Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File: LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier: zfXE3eR96KsADZxK9hWnsbGXbBcA8lOcBsQRRJXr2F0=
Subject key identifier: B6:A6:E8:B5:10:26:53:3D:FF:C9:1C:A4:9A:ED:2B:48:F9:6A:EA:5C
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial: 0197B77C1E1FB82F49C5C434EDB3F15C0150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number: 03BA
Signing time: Sat 28 Jun 2025 17:00:54 +0000
Manifest this update: Sat 28 Jun 2025 17:00:54 +0000
Manifest next update: Sun 29 Jun 2025 17:00:54 +0000
Files and hashes: 1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: xmlfmKFiGaYeywqlJha37dc4WjmGa/C4Srclej2oHIw=)
2: XEqexKJb2LrlBy7JmazWnnfRrCw.roa (hash: dfO0SxZnhpUVd2vYpZFuzNRZkTkzryjnbxAehzWWsGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:1e:1f:b8:2f:49:c5:c4:34:ed:b3:f1:5c:01:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Validity
Not Before: Jun 28 17:00:54 2025 GMT
Not After : Jun 29 17:00:54 2025 GMT
Subject: CN=b6a6e8b51026533dffc91ca49aed2b48f96aea5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:99:39:4b:fd:b5:27:6f:34:b4:b4:ba:64:
ec:06:6e:4d:f7:05:46:9d:9a:ad:e9:33:c3:38:06:
ab:36:5f:89:c4:c3:22:06:9a:38:36:82:aa:40:a2:
f5:9e:ad:e2:a4:d6:c6:9b:44:27:d8:68:84:19:45:
b1:88:45:65:80:b5:c8:e8:b1:53:76:b6:8d:48:05:
8e:28:ee:d1:8f:18:9e:4f:69:4a:de:07:5e:74:4e:
f3:38:4c:8e:af:8d:39:69:20:02:84:78:e8:de:a5:
e3:de:d1:40:ee:5b:f4:20:78:b4:37:8b:19:09:52:
19:9c:3f:b5:41:fd:18:c4:7d:29:d4:cc:71:ad:64:
42:a1:f4:0a:04:cf:69:f6:0d:9e:d7:37:12:32:90:
ef:52:34:2d:8c:ae:8d:d9:8b:81:fc:8a:be:ec:8a:
ed:d4:3c:be:93:1a:ac:5c:c8:1e:24:32:ed:fa:26:
66:2f:4f:49:54:57:53:20:6a:17:ca:74:82:04:ff:
14:54:5e:ab:d9:60:9e:d9:93:49:96:73:e2:a5:51:
f6:a7:c5:26:84:f6:7e:b6:e4:14:48:83:a0:40:05:
e6:53:3d:07:0e:cc:e1:37:61:7b:77:2d:59:15:06:
04:42:bb:9a:ff:93:ea:c0:56:3d:2a:c6:0a:10:7d:
96:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A6:E8:B5:10:26:53:3D:FF:C9:1C:A4:9A:ED:2B:48:F9:6A:EA:5C
X509v3 Authority Key Identifier:
keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5b:81:da:8c:10:3a:46:89:94:9a:15:58:d0:0a:b9:57:dd:
d6:44:37:4e:10:17:24:3b:e5:43:68:98:3d:5d:15:03:21:73:
85:61:6c:86:63:3f:40:60:2a:4f:b2:b4:94:73:51:80:a9:39:
b5:e8:d3:01:74:9a:dd:ca:fd:1e:2d:30:08:87:a2:81:b5:83:
df:c9:46:0a:e9:04:eb:21:34:8e:7b:37:29:30:64:97:4f:fd:
7a:bd:82:3b:3b:37:19:07:89:67:ea:19:45:68:d6:1f:bd:f5:
a5:68:da:30:72:e8:29:ae:e0:36:c9:c5:5c:ea:c0:81:c7:02:
3b:2d:68:60:9a:16:79:85:c3:90:56:b3:44:bb:4b:50:e4:3e:
8a:cc:e7:1d:cb:2c:94:ff:8d:16:d0:bb:89:6a:95:bf:a0:a3:
e9:f9:4b:2d:5d:6f:d3:f3:8f:12:c8:52:10:24:9a:e9:5d:6d:
fd:e3:24:2a:10:c0:77:c3:28:d6:19:fc:eb:a4:13:68:7c:bd:
4c:59:84:5c:f1:c2:56:c4:8f:4b:a8:1f:29:72:a7:ad:9c:de:
5f:26:be:77:55:f8:3d:ff:0a:29:59:36:e2:45:64:1b:69:d6:
7b:14:6b:d4:59:72:73:90:9a:b8:8b:ef:f5:49:f9:84:b8:8b:
9f:dc:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:57 2025 by rpki-client