Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: 20FGF9FidCdQi5+AdXbbN0ceamZMtwd/ALmfKoHmlXs=
Subject key identifier: 85:31:0E:D6:4A:05:B6:9F:1E:11:59:B1:F0:18:3E:72:4D:95:7A:E6
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 019A4F2B6E20A39E932D26FD19E3442980B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 1248
Signing time: Tue 04 Nov 2025 14:00:37 +0000
Manifest this update: Tue 04 Nov 2025 14:00:37 +0000
Manifest next update: Wed 05 Nov 2025 14:00:37 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: tCstQ4Z2TYa9W7bchqf25wJsmFegMydsidZmfKfHYGI=)
2: gtQV_zwRPLHuRPfREjsm-_muUpg.roa (hash: a0Tj7X+5b5MFb1rO/5kUp09wUYkeR9dP9zow62nRTzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:6e:20:a3:9e:93:2d:26:fd:19:e3:44:29:80:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Nov 4 14:00:37 2025 GMT
Not After : Nov 5 14:00:37 2025 GMT
Subject: CN=85310ed64a05b69f1e1159b1f0183e724d957ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:77:b5:0a:e5:35:9c:f3:d5:b3:19:27:70:
02:dc:fb:66:33:c7:75:bb:49:b0:61:1b:bc:2c:b7:
cb:fb:50:0a:ec:1e:a6:f1:d4:b3:74:d3:d8:d4:fc:
d1:fb:b6:81:54:07:af:ba:d0:2f:9f:a7:4e:23:88:
d7:f4:62:98:93:e8:9f:e9:24:48:22:f1:4b:4e:8a:
56:3c:8b:9c:b0:6d:19:fa:54:46:14:3f:09:c7:83:
85:3d:a7:41:ae:77:f2:53:dc:5c:04:12:ae:e5:39:
85:54:00:c1:4c:70:b6:2c:0b:b1:73:2a:71:b9:f1:
ed:4b:a0:9f:bf:33:b7:57:f8:bf:80:91:27:f6:8a:
41:95:25:11:ff:b0:b3:15:52:a6:49:3d:2a:f6:a6:
ef:b5:82:f3:b0:11:c2:8a:48:cb:12:30:8d:be:c5:
d6:20:fa:46:56:5b:00:0b:8d:0a:f6:a0:01:2d:e8:
1e:b5:20:7d:b0:87:96:5a:53:93:c3:e2:d7:72:ac:
ca:05:34:f5:a1:a5:cf:13:6b:3b:16:45:7d:48:81:
4b:94:0e:49:c8:11:cc:5a:a5:92:15:c8:e5:eb:fc:
c9:4e:55:d6:d9:a6:f6:a5:d4:76:c2:a0:aa:60:c7:
a8:a1:15:93:91:68:74:47:fc:3e:ed:d3:6b:ba:47:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:31:0E:D6:4A:05:B6:9F:1E:11:59:B1:F0:18:3E:72:4D:95:7A:E6
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:88:45:b7:3e:24:a3:46:eb:4e:36:3d:58:63:c9:e9:26:3f:
1b:2f:54:3f:78:32:79:e4:cc:04:88:bb:db:cf:39:34:3e:73:
7e:fc:c3:e0:b7:3d:3c:1b:df:db:02:b7:2f:43:97:1c:a4:c5:
29:31:16:a9:d1:d6:1d:9e:30:95:51:1c:c5:ee:5a:4c:9c:ce:
89:3e:17:82:b8:26:4d:a7:25:02:a3:b2:ff:c0:12:e8:aa:36:
8a:f0:60:a9:d8:b1:b1:19:b9:1e:53:10:7a:d5:c0:fe:8d:7a:
87:0b:7d:70:20:b9:09:fc:38:07:00:4a:21:56:65:18:ba:b5:
e7:e0:ff:f1:b6:7b:90:27:d5:2c:3c:f3:df:13:ac:1a:45:68:
77:f9:eb:cf:5c:5a:5a:ee:7c:38:29:96:20:1b:f9:65:5a:31:
c6:76:48:3e:a0:f2:4e:e8:a5:17:bb:5a:d3:b8:e6:cc:df:8f:
f8:69:df:85:93:b5:63:24:ad:95:e3:cd:3e:e3:37:6a:7c:d8:
06:c6:d2:3d:d6:76:cb:a2:35:64:60:00:a8:e7:9c:95:c5:a4:
76:3e:64:d2:48:ff:10:0f:68:18:f1:53:ca:97:cc:27:1b:22:
d6:10:e0:17:db:a7:e9:95:6c:c9:29:33:29:d6:69:54:3d:6f:
9f:85:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:38 2025 by rpki-client