Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
File: LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json)
Hash identifier: yvPt5vBu77cFCJ1/4ofX15bnDYUaAfkyuadvun0xLyI=
Subject key identifier: 0F:1F:5A:78:DE:63:9F:A7:99:14:77:B9:A8:E2:39:54:ED:A9:AF:B8
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial: 0199FC8F68EE9B98C98398212EF010CBC20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 13:01:20 +0000
Manifest this update: Sun 19 Oct 2025 13:01:20 +0000
Manifest next update: Mon 20 Oct 2025 13:01:20 +0000
Files and hashes: 1: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: tExxuz/tSnimTyL96LWRiXMZt6WMKbfAeIVlv+zsUew=)
2: RysabfgSrooxUAVkb0Cu2rOa1B8.roa (hash: kDFtRPNIEsF7OH+wALA7E+fu8R+E9Lu/M1W1e9aWGpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:68:ee:9b:98:c9:83:98:21:2e:f0:10:cb:c2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Validity
Not Before: Oct 19 13:01:20 2025 GMT
Not After : Oct 20 13:01:20 2025 GMT
Subject: CN=0f1f5a78de639fa7991477b9a8e23954eda9afb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:74:e3:32:c9:05:44:f6:3b:88:91:ec:ba:
52:4c:a8:8f:b1:03:c6:e5:56:c4:a3:58:1f:ad:b5:
24:b5:ca:88:2a:92:9e:b9:97:e5:5e:30:87:85:00:
65:c6:bf:a1:9b:84:2d:31:a4:7c:91:2f:83:e0:8a:
82:aa:83:f7:96:3f:c5:20:3b:1c:a7:de:13:ea:15:
36:8d:44:06:8c:9e:1e:9e:5f:10:b2:f3:f6:fd:50:
8a:d4:fa:f0:81:1a:a4:84:06:72:10:aa:bb:ef:41:
e1:87:09:70:f1:6f:af:08:71:6e:aa:06:85:07:23:
f8:f8:a6:e0:79:a1:d1:05:91:e4:bd:b1:6f:5c:8e:
97:29:f7:61:8d:3e:df:44:aa:2b:f5:38:64:b0:7f:
25:e2:31:2d:62:00:05:fe:63:34:25:7d:35:cf:e2:
dd:7c:d6:7b:b7:01:2f:c5:5d:1f:12:1f:9c:58:d6:
ea:62:24:a1:b2:29:c3:d8:78:7f:83:ff:4d:79:62:
1d:ea:b1:60:66:0f:cb:f0:ae:8e:5f:29:24:c9:6d:
87:6d:46:f9:65:bc:35:4b:c1:1c:c4:9a:96:cf:19:
6d:e5:4d:b5:1e:04:05:c2:be:8b:b9:4b:71:32:bc:
76:ee:56:ba:05:21:75:45:30:ba:ea:58:a8:33:28:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1F:5A:78:DE:63:9F:A7:99:14:77:B9:A8:E2:39:54:ED:A9:AF:B8
X509v3 Authority Key Identifier:
keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:07:91:88:97:df:ef:f3:8c:1f:08:6b:0b:b1:a0:c9:ab:df:
20:ba:2f:51:33:b8:0c:10:63:28:30:22:98:18:e0:8a:f4:83:
9b:4e:d4:d2:cc:28:73:72:1b:ee:bd:22:9c:53:ef:06:21:85:
7b:a5:f9:b6:5d:58:01:16:c4:54:39:52:c7:b2:9f:02:28:0a:
29:af:b5:89:f8:9c:4d:28:78:b1:ff:2f:97:b6:93:8d:ef:e7:
83:f2:c8:ee:d7:57:d6:15:23:b3:f8:99:3e:fd:8a:4c:6a:e1:
a6:50:c5:f6:ed:0b:98:e5:06:af:89:5e:b1:e9:04:48:1b:49:
61:02:dc:6e:2b:3d:39:f7:91:48:8a:8b:e8:61:90:7c:b9:0c:
e3:7f:df:d5:01:b1:c8:4a:cc:ae:ca:a9:99:5d:ef:05:fd:29:
4c:1f:88:99:7f:50:04:d7:22:d7:69:1c:85:7c:71:b1:86:4e:
00:d1:a9:41:3e:1a:91:11:77:b9:94:55:27:df:94:d2:9a:92:
28:71:3f:37:bc:2a:ec:74:06:d7:40:31:f5:e0:65:28:90:97:
45:a3:6c:16:06:7b:d5:a8:82:82:17:ce:88:c1:ae:77:5d:19:
06:7f:91:2e:62:cb:77:0c:ed:ae:bd:25:e1:59:ed:bb:11:db:
de:f0:60:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:38 2025 by rpki-client