Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
File: LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json)
Hash identifier: S0KPJc9NfWWaTDS30YtQ5VBAjSPBZAt9PkDKmJeb4SI=
Subject key identifier: E7:56:08:F3:E0:82:C8:37:0A:81:48:9A:6E:B8:89:B4:18:0A:81:30
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial: 019A4F620360BBBC9CF6628E8D3E5C2A3578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 15:00:14 +0000
Manifest this update: Tue 04 Nov 2025 15:00:14 +0000
Manifest next update: Wed 05 Nov 2025 15:00:14 +0000
Files and hashes: 1: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: o/4IUDPVha4ssuns+3XZTVGDkxg9qB7TK74OtMsFPXI=)
2: TZLeuUkI4CjEnpLLtWGzEA-joRI.roa (hash: YPtfqltU/oN+o/HH/QLZS2oxA/bwOyzCiodegvrQed4=)
3: ai_A7AG70LoK-2voHZXOhAOVMf0.roa (hash: hn2u5HU4dhrWeJ6INpgfQ8ZAf8MY3atf6SETHEmPiMU=)
4: c_zOfM7vLQJCIH9ZtTubpG60GUI.roa (hash: PR+2Ofr0AqtJDndUiUP4vY2xuU8uzBfHcV/JcyjNBZU=)
5: vMV24DhvZ51gpTgovgA0DHavZ5Y.roa (hash: pvB3MpylBNAYQdSCjBtx8G9c34zYXq6BUWOPnr06JNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:03:60:bb:bc:9c:f6:62:8e:8d:3e:5c:2a:35:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Validity
Not Before: Nov 4 15:00:14 2025 GMT
Not After : Nov 5 15:00:14 2025 GMT
Subject: CN=e75608f3e082c8370a81489a6eb889b4180a8130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ac:3f:a9:9b:83:6b:02:38:59:1b:f5:fb:61:
93:26:45:ca:9e:04:b9:d0:eb:4c:68:a4:d5:b1:c0:
3e:ae:71:bb:2e:34:a7:f5:de:28:1a:2f:a0:ce:29:
2b:53:ff:57:e9:e5:79:a8:cf:d0:9e:ff:51:5d:2e:
7d:ad:47:79:b8:0e:ad:44:3e:b3:c4:89:29:99:d2:
9e:8c:04:2d:fc:e7:99:fb:51:21:95:70:ec:53:82:
c3:a2:86:24:25:07:d9:ff:9c:75:b4:f2:97:fd:d9:
b3:74:61:b6:c7:aa:1b:fc:b8:23:ec:2c:3a:ce:25:
b4:d2:59:03:84:35:ff:46:c6:41:7c:ff:85:59:79:
2c:b8:c2:27:6b:0a:d9:12:a6:43:c1:59:94:63:6e:
13:19:49:12:c2:f2:98:9a:81:74:7c:c3:25:4d:3c:
34:ee:ed:dd:d8:29:79:58:9b:f2:1c:58:63:b4:d0:
f3:b1:fd:ee:a9:33:3c:0b:bc:6b:d3:3b:17:6c:b6:
ab:b6:cf:ae:24:ff:9d:56:a2:af:8d:ae:1f:b5:a4:
07:d3:3d:89:6d:0b:02:c0:ef:2c:f3:b5:1f:b2:8e:
dc:f6:6f:ae:e0:c0:b3:a8:ed:60:40:8a:11:53:51:
6e:e1:e7:b6:f9:ed:14:35:40:cf:e0:03:fa:b9:8b:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:56:08:F3:E0:82:C8:37:0A:81:48:9A:6E:B8:89:B4:18:0A:81:30
X509v3 Authority Key Identifier:
keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2d:1c:e2:cf:eb:32:e4:b0:44:8d:cb:c2:2f:5c:e4:58:2d:
5d:95:8d:05:d5:14:68:2c:05:19:da:d9:ea:52:63:d5:a5:74:
b3:b9:7a:19:91:2f:f3:00:4c:e5:88:c7:7a:ac:1f:08:76:7a:
f2:96:94:2a:0a:12:38:3d:bd:3f:54:9a:c4:6b:3c:87:e9:9f:
e5:01:75:8e:e9:d9:60:7c:d0:bc:23:d0:4e:a0:18:f2:59:e6:
f6:7d:6a:be:f7:cc:36:f1:56:4a:bf:f3:bf:b6:fd:06:3d:87:
cb:70:de:71:d5:f6:49:4c:8e:26:87:4a:83:a1:42:e9:64:9e:
db:40:1d:44:53:5b:ec:25:69:18:6e:dc:72:e0:39:e2:7c:b6:
6e:23:7e:42:c1:e2:5b:2c:02:28:5d:9c:12:01:dd:1b:b8:87:
79:76:b1:45:4a:2a:a9:fd:1d:de:97:8a:39:d6:12:d1:b6:06:
a8:0d:40:93:4b:06:18:27:55:41:07:45:08:b3:bc:af:ad:a1:
d5:18:1c:35:d5:b8:e7:19:65:59:91:c6:1e:cc:2c:d4:55:e1:
b7:54:77:05:2d:76:82:6e:99:40:5d:e8:cd:fd:fa:da:2c:41:
79:17:17:ec:a2:a4:f5:5c:d0:72:c8:3a:0c:fa:c5:21:58:37:
b4:cd:dc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:23:19 2025 by rpki-client