Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json)
Hash identifier: sk+1jQVRTjpeUuJygNJS4Hs8ztAcxXDzoyIOLd+lbIE=
Subject key identifier: 7D:53:03:C4:CA:24:65:C2:CA:4C:30:2C:D1:9B:10:0F:0E:16:35:9C
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 0199FCC69B3293BD89E3A3C8EEF7B7F2497C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:38 +0000
Manifest this update: Sun 19 Oct 2025 14:01:38 +0000
Manifest next update: Mon 20 Oct 2025 14:01:38 +0000
Files and hashes: 1: c2mbKi5UZ3GiOkTKMMsYLmmHWNU.roa (hash: UtxHj7i+M428S4MKPB9E9Q2PRXSjTUZ5FcXtjJA5bUs=)
2: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: ShHKLxxc3yI9SV9c+ohWPQD2UOukSKV09N4tw8v3+oU=)
3: oRfW2FP4FbeYSI3kehqgncp9gcc.roa (hash: XwGX8naDPDNcbpgigNakMaNKC6NSSrDBYhs82eP32R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9b:32:93:bd:89:e3:a3:c8:ee:f7:b7:f2:49:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Oct 19 14:01:38 2025 GMT
Not After : Oct 20 14:01:38 2025 GMT
Subject: CN=7d5303c4ca2465c2ca4c302cd19b100f0e16359c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:45:b7:80:ed:87:ed:b8:7f:eb:8a:71:59:
cc:a5:10:d5:11:45:3f:ec:23:15:a9:d3:f7:fc:20:
30:62:aa:c6:ea:e5:e0:28:7e:05:89:62:82:14:69:
70:48:11:67:52:7e:6d:7d:16:d1:45:77:d1:d0:33:
d4:c6:98:51:c4:d8:d1:6b:1d:df:b3:96:89:d8:f7:
2e:c2:fd:74:66:ec:c6:82:85:23:7b:aa:4b:d1:3c:
72:a8:48:9a:04:e4:54:8c:9e:65:58:4d:93:0e:27:
83:6a:2d:e8:ae:5c:b3:0e:7d:70:75:a3:c3:7b:a3:
12:d5:b8:85:48:7e:05:fd:2c:8d:32:11:08:95:ee:
b6:09:3e:24:c5:96:89:1d:27:5a:c8:36:4e:0a:4c:
df:e6:d9:0c:98:b8:55:f6:8c:f5:71:23:28:75:45:
4e:3b:48:6b:96:60:09:b6:53:c8:3b:cb:cd:28:ce:
5a:cd:15:53:11:ee:ad:5e:0a:70:b6:a6:e5:af:e8:
bd:6c:d2:b5:cf:e9:ad:f5:bb:bf:67:ee:f5:e5:c3:
db:cc:e1:8f:fe:7d:00:e9:84:07:ba:90:6d:c6:1c:
e7:3e:ae:c3:57:1d:c2:73:93:19:fe:e7:66:8f:84:
aa:36:63:76:2f:2f:08:42:02:ef:86:45:9d:7d:cc:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:53:03:C4:CA:24:65:C2:CA:4C:30:2C:D1:9B:10:0F:0E:16:35:9C
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:80:26:1a:29:28:0b:67:8a:8b:57:db:98:e5:b8:cd:e9:b4:
48:15:a9:09:85:cf:49:6f:c1:49:d7:1e:28:a0:92:64:de:9c:
b1:fd:6a:bf:ae:87:d8:6d:9a:c8:79:7a:3f:4f:22:4a:1b:3a:
aa:b0:22:3d:b6:e6:b8:8c:21:9e:d0:92:a7:9a:37:d7:70:aa:
d5:20:9e:89:bc:5d:c7:f9:20:dd:97:9f:55:86:c6:ba:fb:f1:
2a:5a:76:f4:ce:e4:2b:de:74:5b:cf:32:87:46:96:e2:d2:fe:
3f:fc:b9:2c:bc:2f:1d:35:4b:b0:8c:3f:cf:f7:2a:54:14:5e:
f7:bc:8c:ec:2d:a6:ee:8e:c8:9c:27:74:78:8f:61:8f:c7:7c:
32:86:12:1a:84:69:87:ed:11:e6:41:75:44:fd:db:0a:95:84:
51:32:be:fd:39:71:2d:4d:bb:fe:04:2b:78:c5:92:c7:09:26:
e0:f4:24:30:1a:94:0c:31:2c:0f:94:78:4b:12:27:cc:cd:04:
9f:d1:df:7e:18:b5:42:fb:5e:04:59:1e:10:76:bc:2d:93:f3:
79:b1:b3:fa:c0:8d:65:4d:56:50:43:33:9e:95:1c:fd:da:7d:
3a:ff:ec:94:2e:f1:8f:49:7d:5f:63:b2:2a:e7:a5:03:d1:28:
b8:c0:8b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:17 2025 by rpki-client