
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File: LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier: GSCOsVBJhSsrjxjWaKeWdMKH8v9OlN8b2m5d9l2u6no=
Subject key identifier: C9:1A:87:0E:D0:11:90:59:83:C3:5C:F5:36:4D:0D:5F:D0:6B:82:4B
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial: 0199FAD85603E81FBEECF3C95DCC96105410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number: 04E6
Signing time: Sun 19 Oct 2025 05:01:45 +0000
Manifest this update: Sun 19 Oct 2025 05:01:45 +0000
Manifest next update: Mon 20 Oct 2025 05:01:45 +0000
Files and hashes: 1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: 6D/GoejTArbINiLvF9XHfPzokzNsQQj1pnZA2oZjj9g=)
2: XEqexKJb2LrlBy7JmazWnnfRrCw.roa (hash: dfO0SxZnhpUVd2vYpZFuzNRZkTkzryjnbxAehzWWsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:56:03:e8:1f:be:ec:f3:c9:5d:cc:96:10:54:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Validity
Not Before: Oct 19 05:01:45 2025 GMT
Not After : Oct 20 05:01:45 2025 GMT
Subject: CN=c91a870ed011905983c35cf5364d0d5fd06b824b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:b2:db:50:d0:86:da:18:18:de:21:6f:6b:
4a:04:57:47:4b:e6:a5:8c:1e:4a:e1:32:bb:d4:d4:
97:e1:45:34:8a:62:94:38:a4:f8:57:c2:f8:08:e4:
6a:7d:6f:1d:f9:96:40:a8:4a:05:67:7b:03:a7:a0:
13:b0:85:d8:d4:50:57:dd:f5:b6:d6:f1:08:b8:e0:
b7:05:a4:3a:f2:17:2b:e2:a9:9f:0c:e1:1d:45:2e:
52:fe:76:2a:e8:3c:bf:d9:1c:2f:3d:68:aa:86:57:
c2:7c:21:11:ed:9d:49:b1:d3:5c:23:52:4a:da:ed:
b1:a1:78:e5:79:5e:9e:bc:f7:19:6b:17:fa:fd:4d:
d0:7e:a5:1f:56:9d:ba:da:89:c6:ae:87:e7:9a:7f:
8e:1e:ec:c8:ef:23:4f:6c:76:90:a8:9b:23:58:8b:
eb:48:b2:35:fb:75:fa:2e:36:e0:6d:ba:b6:ae:a3:
ce:6e:97:07:33:52:ae:f4:f9:d9:b6:db:0a:f2:47:
25:46:a1:51:a7:05:04:5e:12:dc:d3:40:ea:46:96:
be:8f:fc:2a:b4:29:f0:66:4b:f5:d1:d1:f4:ef:c3:
0e:50:e1:bc:81:7c:65:2a:e0:21:21:b0:75:05:d0:
e5:c5:dc:99:99:ac:5f:ce:34:02:0b:06:f0:a9:32:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1A:87:0E:D0:11:90:59:83:C3:5C:F5:36:4D:0D:5F:D0:6B:82:4B
X509v3 Authority Key Identifier:
keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:10:dc:78:76:76:09:67:ea:81:64:64:37:aa:5d:b5:6f:0e:
2d:f4:eb:17:29:a5:57:d2:d8:ff:a5:39:0c:48:2b:c2:98:40:
58:9f:f9:a8:c5:95:67:71:8d:65:fe:d1:28:b2:a5:65:a1:ef:
51:93:18:42:5d:4d:93:86:cf:4e:e4:1a:7d:39:8c:c2:d5:bd:
77:ae:85:9e:5a:5d:6d:74:46:25:1b:4e:66:62:a3:1e:b8:66:
39:7c:23:f1:06:d0:5f:00:19:58:4d:39:04:af:d2:52:4b:7b:
fe:24:00:92:76:d8:bb:6a:d9:8f:6c:42:46:1f:df:30:aa:5e:
3f:e9:35:75:ed:4d:a8:96:9b:54:01:50:23:4b:6a:e1:92:bb:
a5:18:fd:d4:6c:d3:16:30:cb:01:24:3a:da:6e:4c:de:4d:36:
cc:3d:76:11:7a:38:1f:ee:d3:09:d7:01:b3:f2:af:a3:43:a1:
f9:40:ad:e5:2c:ec:09:69:e7:5d:ff:9b:41:e6:f3:11:77:e4:
12:1f:97:93:d6:69:7c:68:22:86:ba:14:8b:20:f0:ab:71:e5:
10:7c:e0:8d:33:bc:20:92:70:c2:f1:bb:34:ba:2c:23:b6:f9:
25:4d:0d:0c:9e:23:aa:78:5f:87:10:69:b1:52:6e:56:ab:af:
19:1a:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:16 2025 by rpki-client