Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
File: LKw-jWOxw6_HxsC_2p1ayBe27m0.mft (raw, json)
Hash identifier: JO+tkwtd/Okrcz6A0Jvv+RD8a54znlpBn22qqtRo00c=
Subject key identifier: 33:0F:33:AE:E2:17:0F:61:4A:6C:8B:99:F2:21:25:D4:D2:AA:7A:91
Authority key identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
Certificate issuer: /CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Certificate serial: 0198D7A9744283DCCD9918E3EFA044DE62E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
Manifest number: 1027
Signing time: Sat 23 Aug 2025 16:01:03 +0000
Manifest this update: Sat 23 Aug 2025 16:01:03 +0000
Manifest next update: Sun 24 Aug 2025 16:01:03 +0000
Files and hashes: 1: LKw-jWOxw6_HxsC_2p1ayBe27m0.crl (hash: THxHlwlTh7y7DlrR+/ADYgPxrtYjc81xXZKR5yhmf2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:74:42:83:dc:cd:99:18:e3:ef:a0:44:de:62:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Validity
Not Before: Aug 23 16:01:03 2025 GMT
Not After : Aug 24 16:01:03 2025 GMT
Subject: CN=330f33aee2170f614a6c8b99f22125d4d2aa7a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:24:98:c9:f0:46:66:95:fa:52:02:a7:a0:
ca:12:94:6a:b7:9a:e5:0b:b9:75:2a:1d:64:fc:88:
c8:bc:fd:60:43:59:18:54:e2:a3:7f:f0:47:50:40:
71:01:5f:82:0f:ed:fb:11:c3:87:0d:ff:dd:7e:06:
94:5b:56:a6:57:fa:3e:e0:45:2d:e4:3c:03:d1:ed:
b1:d0:f5:07:b6:dc:8c:d5:70:76:32:9a:a5:4c:e1:
d1:49:f3:eb:08:f1:2d:d9:e9:7f:54:bf:54:b1:85:
0b:fd:10:e4:6f:f8:33:90:c3:03:d5:fa:52:7f:ff:
c3:4a:64:0a:fb:58:24:cc:1f:d7:b6:a2:4a:1c:1e:
a7:96:ed:a1:3c:8a:46:fb:10:f7:39:51:2c:4c:05:
8b:a4:f1:36:01:b5:24:82:91:0f:fa:d1:b7:3a:d8:
1f:e4:c3:0b:33:b9:6f:ea:ea:88:f8:69:2a:cb:c8:
59:69:08:a9:91:1c:52:45:04:0b:8c:d5:51:98:a8:
3d:a8:a7:51:18:ef:df:e1:a3:7e:c4:7f:c2:f1:a4:
32:56:26:bd:71:32:d9:a9:ab:ab:bc:cb:f1:ed:30:
02:4b:4d:3b:74:33:2c:74:2a:14:cc:77:d9:a7:5a:
d8:5a:d3:b2:22:a9:ee:e1:52:bf:7c:d1:6a:39:73:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0F:33:AE:E2:17:0F:61:4A:6C:8B:99:F2:21:25:D4:D2:AA:7A:91
X509v3 Authority Key Identifier:
keyid:2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:84:c4:89:4b:c4:d5:d2:d8:e1:7c:49:a9:2e:06:b1:b9:53:
ca:c8:a0:18:67:40:47:3f:d1:c8:db:b3:eb:fc:80:a6:1c:51:
8c:a6:16:98:b2:83:91:14:31:6c:72:5b:a2:7c:a4:e9:39:b6:
7c:24:52:bb:78:21:81:45:10:13:ca:1d:29:af:cb:14:d5:4e:
0a:de:6a:3b:7a:b9:a3:38:a7:3e:07:8d:74:08:83:d8:28:13:
be:52:79:3d:e2:87:51:a2:44:66:5c:22:75:5f:63:85:82:a9:
96:8f:bb:53:8e:51:5f:be:22:eb:2b:77:bc:c0:da:a1:f1:44:
76:4c:27:69:78:88:e9:6e:9b:29:a6:de:5c:f7:74:f7:04:75:
05:4c:c5:1a:bd:1b:4e:c7:25:ad:c8:fb:43:82:07:e5:97:46:
45:b9:fb:63:43:59:64:a5:4a:28:08:df:45:3f:18:f1:26:73:
4a:cc:df:e2:c7:06:30:61:6a:35:ae:0f:b8:a8:62:ff:c3:3c:
f9:26:e2:7d:7e:07:bd:45:2a:01:8d:74:08:36:43:9d:a9:38:
db:bd:90:4f:82:b2:a1:9a:6a:1f:64:7a:b5:1a:d4:24:ae:b3:
d7:97:6b:2e:84:00:77:ac:31:99:ae:b8:32:39:8c:d7:07:02:
39:2f:72:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqXRCg9zNmRjj76BE3mLgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYWMzZThkNjNiMWMzYWZjN2M2YzBiZmRhOWQ1YWM4MTdi
NmVlNmQwHhcNMjUwODIzMTYwMTAzWhcNMjUwODI0MTYwMTAzWjAzMTEwLwYDVQQD
EygzMzBmMzNhZWUyMTcwZjYxNGE2YzhiOTlmMjIxMjVkNGQyYWE3YTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhckmMnwRmaV+lICp6DKEpRqt5rl
C7l1Kh1k/IjIvP1gQ1kYVOKjf/BHUEBxAV+CD+37EcOHDf/dfgaUW1amV/o+4EUt
5DwD0e2x0PUHttyM1XB2MpqlTOHRSfPrCPEt2el/VL9UsYUL/RDkb/gzkMMD1fpS
f//DSmQK+1gkzB/XtqJKHB6nlu2hPIpG+xD3OVEsTAWLpPE2AbUkgpEP+tG3Otgf
5MMLM7lv6uqI+Gkqy8hZaQipkRxSRQQLjNVRmKg9qKdRGO/f4aN+xH/C8aQyVia9
cTLZqaurvMvx7TACS007dDMsdCoUzHfZp1rYWtOyIqnu4VK/fNFqOXPOCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMPM67iFw9hSmyLmfIhJdTSqnqRMB8GA1UdIwQY
MBaAFCysPo1jscOvx8bAv9qdWsgXtu5tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEt3LWpXT3h3Nl9IeHNDXzJwMWF5QmUyN20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xN2U5OTktZTUzZC00OGNhLTk4MGEt
OTVhZTY0YmQ1NmVjLzEvTEt3LWpXT3h3Nl9IeHNDXzJwMWF5QmUyN20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8xN2U5OTktZTUzZC00OGNhLTk4MGEtOTVhZTY0YmQ1NmVj
LzEvTEt3LWpXT3h3Nl9IeHNDXzJwMWF5QmUyN20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoTEiUvE
1dLY4XxJqS4GsblTysigGGdARz/RyNuz6/yAphxRjKYWmLKDkRQxbHJbonyk6Tm2
fCRSu3ghgUUQE8odKa/LFNVOCt5qO3q5ozinPgeNdAiD2CgTvlJ5PeKHUaJEZlwi
dV9jhYKplo+7U45RX74i6yt3vMDaofFEdkwnaXiI6W6bKabeXPd09wR1BUzFGr0b
Tsclrcj7Q4IH5ZdGRbn7Y0NZZKVKKAjfRT8Y8SZzSszf4scGMGFqNa4PuKhi/8M8
+SbifX4HvUUqAY10CDZDnak4272QT4KyoZpqH2R6tRrUJK6z15drLoQAd6wxma64
MjmM1wcCOS9yrA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:13:08 2025 by rpki-client