:f4:df:a8:7a:17:43:05:41:
6e:73:a5:72:67:78:c1:5d:10:56:3b:28:54:89:7b:
2e:75:ef:78:04:31:7e:23:aa:28:83:22:9b:a1:21:
ad:72:1f:9e:f8:b0:e4:76:27:eb:65:e9:f7:ff:0c:
19:bf:5e:bf:4a:c7:41:dd:98:6d:af:f1:3f:45:9b:
dc:a1:c2:31:f8:b5:d5:68:ca:80:90:25:df:ac:08:
0c:66:fd:d0:cc:9c:85:15:3b:04:a0:75:31:f5:4b:
45:c6:e9:47:4b:6d:28:fa:8d:aa:6f:73:f8:1d:b7:
7e:52:24:ca:c5:8c:97:ca:d2:25:68:97:21:1c:13:
c4:a9:3e:5c:a1:f9:ae:b8:85:6e:cc:39:06:d5:85:
01:ef:c8:57:23:20:a5:e4:50:16:cf:d9:60:32:20:
4c:cf:3d:9c:aa:5c:fc:3f:8e:19:20:2b:e4:60:c6:
01:d0:21:5e:86:b1:26:1a:09:2f:c5:f3:29:b3:e8:
8a:86:d3:6b:3c:ae:89:fd:17:0c:25:48:8d:8d:75:
2a:34:75:f0:35:4b:7b:2e:6a:3a:91:df:ff:4a:2a:
3b:30:1c:a0:05:0d:cc:e2:ec:96:3e:d1:ea:d8:a1:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8C:9C:3E:F6:19:9A:85:15:F0:5C:EA:3E:5B:C7:41:9F:5F:6E:F3
X509v3 Authority Key Identifier:
keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:64:5b:b6:b2:57:58:ac:1e:f7:18:75:1a:5b:da:ac:e3:b0:
b2:8f:19:e4:18:45:c8:8a:f7:22:81:0c:a8:95:df:3e:ea:1c:
6b:79:56:58:df:af:20:48:78:76:79:5e:e7:03:f9:77:17:a5:
c0:e8:a2:69:f1:56:e6:43:13:e6:78:ea:de:1d:26:fc:40:a2:
29:77:d9:a7:89:db:68:c4:9d:c9:ce:1c:08:08:89:54:11:dc:
d4:d5:95:fb:ed:a0:69:a4:ad:f0:fe:c4:8b:b7:52:8b:87:f5:
83:4a:b9:f5:43:23:ee:a0:d6:cb:03:13:d7:bb:3d:8e:ef:13:
0b:87:d8:b8:5f:43:15:f0:80:57:c6:aa:29:3b:94:d8:a3:93:
0e:41:f6:58:76:66:51:49:45:a6:4b:70:d4:2c:d5:4b:54:29:
64:47:80:8e:c7:0d:a1:1a:ed:b0:a4:22:f3:1d:95:3d:34:ef:
67:27:5b:41:76:54:ab:51:a6:83:8e:41:96:51:ea:88:81:b3:
b5:50:a3:b7:e1:9a:fa:01:b0:a5:c6:2c:a9:d9:f0:3e:e2:2b:
2c:73:8f:5f:5b:bd:af:66:5d:e6:34:e0:b7:b5:7a:7d:f2:bf:
c6:39:87:8b:b6:9a:18:41:95:06:98:3f:84:20:d6:dc:e7:0f:
c0:bb:a4:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTbMt5u4ZUOM2XNxNTrFlZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMDM0MmUwZDIzZWY3ZTA2YjFkZmY1Y2M2ZWU0ZmExN2Fm
OGJkOTgwHhcNMjUwODEwMTAwMDM3WhcNMjUwODExMTAwMDM3WjAzMTEwLwYDVQQD
Eyg1MThjOWMzZWY2MTk5YTg1MTVmMDVjZWEzZTViYzc0MTlmNWY2ZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1wXtV1VWr7cPso6NkgtteGsz2XO
9N+oehdDBUFuc6VyZ3jBXRBWOyhUiXsude94BDF+I6oogyKboSGtch+e+LDkdifr
Zen3/wwZv16/SsdB3Zhtr/E/RZvcocIx+LXVaMqAkCXfrAgMZv3QzJyFFTsEoHUx
9UtFxulHS20o+o2qb3P4Hbd+UiTKxYyXytIlaJchHBPEqT5cofmuuIVuzDkG1YUB
78hXIyCl5FAWz9lgMiBMzz2cqlz8P44ZICvkYMYB0CFehrEmGgkvxfMps+iKhtNr
PK6J/RcMJUiNjXUqNHXwNUt7Lmo6kd//Sio7MBygBQ3M4uyWPtHq2KH2yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGMnD72GZqFFfBc6j5bx0GfX27zMB8GA1UdIwQY
MBaAFC8DQuDSPvfgax3/XMbuT6F6+L2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHdOQzROSS05LUJySGY5Y3h1NVBvWHI0dlpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kMWZkNDgtOTE2Yi00ZDgzLTk2Y2Mt
YzkxMGFmOTNlNDI2LzEvTHdOQzROSS05LUJySGY5Y3h1NVBvWHI0dlpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kMWZkNDgtOTE2Yi00ZDgzLTk2Y2MtYzkxMGFmOTNlNDI2
LzEvTHdOQzROSS05LUJySGY5Y3h1NVBvWHI0dlpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmRbtrJX
WKwe9xh1GlvarOOwso8Z5BhFyIr3IoEMqJXfPuoca3lWWN+vIEh4dnle5wP5dxel
wOiiafFW5kMT5njq3h0m/ECiKXfZp4nbaMSdyc4cCAiJVBHc1NWV++2gaaSt8P7E
i7dSi4f1g0q59UMj7qDWywMT17s9ju8TC4fYuF9DFfCAV8aqKTuU2KOTDkH2WHZm
UUlFpktw1CzVS1QpZEeAjscNoRrtsKQi8x2VPTTvZydbQXZUq1Gmg45BllHqiIGz
tVCjt+Ga+gGwpcYsqdnwPuIrLHOPX1u9r2Zd5jTgt7V6ffK/xjmHi7aaGEGVBpg/
hCDW3OcPwLuk4g==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:33 2025 by rpki-client