Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: o+f8Ijo7slI64YdzccKLFdHHT5urw79nMx0tJn8ihRw=
Subject key identifier: 4E:DD:19:6D:8B:E1:11:47:91:06:F6:23:71:91:89:41:A7:D2:69:08
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 019769619C999BEDB86C2E87A71B91FA9A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 13:01:34 +0000
Manifest this update: Fri 13 Jun 2025 13:01:34 +0000
Manifest next update: Sat 14 Jun 2025 13:01:34 +0000
Files and hashes: 1: aRRMx2LpXrXzb91tfKNbEYwqTy4.roa (hash: u9ed+0pIjkL2kAKw6TtOQkn9W9RbAQ792y7vYcRd71M=)
2: eV3A69o5dbmXhkcbRscNdwCcmUw.roa (hash: 1+RfsWC1iIY4uoQdBg4VWebMYcz8BpqPe7dmv43mNg4=)
3: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: vfIlxlt/twJmirCH6hPa+uFQJF4n1odhpAbJpNF9zds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:9c:99:9b:ed:b8:6c:2e:87:a7:1b:91:fa:9a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Jun 13 13:01:34 2025 GMT
Not After : Jun 14 13:01:34 2025 GMT
Subject: CN=4edd196d8be111479106f62371918941a7d26908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:bf:da:35:2f:5b:bb:9a:52:d7:66:c3:a2:
b3:c6:18:61:fb:5d:64:f9:c3:81:84:73:65:74:23:
cb:0c:7c:22:29:c0:ff:0d:cb:a1:38:40:f7:11:ff:
1d:55:a7:25:44:a9:a4:60:51:2c:ee:16:c7:7d:55:
58:27:07:8f:1c:ea:a1:80:36:65:e7:29:66:2b:2e:
a3:96:21:56:31:55:7d:0b:d2:d5:0e:fb:8c:a8:30:
6c:a6:7a:98:bc:e2:e1:cc:0c:73:ff:08:a8:3a:4c:
e8:c9:98:64:37:50:e5:ef:8a:0f:c2:58:e3:b7:1b:
03:16:77:a9:4d:8f:60:fb:42:c8:3c:02:e8:fa:ec:
f2:0d:46:20:9d:7f:8f:0e:42:86:b6:89:07:fe:d7:
84:bf:ca:a9:69:f5:d2:37:eb:9f:2c:da:bc:4b:b3:
04:c5:0b:ba:bf:a8:8a:77:36:bd:e5:d1:ef:3e:91:
0b:33:65:56:de:70:93:c0:3e:54:5b:1f:ef:d0:b0:
78:51:ee:de:2f:43:ff:74:23:7a:72:38:3e:38:7a:
d7:3a:38:ff:f5:c9:a5:13:fb:09:b5:56:ed:c5:e1:
f2:19:72:96:a5:a3:24:74:56:2c:4d:3a:b4:d0:c9:
25:e0:1f:f6:05:17:89:b1:c3:d6:c2:01:61:bb:76:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DD:19:6D:8B:E1:11:47:91:06:F6:23:71:91:89:41:A7:D2:69:08
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d2:7b:a3:78:a5:2c:c2:cf:53:41:57:fa:26:d3:1e:d9:0b:
57:0b:34:5e:7e:7a:43:09:80:ef:60:6f:50:0f:aa:35:ec:00:
3f:e0:ae:43:c0:d0:13:a5:44:44:9a:69:ac:bb:ef:a3:76:4a:
c7:c2:75:43:90:c0:bc:29:98:77:1c:d0:2a:ae:93:7c:df:bc:
43:de:6d:4b:00:e6:b2:8c:ca:03:24:63:08:09:fb:a6:3b:7f:
32:3a:f8:8e:2b:74:14:d0:c2:55:d2:06:c4:02:dd:d3:af:4b:
d7:5b:41:e6:bd:64:df:81:22:61:85:5d:31:f0:55:0b:9d:12:
05:a0:35:e7:a1:71:e5:91:15:d3:c5:09:53:42:5e:68:e2:dd:
db:b9:d9:e0:48:0d:b7:4b:b7:4c:b8:3c:4f:84:c4:54:66:cf:
0f:c6:f5:93:64:e9:98:1c:7d:cb:86:e2:60:1c:6a:bd:da:fd:
8e:86:f5:d9:dd:24:4f:2b:cb:c7:33:52:82:34:2b:2a:2b:fe:
91:a5:7a:72:c1:17:4c:e6:74:d4:12:bf:32:51:e9:ef:92:85:
12:27:45:8c:96:ee:e8:b2:cd:4f:f1:ba:cc:ad:69:cb:39:13:
e4:71:ea:ad:f6:2d:b2:b9:58:98:35:6d:0d:79:f3:9b:ef:96:
c3:e9:30:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:06 2025 by rpki-client