Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: dxNfxFqo3uYkkqfnHDReZbPWpx4863F2PJhCkTHHVow=
Subject key identifier: A6:9C:6E:E4:6E:DA:1E:86:B8:9C:5C:F5:0E:51:8B:38:24:32:D9:71
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 0198D47498B1E72318C1CA17E6AEC57F5A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 01:04:27 +0000
Manifest this update: Sat 23 Aug 2025 01:04:27 +0000
Manifest next update: Sun 24 Aug 2025 01:04:27 +0000
Files and hashes: 1: aRRMx2LpXrXzb91tfKNbEYwqTy4.roa (hash: u9ed+0pIjkL2kAKw6TtOQkn9W9RbAQ792y7vYcRd71M=)
2: eV3A69o5dbmXhkcbRscNdwCcmUw.roa (hash: 1+RfsWC1iIY4uoQdBg4VWebMYcz8BpqPe7dmv43mNg4=)
3: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: WdCL2/oUQUiLGILEuXAJBRIgDMwaxZ4oR4eo8RDPDqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:98:b1:e7:23:18:c1:ca:17:e6:ae:c5:7f:5a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Aug 23 01:04:27 2025 GMT
Not After : Aug 24 01:04:27 2025 GMT
Subject: CN=a69c6ee46eda1e86b89c5cf50e518b382432d971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:78:49:69:8f:81:66:39:c6:ce:c8:7d:dc:94:
9c:1c:55:80:6e:65:08:3e:6c:1d:a1:bb:4b:dd:db:
af:0e:22:04:6c:95:53:47:2f:ea:68:dd:14:62:42:
29:d2:64:ca:a4:64:35:a8:53:2d:c4:75:ae:07:9f:
a1:79:6a:9f:88:a8:81:2d:df:a5:2b:4b:63:fe:6d:
fc:ea:b1:3f:05:d8:d1:68:da:9a:fa:cc:6e:42:7d:
ca:eb:ed:9f:de:b4:58:48:bd:8a:40:50:63:ea:2d:
73:f9:9a:2c:46:23:b1:52:68:00:c8:98:9c:fe:5a:
c6:67:aa:24:ac:d0:b2:68:55:3b:cd:5d:5a:a4:a3:
d7:fc:11:44:41:0c:33:46:63:44:4b:28:b3:77:5a:
17:29:2b:9a:a1:36:41:02:20:d8:f4:e3:bd:c1:2a:
88:6b:cc:ae:29:fe:59:d2:6d:f4:87:d6:be:fc:ac:
a8:e5:7c:fb:06:cc:d6:da:c4:43:91:67:aa:2a:06:
c3:b2:b4:76:de:07:73:bb:68:7e:01:ef:98:e6:08:
ca:a1:9a:18:e6:88:04:26:31:20:89:7a:e1:e5:0a:
7e:cb:53:ee:bc:ed:33:32:9f:5d:8b:62:ad:d5:23:
0a:d5:cf:82:3a:0c:01:d5:04:3b:a2:1a:1e:28:61:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9C:6E:E4:6E:DA:1E:86:B8:9C:5C:F5:0E:51:8B:38:24:32:D9:71
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2a:e0:1d:a0:9d:02:6f:e5:b9:45:c4:64:a0:96:14:74:1b:
fc:20:46:31:68:1c:da:f8:ec:2c:f6:4f:2e:25:b4:b6:67:f7:
70:dd:80:a7:fc:b0:e3:5b:69:45:dd:49:78:3b:04:0c:4e:b3:
bf:78:54:eb:c4:59:e3:2f:05:b1:1b:65:d7:ef:fc:04:5f:bb:
d4:e3:c0:d3:c2:ac:9e:46:67:29:30:8a:b8:e5:45:94:ad:aa:
96:31:b1:1c:0f:03:2f:a9:d6:9d:a4:c5:57:62:0f:16:6f:9d:
8c:82:bb:78:c1:45:ba:92:61:56:73:8a:b6:0c:cf:18:d6:da:
fa:7c:f0:10:1c:16:6b:f8:2f:00:80:88:f8:d9:85:51:47:1e:
87:89:1f:74:05:e3:36:55:a1:cf:47:28:db:63:9f:ae:36:c3:
45:0d:86:b0:a0:11:5c:88:b5:eb:d1:13:78:d7:db:fd:61:4a:
7a:b5:ca:a6:11:79:14:4e:b5:2d:54:66:d1:f2:3a:1c:a6:31:
12:88:64:0d:e3:d2:4a:84:44:de:a0:8b:58:f7:ae:a5:1e:5b:
2e:44:3e:6b:94:19:b5:38:12:35:02:bc:28:86:bd:50:75:e8:
a9:89:4e:20:f1:32:61:85:3c:54:4d:14:7a:45:66:46:84:01:
4b:6f:8f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:42 2025 by rpki-client