Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: X3DjDH3J/VIT5vDIqwSeccEBq1hh6dxgHjhnVPQ3B9E=
Subject key identifier: 11:1D:6B:C4:10:D5:37:DA:D4:CE:78:AC:EB:1C:64:26:56:C7:98:9A
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 0199FDDA093C7582A28AA179F377A3116D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 19:02:28 +0000
Manifest this update: Sun 19 Oct 2025 19:02:28 +0000
Manifest next update: Mon 20 Oct 2025 19:02:28 +0000
Files and hashes: 1: aRRMx2LpXrXzb91tfKNbEYwqTy4.roa (hash: u9ed+0pIjkL2kAKw6TtOQkn9W9RbAQ792y7vYcRd71M=)
2: eV3A69o5dbmXhkcbRscNdwCcmUw.roa (hash: 1+RfsWC1iIY4uoQdBg4VWebMYcz8BpqPe7dmv43mNg4=)
3: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: avL1bYsAiZOXVDg5l/iKPebIX0tGp0EW7+fiBwL1eLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:09:3c:75:82:a2:8a:a1:79:f3:77:a3:11:6d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Oct 19 19:02:28 2025 GMT
Not After : Oct 20 19:02:28 2025 GMT
Subject: CN=111d6bc410d537dad4ce78aceb1c642656c7989a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:23:30:52:37:6d:45:e1:ff:fa:75:c7:4d:
53:19:0c:00:d8:4a:90:85:2a:49:76:65:85:b8:b1:
fa:6a:ae:d8:a6:4f:d9:be:b3:88:f2:bd:a0:1c:13:
5c:0e:2a:57:fb:84:1f:74:fd:53:cd:87:88:55:66:
8e:d3:1b:e6:21:9a:3c:53:40:e8:b2:ed:33:69:c0:
f5:cb:69:e1:e6:1b:b9:b2:8b:99:a6:0e:50:5c:b1:
d0:d2:8a:b5:de:35:09:f8:ee:98:d8:d8:86:a5:5d:
22:1b:74:b4:1b:98:41:21:ed:bd:6c:e9:f5:6e:e7:
53:54:c1:7b:2b:d8:9f:6f:2e:74:4e:4a:8f:40:fc:
2c:2e:14:0e:5c:ac:1c:72:09:95:c7:3b:68:f4:80:
af:e7:4f:5b:fa:b3:9e:44:be:90:f5:ff:54:e2:51:
5b:1a:a5:2e:a1:5f:50:cd:00:a0:4d:99:3f:78:2c:
8d:97:7c:ca:6d:48:23:40:96:f5:4e:4f:c5:0e:33:
e0:65:66:c6:b1:27:ce:6d:49:19:bc:eb:54:a5:8f:
0c:40:b6:04:15:44:a5:d7:6e:8c:85:1e:38:40:01:
94:20:c2:ed:93:2d:a5:06:f9:dc:b1:0c:71:e1:ca:
3e:80:50:9f:20:d9:35:05:be:97:1c:69:90:82:fc:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1D:6B:C4:10:D5:37:DA:D4:CE:78:AC:EB:1C:64:26:56:C7:98:9A
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:33:4f:1a:73:93:74:f2:2d:52:80:a9:b0:21:25:62:2f:37:
00:b5:68:0b:02:5b:cd:96:ef:09:ad:5f:ed:32:92:08:a1:09:
aa:bc:a2:d0:55:cf:1d:51:25:36:2a:82:77:d9:03:22:62:2c:
ba:1d:4d:d1:ef:fc:4c:3d:f4:b0:b5:b8:71:16:a0:2d:51:2b:
92:a3:78:b1:db:8b:3b:c3:85:e7:4b:a1:41:00:6c:1f:9a:ce:
74:0e:5d:20:eb:3b:f6:66:7f:0c:d3:cc:2d:0b:1b:ca:c2:12:
b9:6f:18:72:b0:94:e2:c9:7f:10:39:8b:40:a1:0a:c8:9a:91:
e1:0b:df:2a:1b:39:47:e3:87:6b:33:f7:a8:85:61:7c:bf:c3:
4c:13:4b:8c:c8:0a:be:32:21:13:12:2e:b7:5f:82:01:e8:1a:
23:a3:ba:05:40:4e:0c:c4:ac:a8:4c:a1:39:39:13:ce:65:6b:
87:5f:85:0d:c7:03:f3:0b:2c:0a:55:b6:bc:33:23:17:8f:fd:
6f:a8:14:9d:17:b0:8d:9f:23:12:3e:51:66:b7:6a:19:0b:8d:
75:ee:d4:2d:a9:9d:67:e1:4b:d6:36:91:50:c0:7f:1b:d9:52:
6a:d1:52:76:41:6d:79:97:69:7d:f8:d1:ba:56:08:98:80:5d:
7c:0d:be:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:35 2025 by rpki-client