Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
File: LHwKdxsw0nQoUIDdxC42eYOW8iw.mft (raw, json)
Hash identifier: Wy8IPSfwpbKzPbPGXDSVtburVF/yhXD1/CrzGXZoxaI=
Subject key identifier: 91:B2:C3:93:CF:AA:58:6C:7E:53:72:70:38:BC:9D:90:0E:33:3F:06
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Certificate issuer: /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial: 0199FCFD761DEC676FBD7AE22EAD63DC0B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
Manifest number: 1405
Signing time: Sun 19 Oct 2025 15:01:33 +0000
Manifest this update: Sun 19 Oct 2025 15:01:33 +0000
Manifest next update: Mon 20 Oct 2025 15:01:33 +0000
Files and hashes: 1: LHwKdxsw0nQoUIDdxC42eYOW8iw.crl (hash: 5eq4GyTEFW+ArwsZNpaLABrlaygYPb7UlyiJZNqeEts=)
2: _wYBYYAWsBdIPcz67gJjf_cpxBc.roa (hash: WT5EAFrH+ID6hV4wr/zaJ0InnDxoXdrcj+f2kf7QcuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:76:1d:ec:67:6f:bd:7a:e2:2e:ad:63:dc:0b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
Validity
Not Before: Oct 19 15:01:33 2025 GMT
Not After : Oct 20 15:01:33 2025 GMT
Subject: CN=91b2c393cfaa586c7e53727038bc9d900e333f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:98:eb:37:13:5f:df:e0:e4:95:76:88:ad:
19:75:81:48:e5:d5:d0:5f:48:c5:ea:a7:b0:39:5b:
5e:a1:99:a0:1b:9e:1c:61:6b:cd:ab:69:5f:d8:3a:
08:8d:06:a3:40:98:66:1a:83:4d:18:45:96:46:1d:
a6:ec:9d:e7:70:44:9f:0f:41:ae:b0:8d:10:22:8f:
29:c5:61:2d:92:cd:fc:af:81:4b:b0:93:c2:f0:cb:
b3:66:9e:58:31:15:84:33:6b:69:1f:78:7a:cd:8f:
15:b2:ec:fc:59:3e:b2:28:9f:62:55:b5:2a:70:4d:
14:e5:7e:cd:6a:79:6d:86:d6:8d:36:fd:6a:88:71:
46:07:6c:c0:1a:bf:b6:d9:98:2f:7d:82:2c:b2:e8:
df:46:d8:1f:50:ec:3b:a2:d0:ae:59:a0:a0:5d:29:
f8:a9:99:70:3a:ac:26:b1:c8:5c:00:b5:cc:fc:49:
7e:1b:20:a7:21:5a:66:59:8e:1c:bf:45:de:99:a9:
57:17:8d:4f:85:e1:1a:62:26:da:ab:11:3a:77:cd:
ee:18:09:5d:ad:1b:38:cd:b3:db:ee:b6:17:a9:62:
80:3f:85:db:2b:76:f8:98:3e:1e:53:8b:fb:97:6a:
33:ab:b9:ac:82:52:49:17:80:f0:db:e7:9c:a2:a6:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B2:C3:93:CF:AA:58:6C:7E:53:72:70:38:BC:9D:90:0E:33:3F:06
X509v3 Authority Key Identifier:
keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e1:48:a5:13:13:1c:98:3d:02:3e:49:a7:b2:8f:4d:1f:b9:
dc:e0:c0:47:9d:ca:30:d3:ee:09:42:40:7c:c2:f4:10:ce:0a:
d1:d6:5c:d0:56:e2:f8:c3:0d:d4:17:fb:ac:18:89:07:ca:b3:
2e:10:18:80:35:1f:33:0b:f6:91:0e:39:65:67:17:df:d9:82:
5c:61:9c:bf:81:8d:e2:e9:a5:f3:0f:db:e9:c2:8a:4d:15:3e:
3b:51:35:2a:4f:eb:a3:55:1d:6c:7d:65:48:55:64:89:ec:8f:
30:2d:82:60:f1:a3:09:45:e6:29:de:89:91:75:0d:f1:39:9c:
f9:c8:1d:51:0e:a8:56:f3:55:a9:b8:68:fb:78:99:3b:33:83:
32:bd:57:82:5e:8e:bc:5b:8c:90:93:b8:df:86:c2:83:61:e5:
d4:9e:81:d5:33:f7:1a:37:19:a3:97:8d:a9:bf:33:ef:6c:47:
ae:85:74:a1:2b:92:1f:4b:ac:c1:0f:77:3c:4b:44:f3:7d:5f:
88:09:5a:81:b0:3c:8f:13:14:7f:55:8a:a6:89:e1:5c:65:bf:
83:19:fa:a9:2b:6b:c3:b7:af:d4:33:00:ff:8e:f6:df:35:c6:
36:ac:20:31:17:fd:96:8c:60:16:8f:73:76:e3:f4:5d:89:c3:
17:09:63:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:13:39 2025 by rpki-client