Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json)
Hash identifier: bHPqwyWpEsR+ujvwV0FeBf2UsfJgKE5ME49tSk7o84k=
Subject key identifier: B0:32:57:92:B0:0B:A5:B5:BD:15:28:9F:0B:AF:9C:49:23:08:E3:91
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 019893A3D7B4F4CE25194C3756AF37845B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 11:00:44 +0000
Manifest this update: Sun 10 Aug 2025 11:00:44 +0000
Manifest next update: Mon 11 Aug 2025 11:00:44 +0000
Files and hashes: 1: c2mbKi5UZ3GiOkTKMMsYLmmHWNU.roa (hash: UtxHj7i+M428S4MKPB9E9Q2PRXSjTUZ5FcXtjJA5bUs=)
2: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: d8Oo7Uy3ikKYNwz/L5NCfjn6IIbfSk2ZWQSbdaaJ7bA=)
3: oRfW2FP4FbeYSI3kehqgncp9gcc.roa (hash: XwGX8naDPDNcbpgigNakMaNKC6NSSrDBYhs82eP32R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:d7:b4:f4:ce:25:19:4c:37:56:af:37:84:5b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Aug 10 11:00:44 2025 GMT
Not After : Aug 11 11:00:44 2025 GMT
Subject: CN=b0325792b00ba5b5bd15289f0baf9c492308e391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b6:95:54:1c:fe:df:28:e2:51:69:6e:05:c2:
46:81:78:67:bf:16:f0:d0:ba:3f:e2:22:ca:a3:f0:
7c:22:86:40:8b:9b:65:22:aa:92:06:77:f3:51:30:
8e:82:32:64:f2:d5:cc:d4:89:2e:db:c6:e7:74:21:
a4:dc:a1:20:20:74:df:6b:ee:f0:f0:1e:f7:7f:5e:
f0:80:38:7d:b5:33:96:53:15:06:5c:e7:3b:8e:4d:
7c:91:1c:46:4a:a4:b9:c6:1a:65:3f:6c:c4:d7:06:
13:5d:97:f6:ca:c7:ca:8b:0e:83:9c:91:0c:e8:75:
44:69:4c:4f:ab:d4:16:31:a1:99:cc:03:c0:5c:9d:
b4:0d:0b:10:f3:6c:1c:d4:b1:e8:41:d9:81:80:66:
b1:ee:d2:e5:b6:c9:57:79:fd:48:c7:a2:78:a5:2d:
a6:73:79:d1:87:0c:62:d2:e0:06:90:9c:30:ed:8d:
66:19:f2:a4:dd:4e:b0:7d:6b:2f:27:09:ef:03:99:
56:a2:35:91:ea:69:03:c5:0a:8a:14:a3:d5:e2:1d:
de:e6:e7:f0:5a:aa:7c:19:a9:5a:6b:8e:05:a5:d1:
ed:9b:95:9c:d0:e2:4b:d6:6f:60:ca:3c:53:e1:87:
94:e1:81:7d:a3:c2:5e:30:c9:c2:bb:75:71:2e:a9:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:32:57:92:B0:0B:A5:B5:BD:15:28:9F:0B:AF:9C:49:23:08:E3:91
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d7:31:67:02:e4:ba:c2:79:3c:d6:a1:a6:5f:86:3a:05:1e:
c0:61:ac:36:f8:05:f6:a3:53:16:f2:44:dd:76:04:fd:8e:97:
6e:07:ba:9c:b9:15:2e:0b:1f:87:8b:cc:f1:5a:48:d1:ad:3f:
43:52:17:83:a7:0c:50:f0:c7:2b:4c:fe:7b:04:b3:2e:26:c6:
5a:f7:25:1e:54:40:35:15:08:82:1f:d4:7e:24:f9:f5:c2:fb:
74:f5:a0:f2:98:b5:4d:ab:13:a2:34:be:a6:6c:e7:c8:4a:ef:
27:86:8b:bf:3f:5d:6a:b3:c7:b5:5c:ca:cd:3a:e7:fe:8d:78:
ab:59:c1:e3:41:40:30:40:78:2c:54:d8:c4:24:4d:f0:82:dd:
d2:0d:1e:74:5a:9a:93:f8:9f:b9:02:21:ad:0f:e9:71:36:ba:
ad:10:e7:41:fe:a5:00:5f:a9:a1:08:5c:c1:e1:eb:c1:5f:89:
1c:f7:07:d7:52:fd:13:ae:61:39:5e:aa:5f:77:27:c0:63:0d:
2b:52:02:1b:25:7c:ba:4e:0a:8c:34:82:38:30:49:28:b5:30:
0e:d6:b8:0a:06:be:af:ac:41:b6:da:7a:8a:5a:ae:b1:fe:6b:
b3:82:20:cc:1d:21:a1:56:f3:1a:47:53:bf:ce:c6:3a:e1:7d:
4b:5e:7e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:42 2025 by rpki-client