Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
File: LWNPtoGAIUTwZMGxnxH2qudZbc8.mft (raw, json)
Hash identifier: bXk8xU0r7M9bdQrslVCsX2VWS8F/mdQ6ALjsyu6DCmk=
Subject key identifier: 14:75:87:F0:3E:EF:D1:D0:07:44:6E:56:BB:DA:05:A3:05:BB:62:38
Authority key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
Certificate issuer: /CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Certificate serial: 0199FC58BB86D8C160D222355A5E8879E098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
Manifest number: 09D8
Signing time: Sun 19 Oct 2025 12:01:37 +0000
Manifest this update: Sun 19 Oct 2025 12:01:37 +0000
Manifest next update: Mon 20 Oct 2025 12:01:37 +0000
Files and hashes: 1: LWNPtoGAIUTwZMGxnxH2qudZbc8.crl (hash: u5COIkRb4sKwsmYW7LU0kgft0Yeqa6L8AmA++4aNgDg=)
2: VLvU695jlmxr_Aa_-diXqvNVQGY.roa (hash: /bKiG14xP3FUaKqcC1XqqIaBQA/QOWOmJHyp9J37dmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:bb:86:d8:c1:60:d2:22:35:5a:5e:88:79:e0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Validity
Not Before: Oct 19 12:01:37 2025 GMT
Not After : Oct 20 12:01:37 2025 GMT
Subject: CN=147587f03eefd1d007446e56bbda05a305bb6238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:c7:58:77:43:a1:cc:a5:f4:63:1b:fe:b7:
cc:76:e2:df:b7:b7:a5:bf:ce:6a:8a:a8:e1:39:5b:
4d:08:d2:3b:ca:cd:36:1f:95:9a:13:46:17:60:12:
52:93:b0:1c:b8:c9:c9:2f:1c:b7:cc:e1:fe:34:f7:
7e:93:51:f5:f6:02:4f:03:ad:87:83:4b:81:60:8b:
ab:e3:5c:18:00:89:38:13:a7:fb:38:2c:8d:33:1b:
a1:64:b5:aa:05:d0:de:8d:f9:00:84:70:79:f3:65:
92:ef:c1:e0:b8:3a:8c:82:04:76:69:c6:f0:ab:02:
1f:d9:8f:89:73:fd:b3:2c:7d:73:8d:e3:79:5e:a0:
3f:5a:bb:74:f1:2f:69:21:d7:8b:78:cd:0d:4d:45:
c9:7c:9a:c8:b6:b0:0e:ae:82:a8:4b:83:9a:8a:88:
26:91:c7:ce:41:89:c2:48:c7:99:35:4b:ec:e0:f5:
db:3d:3a:4d:e5:c9:fe:95:be:f5:91:10:9d:72:d2:
ce:bc:1a:89:cb:80:ab:1b:a3:70:38:b2:ae:4a:0e:
1e:84:3c:39:69:e5:97:e0:5a:7d:bb:cc:db:d4:e0:
f6:d7:72:c4:31:7b:2c:f1:5a:bb:81:d0:b1:60:9c:
c4:28:4a:54:3e:ee:39:26:ca:f0:8a:6f:fe:60:88:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:75:87:F0:3E:EF:D1:D0:07:44:6E:56:BB:DA:05:A3:05:BB:62:38
X509v3 Authority Key Identifier:
keyid:2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a1:c6:3a:92:15:8a:f1:65:b2:7a:0f:a9:b4:2a:f2:32:11:
25:c4:5b:3b:5a:22:b3:17:b1:22:9f:bd:15:7d:0c:b5:f3:0b:
bf:34:78:8b:a1:e8:0b:99:b1:90:df:6b:ec:10:f2:bf:0a:ae:
44:e6:51:d7:9f:af:cf:a3:b7:ee:0f:36:d5:c5:00:32:78:3b:
c8:41:dd:53:d9:4a:e2:1e:a6:9d:3e:d4:5e:1d:be:c2:43:e4:
05:51:12:cd:d6:d2:69:b4:0f:96:20:9d:12:99:3f:dd:8a:89:
29:28:86:4c:dd:eb:23:5a:79:35:7a:e0:a6:c6:c4:3a:18:8d:
28:a4:fc:34:a0:be:50:7e:dc:68:cc:82:0f:70:5a:5d:3d:ab:
0e:bb:36:b1:a1:96:fd:ac:17:0d:28:ba:ec:b1:86:39:90:52:
99:fa:93:a3:24:59:30:0b:b8:a7:83:56:28:cf:6e:90:64:06:
a5:0a:fd:58:a1:95:65:3a:02:63:c6:e2:43:a8:0f:60:ab:00:
ca:e0:05:86:07:7a:1a:c1:84:7c:bf:09:77:20:77:59:3a:fd:
fc:6e:9b:f9:c8:cd:1c:57:b5:9a:2c:87:f8:a6:70:ee:78:8f:
39:47:87:b6:a5:15:eb:92:28:8d:4b:f3:c3:3f:3b:36:44:05:
9a:b6:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:10 2025 by rpki-client