Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: yQrapBh4wzr9f67YYuJJCpVxxA/eiJCiZPAay/k9aTE=
Subject key identifier: 43:9B:4C:30:C9:9B:F0:50:7C:51:4C:7E:09:2D:2E:28:35:D9:C7:34
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 019873743D40A661544F64B32B99272B07C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 0EA0
Signing time: Mon 04 Aug 2025 05:00:54 +0000
Manifest this update: Mon 04 Aug 2025 05:00:54 +0000
Manifest next update: Tue 05 Aug 2025 05:00:54 +0000
Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: 4Zxp+i97SOiqbkSIy8x68QXkoEB3qyaV3mkCzpazf2A=)
2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:3d:40:a6:61:54:4f:64:b3:2b:99:27:2b:07:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Aug 4 05:00:54 2025 GMT
Not After : Aug 5 05:00:54 2025 GMT
Subject: CN=439b4c30c99bf0507c514c7e092d2e2835d9c734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6c:2a:a7:0f:12:41:e0:97:e2:3f:21:a6:81:
96:ea:f8:d0:c1:51:f1:72:93:c8:e9:c0:38:c1:09:
42:76:d7:40:d9:16:cc:61:63:dd:d5:90:c0:a1:a3:
f5:49:93:3e:49:27:5d:d3:01:4a:12:c3:33:b2:89:
58:76:74:ea:fb:03:6f:e2:72:91:0f:fb:a4:82:2f:
a0:fd:34:e8:44:fa:a3:d5:ed:92:a7:f7:98:55:58:
ea:94:fe:56:a2:91:8f:0e:30:f5:97:d8:46:5f:33:
2a:f8:66:8f:86:26:e3:60:b0:74:a3:26:4e:f9:f2:
53:59:49:d7:05:39:d0:ce:01:b9:a1:a6:da:e8:df:
fd:c8:44:fe:16:3b:40:ea:4b:30:8f:23:c7:4a:a0:
a9:2d:bf:96:dd:23:e7:89:27:e5:1e:5b:90:77:9f:
e6:d1:47:3f:13:fc:c7:ac:f4:1f:3f:b2:0c:65:4c:
a9:28:64:ec:18:0b:99:c2:4d:99:c8:f3:7e:ba:30:
3c:37:da:94:98:90:91:6b:c1:8e:50:ec:f1:b6:97:
59:a8:19:4d:3e:14:77:97:55:1d:2f:26:e5:50:bd:
9f:8d:db:da:61:d5:e8:c1:68:ea:6d:d5:95:83:63:
e7:c3:a1:cd:7f:52:4f:5a:3b:ad:ec:68:9c:63:c1:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9B:4C:30:C9:9B:F0:50:7C:51:4C:7E:09:2D:2E:28:35:D9:C7:34
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f6:0a:42:18:41:99:60:92:ff:69:92:e1:f9:7b:0b:c4:ae:
91:c7:d1:76:13:d5:6d:30:52:18:6d:63:2c:40:62:2c:e2:90:
bd:3b:0f:03:88:6c:93:f1:f8:78:20:f7:e5:a9:30:6b:6a:db:
5c:3f:a5:e8:81:a3:28:d6:49:fe:0e:92:f1:3e:c6:d2:8c:9a:
02:06:f5:77:65:75:f4:9e:ec:97:48:0e:0e:0a:3a:59:26:7f:
ee:bb:4a:6c:a6:3a:8b:2a:88:a1:95:40:da:bf:ac:6c:45:bf:
09:76:c1:7b:27:78:16:98:81:f7:9e:aa:28:63:72:4b:64:e4:
4c:66:54:04:92:3b:95:72:9d:78:fc:16:43:41:29:c1:f2:87:
77:5e:64:15:c8:b1:72:6a:26:6c:9e:62:b3:e6:74:2b:c9:a2:
ba:54:48:b2:3a:f0:0d:f6:e3:0c:a7:d5:1d:2d:f6:3b:37:45:
a5:f8:25:1a:5c:a6:e0:7e:2d:d4:68:91:76:f9:8e:df:54:61:
55:b4:d6:26:ef:3d:47:7a:86:ca:d4:21:2a:b5:b4:5e:ba:5e:
f2:60:0b:46:28:70:24:80:f1:8c:02:9a:72:a3:6b:ab:3a:9c:
34:78:83:1f:e3:d7:18:d9:2b:b6:10:c4:4a:3e:df:e7:df:58:
61:f1:f8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:12 2025 by rpki-client