Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
File: LWNPtoGAIUTwZMGxnxH2qudZbc8.mft (raw, json)
Hash identifier: A+y2sGrRvU6H7+tmExcri3XlSPKLXrvsy2XZ0EmmGQw=
Subject key identifier: A8:7D:DB:8D:9C:DC:60:4F:07:AF:55:B1:0E:D3:F7:00:90:6D:CE:64
Authority key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
Certificate issuer: /CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Certificate serial: 019881D4F7352E7987F5E74CA091ECEBFFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
Manifest number: 0914
Signing time: Thu 07 Aug 2025 00:01:14 +0000
Manifest this update: Thu 07 Aug 2025 00:01:14 +0000
Manifest next update: Fri 08 Aug 2025 00:01:14 +0000
Files and hashes: 1: LWNPtoGAIUTwZMGxnxH2qudZbc8.crl (hash: h5N23bYBp5CnTRDXiCQUkXctgylToOk7dvFfk40fAyA=)
2: VLvU695jlmxr_Aa_-diXqvNVQGY.roa (hash: /bKiG14xP3FUaKqcC1XqqIaBQA/QOWOmJHyp9J37dmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:f7:35:2e:79:87:f5:e7:4c:a0:91:ec:eb:ff:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Validity
Not Before: Aug 7 00:01:14 2025 GMT
Not After : Aug 8 00:01:14 2025 GMT
Subject: CN=a87ddb8d9cdc604f07af55b10ed3f700906dce64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:d7:68:6b:7c:c2:7b:24:41:68:72:6f:88:
36:c5:2e:6c:6c:29:cf:97:c0:90:d0:fb:30:45:d1:
46:84:21:77:7d:58:bf:94:c7:e2:ff:33:3b:f2:ae:
64:f9:76:9a:78:f7:f8:41:1a:23:8a:9f:6e:71:98:
8b:b5:6b:6d:a8:ba:d1:45:83:b7:88:f6:e8:a9:90:
a7:c5:29:be:f3:17:72:60:91:9b:50:88:02:b2:41:
b3:2c:a9:67:78:25:4b:c8:2a:83:7c:2f:97:b2:81:
0b:23:bf:4a:1d:9b:3b:51:e5:1d:bd:46:6f:90:f5:
f5:2f:f2:4a:49:d3:75:34:36:e3:7e:87:95:b1:19:
61:ce:be:29:7d:e1:1b:09:52:ac:03:d9:eb:31:90:
60:7b:a4:09:0b:3d:2d:c7:73:91:20:ca:0f:d5:4b:
25:0d:9c:e7:b2:19:cb:e2:d1:20:87:1e:96:d8:a9:
7e:73:71:82:d1:57:ef:ab:74:b9:e3:83:7e:86:fd:
0f:17:1e:57:ad:6c:ee:49:1a:8b:d5:9f:bb:25:a6:
35:c6:9e:da:d9:80:44:e9:fa:3c:cb:3d:d7:83:ef:
2f:66:ad:54:63:a9:0d:61:75:e9:66:ca:0c:02:72:
b1:d9:5a:92:b3:6a:8a:fb:fc:23:a5:3f:5f:86:f5:
cd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7D:DB:8D:9C:DC:60:4F:07:AF:55:B1:0E:D3:F7:00:90:6D:CE:64
X509v3 Authority Key Identifier:
keyid:2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b2:89:7e:8c:ab:d4:cb:50:7d:db:31:1f:6d:0a:b7:17:f4:
60:7a:d2:99:9e:8b:12:4d:34:b9:8d:5f:a8:78:ae:f5:03:75:
d1:a0:7d:34:55:09:27:9e:9f:d8:31:da:cb:6e:09:19:32:17:
db:00:ea:50:0a:97:e9:98:4f:83:c0:d4:a3:38:6d:12:73:ee:
4e:30:09:b3:4d:f0:5e:a5:4a:fa:5a:fe:8c:fb:a7:78:f6:66:
8e:33:67:28:d8:db:3e:cc:00:73:80:98:59:a2:60:78:03:5b:
2d:ae:41:1d:14:35:c8:5a:8d:94:e9:5e:af:9c:79:ae:97:70:
6e:8c:80:4d:fc:14:b5:1d:fc:b5:e7:49:1a:ac:da:60:1d:bb:
2b:2c:3d:d5:b4:84:1c:ec:d9:15:2a:99:82:ef:d7:4b:07:3b:
0d:90:4a:97:13:b4:f4:d6:08:85:5b:1d:a0:9f:b0:a9:b8:87:
67:2b:41:d3:97:05:2d:e0:ec:a7:6a:e9:b9:02:47:f7:2e:02:
b3:f1:48:7e:ce:0d:f3:b0:85:de:a2:4a:61:b4:d3:f3:3e:ee:
58:92:37:dc:0b:34:c3:64:78:82:27:9b:b1:ee:7b:f4:c3:cb:
f7:53:46:a7:2c:d4:a2:ed:77:cb:66:0b:ae:ca:71:d8:2b:ca:
dc:a7:01:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:20:16 2025 by rpki-client