Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
File: LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json)
Hash identifier: HcafbpP5gT3Lv1UTkLfIY/m3DiYSFsJhv2XlidMkh1k=
Subject key identifier: 0A:C5:C8:2F:6F:AD:BA:30:D3:D2:37:A3:2C:E1:6A:07:22:6B:4F:09
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial: 0198D515CFF5D53F69277983FC49BE8998ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 04:00:33 +0000
Manifest this update: Sat 23 Aug 2025 04:00:33 +0000
Manifest next update: Sun 24 Aug 2025 04:00:33 +0000
Files and hashes: 1: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: YnlHU2eW7q+h79/NIQCH4BCAKvY9Zomu3LFiGKBXtSY=)
2: RysabfgSrooxUAVkb0Cu2rOa1B8.roa (hash: kDFtRPNIEsF7OH+wALA7E+fu8R+E9Lu/M1W1e9aWGpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:cf:f5:d5:3f:69:27:79:83:fc:49:be:89:98:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Validity
Not Before: Aug 23 04:00:33 2025 GMT
Not After : Aug 24 04:00:33 2025 GMT
Subject: CN=0ac5c82f6fadba30d3d237a32ce16a07226b4f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dc:e4:72:3c:43:f3:36:1f:e3:fa:8f:c3:bd:
e8:a0:64:82:70:08:69:51:25:b7:52:44:4a:0b:7c:
fa:af:08:b6:4a:6e:6e:01:78:4e:e5:5a:4b:cd:3b:
ae:6c:83:b0:20:32:5d:8f:17:af:5e:30:91:00:5c:
eb:79:27:74:32:bb:8c:7b:4a:46:0a:cf:a6:7f:e8:
b1:b9:cb:c8:ad:25:3f:9d:16:72:53:b0:6b:a3:7e:
7f:84:69:6a:a8:5c:a9:c6:90:72:bc:60:ec:51:48:
45:9d:7c:7c:1d:99:3d:5f:81:3d:2c:57:48:c3:b1:
32:09:86:0d:85:81:e0:ec:31:a5:5a:f9:9e:80:f1:
c1:b0:ea:eb:2f:72:aa:dd:4e:92:53:d0:6c:d7:7f:
7e:0a:41:f0:d9:90:dc:c0:6b:5c:21:f6:ed:69:cc:
5b:ee:44:92:be:01:82:7c:08:76:b9:78:a4:e3:17:
08:3b:80:1a:b7:0c:1c:10:1f:a1:e3:e8:28:3a:62:
15:27:37:ca:1c:1d:02:df:f6:40:d8:39:78:73:ee:
96:6b:f3:00:c4:9c:81:ff:bd:47:06:7a:6b:4a:3e:
c1:6a:1f:b4:60:f4:e3:fd:f5:d5:3a:92:6d:1f:9d:
98:89:94:33:80:81:e6:29:e1:e7:ef:4f:dc:52:ff:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C5:C8:2F:6F:AD:BA:30:D3:D2:37:A3:2C:E1:6A:07:22:6B:4F:09
X509v3 Authority Key Identifier:
keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0e:a0:e8:2d:ce:70:ec:49:0d:63:c0:02:2f:92:d1:f8:61:
c1:22:35:c9:82:24:35:eb:b4:78:49:9d:96:f8:a7:4b:56:d3:
2e:7c:a0:a2:b3:f2:ce:07:db:99:5d:61:cd:70:73:b9:0b:2b:
5f:c0:01:c2:b0:07:44:ff:6e:89:57:72:03:b9:65:b6:68:fb:
ba:d7:c8:36:9a:e0:fe:78:ec:88:10:19:6b:65:e5:93:87:d8:
a0:f1:88:ba:25:d8:f0:ff:d5:a1:a3:8f:eb:e0:58:44:a8:b3:
3a:15:32:2b:21:e4:91:66:e4:62:94:69:bb:b3:75:85:c4:aa:
17:0d:12:e8:b8:15:69:78:7f:c8:46:15:b1:3c:38:9d:57:35:
02:bf:0d:b7:42:46:ec:1f:8b:0d:88:91:d6:7f:55:10:46:89:
23:f9:e7:65:49:4e:cd:9f:02:99:31:b8:46:ed:c0:ce:ba:a8:
c3:20:98:a1:00:24:14:21:dd:3d:66:74:4e:3e:e9:00:bc:86:
9e:1e:4e:00:44:10:01:de:fe:4a:76:d1:f1:c0:c8:1d:44:79:
e5:61:8a:90:c5:8e:da:84:f9:13:d2:6f:5e:28:22:7b:ea:ea:
7f:f4:11:c6:55:fa:63:c7:ce:65:68:d1:32:9b:19:e1:65:7c:
81:14:ab:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:00 2025 by rpki-client