
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
File: lWmTFkJJYHEcLo7LU2vdArxyT60.mft (raw, json)
Hash identifier: jZnQWoG9mJQXczDl6SDh24ma1PBC/Awe9/dAooKe6nU=
Subject key identifier: 7C:31:FD:B8:B4:D6:A9:65:76:77:81:B6:F3:B6:67:47:13:76:E0:40
Authority key identifier: 95:69:93:16:42:49:60:71:1C:2E:8E:CB:53:6B:DD:02:BC:72:4F:AD
Certificate issuer: /CN=95699316424960711c2e8ecb536bdd02bc724fad
Certificate serial: 01988BB39889DC64067BF6B2F9984F639255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
Manifest number: 049C
Signing time: Fri 08 Aug 2025 22:00:59 +0000
Manifest this update: Fri 08 Aug 2025 22:00:59 +0000
Manifest next update: Sat 09 Aug 2025 22:00:59 +0000
Files and hashes: 1: QlwSz5QY3CNReEwoqy5_qdcxp7E.roa (hash: J1QwLI9Oak3umoZp+VK8k+3z4SfC016Ed6Yx+Y0FOX0=)
2: lWmTFkJJYHEcLo7LU2vdArxyT60.crl (hash: vLcefJ0+HfnGgg8CyIbvWE7MftcaGt5GP3wi1WU6lYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:98:89:dc:64:06:7b:f6:b2:f9:98:4f:63:92:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95699316424960711c2e8ecb536bdd02bc724fad
Validity
Not Before: Aug 8 22:00:59 2025 GMT
Not After : Aug 9 22:00:59 2025 GMT
Subject: CN=7c31fdb8b4d6a965767781b6f3b667471376e040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:ba:42:73:46:f3:7f:92:6b:de:03:cc:05:
10:1e:7e:1f:c7:c6:e7:54:54:cf:eb:3e:6c:06:0e:
2b:bb:4c:f5:98:2f:7e:fd:f0:13:92:28:0e:a9:ff:
40:ea:6e:f8:ef:ad:dd:bf:34:7a:36:30:88:07:15:
3c:6e:ef:44:18:56:8f:4f:bc:06:3a:d4:4f:9a:ac:
5b:56:79:74:b7:19:98:95:da:a2:a6:af:17:91:7b:
4f:12:f2:dc:c3:f0:f8:83:c1:c0:60:57:79:49:7e:
f6:33:ee:cc:26:34:e3:22:67:8e:db:78:53:74:f6:
df:b6:84:d3:f1:bb:31:52:86:55:c0:f6:87:9d:ff:
47:3d:b6:c6:f0:09:80:f2:42:0b:56:61:b2:02:45:
e2:3f:3c:a7:73:13:10:fe:2d:e2:56:18:79:c1:ac:
c6:5f:c0:ad:b9:5e:4a:96:c4:c2:bd:52:5b:97:9b:
2b:34:cf:24:51:0b:49:d9:5f:48:1b:97:9d:26:6f:
af:8c:bb:03:f2:e2:e2:86:51:b7:61:21:fd:69:51:
ac:9b:6e:d2:1e:89:73:0c:4f:bd:2a:d8:6d:cd:a2:
bc:42:3a:0a:76:f6:b1:75:0f:aa:3f:d3:1b:c1:af:
69:99:59:0e:03:e5:37:b7:58:64:79:20:d6:af:9e:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:31:FD:B8:B4:D6:A9:65:76:77:81:B6:F3:B6:67:47:13:76:E0:40
X509v3 Authority Key Identifier:
keyid:95:69:93:16:42:49:60:71:1C:2E:8E:CB:53:6B:DD:02:BC:72:4F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:54:1d:33:d7:6b:30:c2:07:49:b2:61:99:6a:53:38:20:29:
80:8d:e1:f5:fd:ef:a9:b1:ee:b6:12:6a:55:2d:a7:e7:09:60:
89:02:44:ef:36:78:6b:43:e8:46:a5:7a:30:20:9d:f4:73:7f:
6b:ac:4a:0d:a6:39:7e:d0:67:1c:5e:76:e2:be:3a:47:dc:9c:
f7:be:91:7e:83:fe:e5:66:c5:49:4f:cf:a5:6d:b6:25:33:df:
8b:56:34:08:94:ce:03:04:e0:ab:ee:36:9e:30:47:eb:49:4b:
ee:5c:b5:1b:b3:59:73:63:3b:e3:f0:97:0a:ab:fe:97:9d:b5:
6a:f7:e2:6b:2a:82:d9:55:c0:72:2a:a9:94:19:60:c2:bc:d7:
ee:b5:86:16:ef:89:7b:3a:bb:53:ef:b0:b1:5d:bd:5f:91:bf:
f1:3d:3f:0a:b0:22:6e:69:29:c1:ad:f4:84:01:78:0a:2a:23:
71:3c:8b:b5:28:db:41:2c:60:b2:1e:aa:f1:3c:0a:e2:8a:39:
0a:c9:36:bd:cb:02:99:36:30:a7:41:c8:27:c4:15:5f:af:1b:
bb:c4:c3:ee:08:88:49:2e:30:77:96:9f:a5:09:7f:f2:7b:07:
4d:f0:e6:80:4a:a4:b7:37:01:ca:bb:b7:6e:b5:3e:63:13:a5:
6b:46:f4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:36 2025 by rpki-client