Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File: LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier: j4ex+7HoW1+osurLjGgGkneBhAf+Jf46td3NR8I2erw=
Subject key identifier: CF:B7:A5:5E:E0:97:0A:08:C8:D1:DD:5A:AB:52:78:D1:3D:BB:11:92
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial: 019874BDB0D8F47F9D1C86F7D11D27C6308F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number: 041C
Signing time: Mon 04 Aug 2025 11:00:45 +0000
Manifest this update: Mon 04 Aug 2025 11:00:45 +0000
Manifest next update: Tue 05 Aug 2025 11:00:45 +0000
Files and hashes: 1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: TQ8mWoCjLIRnQkUfhRRhWG7hPzmS1GjyG5ONTFpxKRk=)
2: XEqexKJb2LrlBy7JmazWnnfRrCw.roa (hash: dfO0SxZnhpUVd2vYpZFuzNRZkTkzryjnbxAehzWWsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:b0:d8:f4:7f:9d:1c:86:f7:d1:1d:27:c6:30:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Validity
Not Before: Aug 4 11:00:45 2025 GMT
Not After : Aug 5 11:00:45 2025 GMT
Subject: CN=cfb7a55ee0970a08c8d1dd5aab5278d13dbb1192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:66:78:6f:63:2a:61:04:cc:e3:f3:0a:dc:ec:
7f:74:fe:53:b1:4c:f0:ca:8e:28:17:f3:c6:e7:d0:
8a:6f:3f:f0:c5:00:30:7b:2a:a6:ec:72:b9:fa:bc:
5b:b8:2a:09:63:5d:5e:11:f1:f5:9e:cc:e1:18:5a:
7d:d5:b5:b5:ea:5b:7b:1c:22:43:cf:02:4b:87:fb:
fb:a0:14:cf:29:30:16:0a:43:06:02:43:c7:51:4f:
de:ff:a7:36:85:09:99:57:96:36:8f:10:fc:e3:56:
47:1b:9d:6e:21:22:24:10:69:ba:2c:72:47:7a:f4:
52:c2:ec:f3:7b:60:a6:7c:43:fb:03:a5:7e:18:8a:
8c:68:61:f6:70:3e:ab:27:03:36:9c:02:9b:86:bc:
07:0e:40:42:45:db:e7:f9:66:f7:61:74:40:0d:5a:
32:a4:c3:a6:d9:d2:7a:a6:f4:c6:bb:a2:87:ec:eb:
8c:e0:00:d5:82:78:78:eb:c5:58:c6:08:ac:73:83:
eb:fe:cf:3e:f0:9f:75:12:8b:27:fc:14:d5:d0:4a:
5d:2e:fc:2d:16:03:95:76:33:9f:79:25:14:b2:84:
d7:ed:b5:89:02:0b:4e:cc:78:54:b9:60:14:3f:0a:
4b:cb:b2:05:3c:a7:b2:bf:c1:4b:cb:10:91:d4:ad:
19:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B7:A5:5E:E0:97:0A:08:C8:D1:DD:5A:AB:52:78:D1:3D:BB:11:92
X509v3 Authority Key Identifier:
keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2f:80:e5:60:ba:66:6e:9d:1c:16:55:d8:6f:2e:9c:73:f9:
48:c5:e5:4d:f7:d9:bf:2a:58:27:64:23:be:92:1c:67:72:24:
32:64:55:c8:22:6b:7b:6c:95:ea:01:24:e1:38:ad:54:2a:dd:
e3:65:d6:61:25:c1:d6:6e:1c:b4:67:a8:3e:23:6b:09:23:45:
fb:a6:71:99:d8:f2:8c:97:65:97:0a:45:84:42:74:a3:0d:12:
df:cc:73:b0:fd:a5:1c:20:78:55:35:3b:32:0d:76:cf:29:d6:
7c:f0:1c:88:0f:23:0a:83:f1:57:9a:ee:56:91:07:6c:df:91:
1f:ec:c6:e1:6d:0a:e0:4c:bd:5d:56:a7:58:97:b5:a3:7a:dd:
ad:76:6f:16:8d:6e:b4:7b:d8:80:98:b4:29:05:8c:3b:dc:71:
14:d8:65:5a:c4:af:6a:ea:5b:30:ef:52:0b:e4:f2:bc:32:22:
24:57:3d:22:69:22:4b:1f:db:59:04:19:f4:27:e9:89:0c:7e:
04:57:9f:4f:8f:53:ae:45:1f:2c:19:da:76:97:bd:1e:16:b8:
5d:94:85:49:b8:b9:77:13:e0:db:9f:86:e4:4e:5d:fd:68:87:
47:9a:aa:f2:ae:2d:28:a1:5f:4d:81:72:1f:24:f5:aa:41:f1:
17:10:4d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:18:39 2025 by rpki-client