Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File: LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier: sLx1naVkGyMWZcnxs3DOOYzR1VSHaQSIMGRPlJ/fkhM=
Subject key identifier: A9:99:AC:82:DA:64:EF:EC:B1:0E:C4:1F:9F:FE:92:72:DD:1C:87:C4
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial: 019A4DE22E3FE4B6C1201312FB6A1135C836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number: 0511
Signing time: Tue 04 Nov 2025 08:00:59 +0000
Manifest this update: Tue 04 Nov 2025 08:00:59 +0000
Manifest next update: Wed 05 Nov 2025 08:00:59 +0000
Files and hashes: 1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: 128BVDshYcofEG85czYgKfsFnI7AK0EXqQXZPls0yEw=)
2: XEqexKJb2LrlBy7JmazWnnfRrCw.roa (hash: dfO0SxZnhpUVd2vYpZFuzNRZkTkzryjnbxAehzWWsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:2e:3f:e4:b6:c1:20:13:12:fb:6a:11:35:c8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Validity
Not Before: Nov 4 08:00:59 2025 GMT
Not After : Nov 5 08:00:59 2025 GMT
Subject: CN=a999ac82da64efecb10ec41f9ffe9272dd1c87c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:21:bd:01:27:de:ef:1b:bf:52:67:e3:33:
b3:35:4b:14:8f:ed:ba:cc:32:32:7e:83:0a:34:f5:
5a:07:b3:13:1a:c6:52:1b:28:ed:64:50:44:d6:65:
6e:a9:ca:6e:7e:ab:3e:72:f8:45:58:85:ee:4b:8b:
da:3d:da:aa:f7:58:31:7d:7a:44:53:32:d6:4b:36:
e8:2f:30:2d:7c:32:94:7e:a0:ce:30:d6:95:25:05:
84:85:6a:86:73:d3:d4:c5:a9:4e:66:8a:51:e9:95:
4f:5d:4e:fd:00:7c:bd:9f:39:75:19:6c:56:5a:e3:
13:b2:a0:1d:d8:01:cb:74:6b:6e:a8:b1:a2:cd:13:
35:67:fa:2b:c4:93:5d:f1:08:bc:f3:6c:6f:7d:1f:
29:53:de:dd:3a:01:fc:1b:17:4f:a4:85:9c:f9:43:
17:3e:13:ec:d3:eb:54:18:a2:38:b5:37:4f:f4:2e:
82:84:71:8c:d5:17:30:16:00:6d:29:94:58:38:54:
4d:86:df:90:97:5c:6d:b6:0d:45:80:ba:90:29:41:
09:fe:22:24:dd:8c:c2:7e:b4:ba:74:07:26:62:70:
5f:85:14:52:99:a0:bb:dc:d3:91:52:4a:98:00:7f:
36:6d:5f:32:b1:a5:07:fe:78:94:03:ac:e3:83:88:
93:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:99:AC:82:DA:64:EF:EC:B1:0E:C4:1F:9F:FE:92:72:DD:1C:87:C4
X509v3 Authority Key Identifier:
keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b1:35:77:73:92:1f:65:84:53:3a:92:22:27:2e:63:2b:e4:
66:40:42:a9:97:23:64:f6:b5:bf:32:e7:07:62:be:fa:c4:87:
7e:c9:ef:80:f4:23:ff:94:9f:94:6c:54:31:24:da:8e:d2:2c:
6b:e6:bc:ee:37:64:a0:e8:86:63:d7:bf:89:c6:25:c3:de:38:
e1:f1:36:6e:6d:12:64:8c:0c:11:e5:fa:d3:62:6d:c3:07:60:
15:3e:99:bc:a0:0f:cd:8c:a2:fc:26:be:26:f0:f9:f1:e5:19:
f8:7d:b4:35:5c:5a:68:3d:9f:18:7e:6d:03:a2:11:c0:a1:02:
15:0a:49:7b:a8:14:b8:d6:13:b8:dd:94:71:1f:be:5e:5e:e9:
c0:f1:9c:e4:23:3c:26:42:1e:88:1b:98:21:03:07:8a:6b:67:
19:ec:c1:36:80:50:5a:65:60:5b:1b:53:81:3e:53:04:4a:31:
7a:0d:7a:7c:98:f9:b6:3c:fd:bd:df:53:5d:4f:35:ec:1b:3a:
05:d6:f7:fe:e8:46:85:da:2f:3e:80:52:42:09:01:9e:2c:71:
4c:63:35:47:87:64:3e:56:9a:23:43:82:4a:28:57:81:bb:db:
bd:fb:df:56:ac:4d:93:09:0a:0f:fa:21:6a:f0:84:f7:07:20:
bb:17:df:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:15 2025 by rpki-client