Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json)
Hash identifier: cgFxZ17fxgU4ByIXcQ/+yIEpYMIGo85QwgwS2o39lCc=
Subject key identifier: 17:2F:8E:13:A2:0F:5F:C2:E0:0A:BF:30:11:08:39:15:80:D5:11:7C
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 0198D54EA00E052EA81754EDD192C771DFB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:36 +0000
Manifest this update: Sat 23 Aug 2025 05:02:36 +0000
Manifest next update: Sun 24 Aug 2025 05:02:36 +0000
Files and hashes: 1: c2mbKi5UZ3GiOkTKMMsYLmmHWNU.roa (hash: UtxHj7i+M428S4MKPB9E9Q2PRXSjTUZ5FcXtjJA5bUs=)
2: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: yquAyY4Aoj4ZDb06nrdeAHMNEWq9UDjJxiVqT7bCzEw=)
3: oRfW2FP4FbeYSI3kehqgncp9gcc.roa (hash: XwGX8naDPDNcbpgigNakMaNKC6NSSrDBYhs82eP32R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a0:0e:05:2e:a8:17:54:ed:d1:92:c7:71:df:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Aug 23 05:02:36 2025 GMT
Not After : Aug 24 05:02:36 2025 GMT
Subject: CN=172f8e13a20f5fc2e00abf301108391580d5117c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:05:01:0c:48:9a:c3:2d:84:19:91:61:73:e9:
61:9d:a0:41:1a:eb:d3:8d:5f:c5:92:7d:f9:41:c3:
b1:6b:6c:c1:2e:de:ab:16:26:b5:63:f6:b9:1c:6c:
11:02:23:1c:26:21:1f:39:25:a4:21:b4:93:04:55:
6b:d0:33:c1:c4:91:e6:34:0d:74:0d:0b:18:b8:ed:
c2:84:8b:84:3d:6a:c5:06:02:5e:dd:5e:35:1f:ab:
3b:15:9f:70:65:ae:fb:ac:90:14:c1:88:17:ca:fc:
f0:57:27:9e:c1:2b:62:a8:81:41:ca:0c:1d:49:56:
e2:42:5e:02:e0:62:de:73:fe:07:34:5b:6d:43:af:
23:8e:7e:37:8e:0c:dc:df:bd:3b:b3:0c:35:38:98:
a0:51:cd:62:29:92:b2:32:c9:18:50:b0:79:19:a5:
0a:40:0c:0b:5f:2f:5e:d3:b5:b3:c1:d3:a3:b5:46:
c5:81:f4:bf:25:62:3b:ea:0b:37:da:38:de:d7:8c:
72:31:73:59:78:02:b0:b7:17:29:42:4d:ee:72:c9:
b7:19:c7:3d:c2:3a:1c:b5:45:82:98:5d:e5:d9:e8:
94:9e:26:a3:5a:65:65:b4:4d:2e:9d:1f:99:80:1f:
d8:1a:5a:b5:87:18:f9:1d:73:b7:f3:f6:4c:b7:8c:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2F:8E:13:A2:0F:5F:C2:E0:0A:BF:30:11:08:39:15:80:D5:11:7C
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:78:9c:74:ad:62:04:3d:22:d0:04:ed:21:87:5f:2b:a5:94:
cb:a7:38:c2:9b:78:3c:50:6a:4f:d4:22:2d:e1:34:ad:7d:44:
ee:bf:22:2e:6a:04:69:c8:39:1a:12:b0:a9:f7:ec:41:98:f2:
e3:2e:70:59:12:f6:50:27:24:63:4d:74:e6:97:21:32:80:f7:
40:2e:d7:7a:49:96:78:f5:3a:c7:fa:5f:7d:a1:aa:ed:58:6d:
1f:2a:13:60:52:43:e4:d1:37:2f:a6:3b:4f:fd:42:fc:a2:48:
77:76:bf:2d:1d:58:27:5d:09:3d:d7:33:f8:97:f9:7b:c7:75:
40:cd:0c:22:bf:3e:f2:a2:14:33:8d:44:0d:c5:d9:44:2e:e4:
a4:4d:89:12:dc:b7:4c:74:ca:aa:a0:2d:be:5e:eb:2e:88:69:
42:a1:a1:39:36:55:7a:c1:61:b5:3f:d3:bb:74:a7:2a:1e:4c:
99:32:3a:82:a4:ec:41:49:20:c3:c8:5e:94:76:06:1a:0b:26:
22:3d:0c:de:0e:d3:69:6e:a6:80:2d:c6:cc:61:47:3a:b8:bc:
48:17:56:76:5d:c3:42:65:ee:03:e4:f0:7f:29:9c:ee:e7:aa:
d4:94:bb:ac:ea:0e:5d:ae:b9:48:bd:06:cb:4b:be:3e:80:80:
16:63:0d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:06 2025 by rpki-client