Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: WbLtkqz05HbjoT/R2A2At636BTrJXLOCNwpo+a67hho=
Subject key identifier: 2B:DB:2D:12:0B:EF:97:55:22:26:1B:01:B0:80:C8:5F:E3:03:CD:4A
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 019879AE2CCE5734DA91F0790B6DA94E1185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 10:01:54 +0000
Manifest this update: Tue 05 Aug 2025 10:01:54 +0000
Manifest next update: Wed 06 Aug 2025 10:01:54 +0000
Files and hashes: 1: aRRMx2LpXrXzb91tfKNbEYwqTy4.roa (hash: u9ed+0pIjkL2kAKw6TtOQkn9W9RbAQ792y7vYcRd71M=)
2: eV3A69o5dbmXhkcbRscNdwCcmUw.roa (hash: 1+RfsWC1iIY4uoQdBg4VWebMYcz8BpqPe7dmv43mNg4=)
3: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: XGaLPHOZWBGfQueO5It+XtxNtEFhq+gjqTlpcectmL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:2c:ce:57:34:da:91:f0:79:0b:6d:a9:4e:11:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Aug 5 10:01:54 2025 GMT
Not After : Aug 6 10:01:54 2025 GMT
Subject: CN=2bdb2d120bef975522261b01b080c85fe303cd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:58:9a:f4:c8:d1:ec:63:a3:f1:66:4f:50:
45:00:23:a2:df:62:9b:bd:bd:6a:69:80:26:a7:d4:
e6:6e:d6:ac:28:bc:9b:4e:39:9e:2c:b5:f9:03:28:
ce:fd:fb:31:12:bb:ab:67:28:60:c1:f9:71:42:35:
d2:f2:68:34:1e:d8:3c:ce:97:e2:e3:95:7b:da:d2:
23:29:f6:fd:e0:fd:5e:76:dc:a0:de:cf:97:29:7b:
85:e4:b4:9e:75:81:04:d1:be:75:46:8e:8c:3f:97:
0d:70:de:0b:66:5d:52:f3:78:b0:b6:20:76:a6:d6:
4d:bc:41:11:c7:a1:90:6e:dc:02:b7:1d:80:20:e3:
6c:5c:c8:27:f5:e7:37:4c:8b:4c:b5:31:8d:52:06:
3b:e7:23:7f:fc:37:33:8e:e5:b2:e0:f6:d6:39:36:
13:b0:2b:a2:d9:c8:31:03:f0:67:35:06:89:c7:65:
a1:2f:0a:6b:e3:a0:47:ce:62:ea:83:c6:c0:f4:22:
4e:1e:d2:9b:fc:ca:24:25:80:3b:d5:a5:e8:a3:90:
54:46:f1:21:f8:cf:6b:a9:12:68:b9:d6:5b:bd:e6:
db:4f:23:8c:bd:3d:97:13:53:f8:19:25:70:6e:d4:
ae:46:30:23:33:93:09:f7:58:ab:cc:5c:e0:8d:88:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DB:2D:12:0B:EF:97:55:22:26:1B:01:B0:80:C8:5F:E3:03:CD:4A
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:dc:9d:9b:2c:5d:e8:11:5a:da:d5:b9:79:8e:f0:dc:b0:24:
05:82:a4:25:a5:00:26:e2:98:86:dc:d0:ce:72:53:09:f4:e2:
55:4f:0d:ba:e0:d6:5b:dd:57:16:d1:66:7d:9d:8d:52:58:fa:
45:79:0b:1a:0a:c8:87:47:34:87:c0:00:17:fe:48:05:74:28:
e4:84:48:77:3a:04:22:09:b7:7a:4c:54:a0:51:dc:9a:a7:c0:
dd:7b:ac:03:e5:90:58:37:1b:db:75:cb:48:e5:71:dc:e0:78:
c8:d4:bc:bd:d1:b2:8b:f3:12:3b:6a:56:87:3a:82:c3:4a:9a:
33:15:37:c3:bb:f7:16:ee:8e:9a:74:a9:e5:ff:2a:50:f2:87:
0e:b3:cb:17:65:1b:00:91:1d:60:73:b3:a4:e9:68:99:00:8a:
92:09:6d:23:e6:e9:4f:4e:ac:52:63:0d:49:63:17:30:44:57:
ac:52:d7:6c:d4:b0:cd:10:ac:f8:10:c6:0b:4a:b3:cf:c1:55:
b0:a0:b9:df:a4:b3:2d:1e:3a:89:c3:88:22:b3:ab:63:33:79:
65:1b:2e:a9:da:64:58:7f:61:b7:44:30:33:98:1e:f5:3f:ec:
07:ca:a7:06:e3:2f:54:dd:6d:a8:1a:07:9b:fe:82:8d:16:2f:
6d:1d:ce:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5rizOVzTakfB5C22pThGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MGViZDA0NjlhNWM2OWMxMDk4OTcxY2FhYjM2ZmUwMzJl
Y2UzMTEwHhcNMjUwODA1MTAwMTU0WhcNMjUwODA2MTAwMTU0WjAzMTEwLwYDVQQD
EygyYmRiMmQxMjBiZWY5NzU1MjIyNjFiMDFiMDgwYzg1ZmUzMDNjZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNNYmvTI0exjo/FmT1BFACOi32Kb
vb1qaYAmp9TmbtasKLybTjmeLLX5AyjO/fsxErurZyhgwflxQjXS8mg0Htg8zpfi
45V72tIjKfb94P1edtyg3s+XKXuF5LSedYEE0b51Ro6MP5cNcN4LZl1S83iwtiB2
ptZNvEERx6GQbtwCtx2AIONsXMgn9ec3TItMtTGNUgY75yN//DczjuWy4PbWOTYT
sCui2cgxA/BnNQaJx2WhLwpr46BHzmLqg8bA9CJOHtKb/MokJYA71aXoo5BURvEh
+M9rqRJoudZbvebbTyOMvT2XE1P4GSVwbtSuRjAjM5MJ91irzFzgjYgN1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvbLRIL75dVIiYbAbCAyF/jA81KMB8GA1UdIwQY
MBaAFJcOvQRppcacEJiXHKqzb+Ay7OMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQt
OTE0YjRiMzRmOTgxLzEvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQtOTE0YjRiMzRmOTgx
LzEvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9ydmyxd
6BFa2tW5eY7w3LAkBYKkJaUAJuKYhtzQznJTCfTiVU8NuuDWW91XFtFmfZ2NUlj6
RXkLGgrIh0c0h8AAF/5IBXQo5IRIdzoEIgm3ekxUoFHcmqfA3XusA+WQWDcb23XL
SOVx3OB4yNS8vdGyi/MSO2pWhzqCw0qaMxU3w7v3Fu6OmnSp5f8qUPKHDrPLF2Ub
AJEdYHOzpOlomQCKkgltI+bpT06sUmMNSWMXMERXrFLXbNSwzRCs+BDGC0qzz8FV
sKC536SzLR46icOIIrOrYzN5ZRsuqdpkWH9ht0QwM5ge9T/sB8qnBuMvVN1tqBoH
m/6CjRYvbR3OpQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:20:44 2025 by rpki-client