Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: krBugiy4AAmSS/K5Y9UeeyN/jhDzaxoPGWa+n9mMWVw=
Subject key identifier: 3C:A2:BE:3E:6A:0A:44:9F:60:EB:2A:6E:57:B2:91:A0:29:72:32:FC
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 0198741929E2C11B3914F8600C6CB34022B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 1152
Signing time: Mon 04 Aug 2025 08:01:02 +0000
Manifest this update: Mon 04 Aug 2025 08:01:02 +0000
Manifest next update: Tue 05 Aug 2025 08:01:02 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: Ne/EAcp0p0IBGEeY3h0jxfeAjETif60GltC6XxvDAZ4=)
2: gtQV_zwRPLHuRPfREjsm-_muUpg.roa (hash: a0Tj7X+5b5MFb1rO/5kUp09wUYkeR9dP9zow62nRTzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:29:e2:c1:1b:39:14:f8:60:0c:6c:b3:40:22:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Aug 4 08:01:02 2025 GMT
Not After : Aug 5 08:01:02 2025 GMT
Subject: CN=3ca2be3e6a0a449f60eb2a6e57b291a0297232fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:cd:d7:67:fa:e8:6d:59:7d:96:00:85:d4:
67:fd:70:80:52:9d:58:ff:2a:5f:0f:aa:21:fa:41:
6e:fc:04:e2:7b:65:10:e6:f4:f8:6e:81:3a:ba:4e:
f3:57:59:41:6d:b3:fb:77:ba:dc:6e:6e:cd:b9:64:
51:30:10:c7:ed:1e:c7:77:40:d3:17:0b:19:cb:b9:
77:24:bb:ed:3c:21:8e:fe:75:c9:c0:07:3f:3e:53:
e3:05:8d:3f:ac:5a:43:7c:d6:98:f5:4c:96:dd:6a:
86:97:bd:dd:1e:b7:34:41:3b:96:ce:88:b5:f3:6a:
d5:19:42:c8:f7:51:07:2b:d8:99:1e:7c:cb:c7:ae:
d8:cd:89:c3:a4:0e:e4:ed:a3:e9:21:c3:25:98:21:
63:0c:1b:11:3c:5b:7e:36:b2:f0:d7:a0:e8:9f:92:
b9:4e:f6:7d:90:da:74:e7:2c:7c:10:7f:97:75:fa:
08:04:e5:26:55:4b:e3:bc:e1:e4:20:7f:ec:f2:0a:
3c:7e:c3:80:91:ad:d0:d9:73:39:61:1c:9e:17:6a:
96:e4:71:33:f4:74:37:a0:ba:d6:3e:61:1a:59:f1:
9e:82:60:78:0e:87:67:27:35:51:fa:8a:a4:02:c1:
e7:d2:eb:e4:f4:70:dd:5b:66:51:81:4e:9c:74:75:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A2:BE:3E:6A:0A:44:9F:60:EB:2A:6E:57:B2:91:A0:29:72:32:FC
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0c:08:57:89:27:5f:97:8f:4e:1f:f9:81:37:55:5f:55:a1:
b6:7a:e1:5b:e0:af:c4:5a:b1:90:79:14:aa:2c:da:36:b9:86:
38:4e:d8:bb:14:51:a8:2c:aa:cf:cf:a6:95:46:1d:f3:42:5a:
aa:10:9e:fd:26:57:c0:57:c8:ba:cf:17:09:ab:df:e0:de:9b:
09:78:55:9b:e2:9e:c3:da:02:b3:b3:4e:ff:f1:b2:0b:f2:76:
c3:30:9c:a1:bf:43:97:07:2d:38:38:00:80:30:a7:24:9e:2d:
fd:65:68:0e:37:9b:73:51:a7:0d:05:16:3c:99:f0:7d:9a:0c:
de:70:cc:3e:b5:68:1f:c3:22:de:bc:7f:82:73:d0:60:ec:bf:
4f:02:9a:bf:8f:1e:1e:be:24:47:93:d8:20:b5:5f:9e:3f:fc:
31:a4:1d:a7:55:e2:27:16:86:d1:26:fd:3e:50:9d:de:7f:d6:
e9:ff:7d:77:4c:8f:15:7e:8a:e1:6c:f8:31:a1:dd:a5:77:e7:
e1:3a:19:6e:35:6f:63:c3:b7:6c:ed:9a:94:08:e4:71:89:8e:
40:d3:7f:a8:8b:f5:62:26:3c:98:25:49:52:13:c0:d0:47:be:
cb:7b:c2:d5:d8:97:af:a6:87:72:97:e8:9b:87:72:43:0a:0c:
a5:73:e4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:55 2025 by rpki-client