Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
File: lwhyRZO0dTF1shSBLPaJGmRfhMU.mft (raw, json)
Hash identifier: NW9iSIz253nysJYfiAe8dD8LARXILee/AJJa5vL9EdU=
Subject key identifier: D6:68:25:BF:EC:29:66:CB:4D:9A:A9:2B:D3:76:2A:C4:FA:37:E0:DA
Authority key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
Certificate issuer: /CN=9708724593b4753175b214812cf6891a645f84c5
Certificate serial: 0199FCC6EC710E179026F1BF571AA9F6E42F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
Manifest number: 0208
Signing time: Sun 19 Oct 2025 14:01:58 +0000
Manifest this update: Sun 19 Oct 2025 14:01:58 +0000
Manifest next update: Mon 20 Oct 2025 14:01:58 +0000
Files and hashes: 1: lwhyRZO0dTF1shSBLPaJGmRfhMU.crl (hash: Y6YfPefqavgzKcYKnAeJvXvQFQyNCuYb7zlmF45FqNI=)
2: tTnQsLwHNO3gLW3S0MP8mMKmk64.roa (hash: DzDj3u7iBFvq9rklayzZVdsYdkT8c0vWssYs/0kky9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ec:71:0e:17:90:26:f1:bf:57:1a:a9:f6:e4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9708724593b4753175b214812cf6891a645f84c5
Validity
Not Before: Oct 19 14:01:58 2025 GMT
Not After : Oct 20 14:01:58 2025 GMT
Subject: CN=d66825bfec2966cb4d9aa92bd3762ac4fa37e0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:64:59:13:0d:3e:b5:45:2d:2a:d9:be:3f:0b:
c0:d7:c1:6e:c7:91:7d:26:5b:fc:cc:2a:35:37:74:
55:35:69:15:41:15:64:9d:dc:c5:2b:b6:53:f7:35:
c4:c2:37:c9:13:59:f6:0f:12:f3:5e:01:2c:1d:ec:
4f:c9:f2:d4:63:46:51:d3:e8:3b:4a:07:59:89:7f:
ce:65:64:ea:18:1a:d3:9a:94:c6:2f:0c:05:5d:2b:
14:b5:6a:11:f1:79:cb:d1:4e:0a:9a:55:98:40:88:
ed:85:7d:97:3b:9b:e1:83:17:c2:a5:fe:7a:a1:02:
9e:07:b1:76:6f:92:24:2d:f4:44:84:16:74:82:83:
7b:51:23:34:03:71:ed:dd:d9:92:de:df:99:87:4f:
2b:d5:6a:38:bd:e7:bc:a4:b3:df:0e:18:c9:b1:47:
9b:58:21:b9:e3:fa:c7:9d:c0:8b:01:d3:8f:2a:17:
74:a7:a6:69:55:36:73:5e:94:9d:b3:f3:1b:c2:f1:
41:72:28:59:0f:38:92:22:ec:d2:79:fb:d4:b4:81:
51:80:60:67:f4:d2:7b:c2:b9:be:ba:2c:f0:2c:6f:
01:61:fd:dd:ef:e2:bb:ff:26:fd:14:88:13:f0:b9:
0f:6e:f3:1f:7a:4f:c4:98:7e:02:48:fe:79:4b:e2:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:68:25:BF:EC:29:66:CB:4D:9A:A9:2B:D3:76:2A:C4:FA:37:E0:DA
X509v3 Authority Key Identifier:
keyid:97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:42:d0:77:da:41:f6:84:87:03:45:ff:ff:b1:41:cb:45:16:
e4:83:bd:8b:8e:04:eb:e8:a2:1b:a8:79:37:d9:5a:15:aa:47:
b0:7a:3f:41:37:2e:7d:b6:2c:0b:9c:05:bb:b6:b8:1a:fe:e6:
03:7d:ee:03:f0:eb:4a:33:3b:21:96:31:c6:2a:3c:78:6c:f9:
81:ef:31:ad:5e:6e:81:c4:ad:a6:b2:e3:ee:d3:02:99:3e:1b:
49:56:09:0c:9a:ba:82:1e:dd:2f:ad:c7:19:14:09:34:af:c6:
84:a4:34:a3:db:0c:33:20:30:af:f5:6b:f1:22:5e:9c:da:5b:
70:45:43:01:35:6d:0c:7f:5f:6d:89:2d:5a:04:3f:01:73:04:
ca:34:79:4c:3a:b3:7b:0d:9b:a2:55:b4:9c:0f:19:89:2d:44:
be:16:09:db:68:51:85:1a:01:09:be:ee:49:12:d2:6f:07:1c:
84:03:58:b6:0b:a6:c8:ae:33:e1:52:cf:99:32:0f:87:0e:87:
56:83:64:fa:76:a2:cc:2e:33:9b:9f:6d:67:7f:14:70:7f:83:
1e:b8:5a:a6:5e:37:10:2e:d5:57:35:b9:d2:be:42:46:60:56:
6f:6c:ac:72:64:a4:42:bc:ce:0a:d8:63:24:e3:ca:49:dd:47:
b6:7b:b3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:05 2025 by rpki-client