Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
File: lwhyRZO0dTF1shSBLPaJGmRfhMU.mft (raw, json)
Hash identifier: ALEZ63eX+zVTZLD83Rg0CWmsVXLuNb50BIWYsIxc500=
Subject key identifier: 8A:06:89:5E:6A:CD:9F:E7:3F:A8:3E:88:1B:42:1B:4E:DB:F8:C2:F8
Authority key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
Certificate issuer: /CN=9708724593b4753175b214812cf6891a645f84c5
Certificate serial: 0197C500F33E685636B194C68FAB8DA11246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
Manifest number: E2
Signing time: Tue 01 Jul 2025 08:01:03 +0000
Manifest this update: Tue 01 Jul 2025 08:01:03 +0000
Manifest next update: Wed 02 Jul 2025 08:01:03 +0000
Files and hashes: 1: lwhyRZO0dTF1shSBLPaJGmRfhMU.crl (hash: jLiVDgx0GZR2565H8i8zyWUmejzYbUq6u5fbZb4G5gg=)
2: tTnQsLwHNO3gLW3S0MP8mMKmk64.roa (hash: DzDj3u7iBFvq9rklayzZVdsYdkT8c0vWssYs/0kky9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:00:f3:3e:68:56:36:b1:94:c6:8f:ab:8d:a1:12:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9708724593b4753175b214812cf6891a645f84c5
Validity
Not Before: Jul 1 08:01:03 2025 GMT
Not After : Jul 2 08:01:03 2025 GMT
Subject: CN=8a06895e6acd9fe73fa83e881b421b4edbf8c2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:4c:e1:13:ba:1e:ac:1d:a6:6a:28:e3:73:
2e:57:44:ef:78:eb:50:64:95:f4:94:9b:a5:eb:95:
71:49:7a:4a:01:6c:49:21:e2:ee:86:f7:6a:ca:98:
dd:1b:69:1a:59:f7:05:0e:57:0e:81:82:6b:00:13:
bd:3e:cb:b7:f6:f1:a9:ac:8f:5e:72:64:ee:87:27:
c3:d0:6f:47:d9:74:3c:77:27:b2:86:df:d7:75:24:
7a:4a:8d:5e:b6:d4:61:fe:f4:56:e5:bc:49:dc:b8:
01:97:d8:03:95:03:2e:e7:db:e8:1c:4f:0d:ad:3a:
c2:a8:42:27:26:5b:b4:24:8a:3f:d8:58:b2:ab:a1:
b7:77:c9:d7:c8:16:49:b1:b6:3e:f2:42:68:f6:15:
77:bf:0e:75:7c:92:81:96:5f:e1:7d:ca:ea:87:5d:
76:99:ce:2c:be:8d:f2:c6:40:66:35:f8:35:ee:3b:
fa:c5:fd:24:ff:92:d3:c8:d6:e2:50:55:9c:b3:a5:
d1:8a:71:3e:76:e6:6a:7e:a9:6f:48:b9:a4:27:9c:
ae:d2:85:fe:5b:02:c2:11:9d:cb:0b:f4:dd:98:fb:
b5:5f:fe:7c:95:c6:ad:ac:62:c1:ce:4d:a1:2c:e4:
88:85:51:a8:83:ef:ab:2f:49:ec:be:15:83:dd:f4:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:06:89:5E:6A:CD:9F:E7:3F:A8:3E:88:1B:42:1B:4E:DB:F8:C2:F8
X509v3 Authority Key Identifier:
keyid:97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:71:9b:db:e1:c4:d4:93:4f:37:1a:ce:5d:a9:8b:ce:87:5c:
af:3b:6a:37:cf:3d:73:0e:f6:68:77:92:74:d4:a5:80:22:e6:
f4:a5:82:8c:8d:cc:40:8b:0c:47:0c:47:1e:74:ff:ae:f9:28:
67:9d:3a:35:a4:24:c0:b8:0a:54:c5:dc:22:29:df:9d:b2:06:
df:75:57:2a:8a:fc:52:08:60:f2:73:b2:35:40:03:8c:f2:52:
78:ee:9d:d5:ed:c7:95:59:d2:af:8a:17:4e:6e:41:9f:21:4e:
6a:1c:bd:75:e4:f4:33:1e:98:99:eb:f7:e7:f2:e4:0a:74:1a:
c0:18:dd:2d:38:3a:44:9b:59:2a:44:a1:80:13:94:0a:26:64:
12:2f:7a:0d:d2:fe:67:6a:0e:a1:bc:5b:f9:e5:8a:3e:3a:99:
b4:fd:42:62:33:d9:90:51:a8:1a:c0:16:68:d2:b7:72:c1:49:
f2:6e:c6:92:ac:65:f6:8a:0e:fd:9d:f7:2c:d3:54:cd:4b:d3:
50:a5:d6:02:6a:83:69:4c:b7:d0:80:4e:14:e6:44:c8:ca:f3:
99:b9:fe:31:f6:08:d1:6e:aa:a6:65:03:6a:33:89:9b:fa:8b:
b9:00:55:3a:1a:7f:30:80:d9:48:fb:04:f9:83:84:48:9b:2d:
d6:10:74:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:05:13 2025 by rpki-client