Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
File: LHwKdxsw0nQoUIDdxC42eYOW8iw.mft (raw, json)
Hash identifier: 0iAdo2Q2UPnOm7Vpc1zNstQunZZB3wX3lgHerdmcCbI=
Subject key identifier: 13:55:F8:FC:DC:D7:76:91:5C:21:8D:5C:B5:64:7D:69:22:57:EB:AD
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Certificate issuer: /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial: 019874F4B794225F397C6CC92B8C738F6D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
Manifest number: 133A
Signing time: Mon 04 Aug 2025 12:00:51 +0000
Manifest this update: Mon 04 Aug 2025 12:00:51 +0000
Manifest next update: Tue 05 Aug 2025 12:00:51 +0000
Files and hashes: 1: LHwKdxsw0nQoUIDdxC42eYOW8iw.crl (hash: 8j+JoN8qkNuYtxDCEOo3WhesQl3uzH7o9DBrFjLxZBY=)
2: _wYBYYAWsBdIPcz67gJjf_cpxBc.roa (hash: WT5EAFrH+ID6hV4wr/zaJ0InnDxoXdrcj+f2kf7QcuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:b7:94:22:5f:39:7c:6c:c9:2b:8c:73:8f:6d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
Validity
Not Before: Aug 4 12:00:51 2025 GMT
Not After : Aug 5 12:00:51 2025 GMT
Subject: CN=1355f8fcdcd776915c218d5cb5647d692257ebad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:76:95:70:9c:da:66:1d:99:24:38:8f:d3:
31:8f:fc:bd:ec:58:ad:87:69:9a:92:a4:c8:0e:1e:
a6:f9:15:d3:a4:1d:00:b9:f9:da:bf:ca:b3:22:de:
a2:7c:18:24:22:6d:d7:d6:35:df:e1:81:93:fe:bf:
b4:30:e1:1c:42:be:b1:0b:28:8c:66:b1:03:f4:c7:
97:b1:27:45:b9:b0:a4:23:a3:74:03:c4:25:e5:6d:
bd:a4:7b:41:d7:2a:7e:67:98:b8:ae:a1:3c:ac:51:
1d:21:b7:59:d8:13:83:b7:36:90:09:f0:f0:c6:ab:
4a:ac:cd:e3:d5:0b:82:c0:8c:90:ff:30:78:53:77:
d6:fc:82:46:f2:91:e1:78:fc:d1:7d:45:96:1a:e2:
4d:47:d1:03:0b:4e:8d:3f:ae:ee:71:a7:58:93:dc:
86:1d:e3:6c:61:43:1a:e7:4e:43:95:32:3f:9d:4d:
ea:81:55:59:e7:de:7d:02:0e:2c:b3:6b:d8:9f:55:
fd:39:fb:d5:71:03:07:d2:d0:b5:29:fa:9c:f2:db:
3f:9b:e9:77:79:4f:1c:98:12:bd:c8:a6:86:84:d9:
8c:f9:f5:ca:bc:97:d5:ae:f1:2f:a2:a5:21:e9:89:
ec:ea:83:a8:b6:e0:a4:da:a1:a6:8b:1e:87:b0:09:
80:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:55:F8:FC:DC:D7:76:91:5C:21:8D:5C:B5:64:7D:69:22:57:EB:AD
X509v3 Authority Key Identifier:
keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c0:69:79:b2:e8:8f:80:03:65:9a:07:96:3a:86:14:b1:b2:
65:2e:e9:93:5d:4d:9c:0e:b3:73:1b:30:03:21:45:98:f4:e9:
6a:92:f6:78:9a:99:ef:49:17:ab:3c:9d:24:38:45:a3:25:9d:
d0:01:45:f9:df:e4:24:c4:34:0c:78:fe:45:2a:26:15:e4:03:
e5:56:83:83:50:4a:99:60:76:44:63:2a:72:8b:43:35:0a:27:
1f:eb:aa:12:bb:25:43:97:a9:b1:e0:36:45:02:df:90:33:0d:
4b:f9:66:de:d0:28:36:d1:cb:b1:01:9d:9a:2e:ff:b2:5b:ee:
d5:db:cd:32:8d:d5:7d:38:d8:19:a4:05:27:ce:a1:0a:4c:1f:
39:03:4d:6d:62:fc:fe:99:0a:90:7c:8e:de:d2:bc:41:73:9d:
3c:21:bd:56:89:2c:38:78:bf:da:c3:22:4e:d9:c9:5c:b1:52:
b1:b8:98:8c:34:ce:a4:e5:f5:c7:47:5f:5b:52:8c:15:63:82:
e7:2d:12:a1:4b:78:51:81:c0:06:d6:1a:d6:7d:2e:5d:be:73:
10:7f:a7:a7:47:22:e2:09:90:0a:fe:f4:41:24:bb:62:20:7b:
34:45:f3:34:70:2e:8c:3a:85:1d:13:81:1f:3b:24:73:bd:f2:
d6:5b:c3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:07:56 2025 by rpki-client