Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: 1hGp31WLc7ctqlJ2PL81A8sTukzmZvtqAf2Wt9BSGiw=
Subject key identifier: 9F:CD:97:F9:2B:CE:46:C1:4F:99:AF:76:20:70:5F:36:27:A2:3F:0D
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 019A0147B664F77C5CB548D7A0E39C4A840F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 0F6E
Signing time: Mon 20 Oct 2025 11:01:08 +0000
Manifest this update: Mon 20 Oct 2025 11:01:08 +0000
Manifest next update: Tue 21 Oct 2025 11:01:08 +0000
Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: 8ZCv/nuP12SnzuOnsk3yQcGOeFDBerNrrnywbxKbWp8=)
2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:b6:64:f7:7c:5c:b5:48:d7:a0:e3:9c:4a:84:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Oct 20 11:01:08 2025 GMT
Not After : Oct 21 11:01:08 2025 GMT
Subject: CN=9fcd97f92bce46c14f99af7620705f3627a23f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:47:87:0d:04:23:1e:58:d1:53:4a:8d:79:
a0:69:89:53:04:8e:56:3a:7d:c7:67:83:64:56:31:
99:97:ff:33:ad:bc:72:08:9d:59:8d:66:92:a9:7a:
1a:7e:e2:0d:0a:b6:18:fe:9d:3c:8a:33:57:98:a3:
ac:b6:ff:94:4a:f9:77:6a:17:5a:a7:ad:7a:51:fc:
77:e7:79:8b:70:88:a4:4b:04:02:d7:5f:e8:54:e4:
75:6d:25:d2:68:bc:a6:55:56:7f:4e:4b:a4:77:00:
4c:d4:0a:e7:56:6e:8b:d4:df:0a:79:6a:cd:c8:dc:
82:3d:70:fc:23:20:ea:8e:96:ad:e2:d6:09:95:0a:
27:d1:13:4d:0b:4b:7e:7d:eb:6a:39:94:96:b7:ef:
4c:03:17:d8:eb:a0:e1:34:19:9e:68:3f:36:fe:7f:
e7:7f:ba:4c:6b:ac:cc:84:67:7d:3f:e1:a8:a3:fd:
12:b5:07:1f:aa:a3:92:3a:02:15:3e:2a:64:e3:98:
4e:e9:e3:d2:ed:39:82:70:56:25:5e:0f:32:8d:08:
50:48:06:b7:d4:17:14:96:a2:f3:29:9e:a6:57:a0:
8f:00:14:68:93:1d:e4:6d:bb:14:32:e1:79:a7:11:
09:98:8a:3e:43:4f:e0:ac:8d:e5:b1:b8:a3:54:cf:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CD:97:F9:2B:CE:46:C1:4F:99:AF:76:20:70:5F:36:27:A2:3F:0D
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1f:d4:ba:de:6f:21:f9:0a:f2:11:36:72:b4:1c:99:cf:a0:
c7:26:5c:12:0d:47:dd:23:69:5e:6e:34:79:42:1d:04:df:f4:
34:51:bd:47:2d:ad:7d:a4:6f:26:9c:10:68:b4:ef:dc:1d:6b:
9d:05:e2:fa:d5:23:15:71:0b:06:4c:ad:fe:61:23:7a:41:bb:
2e:54:f6:76:c9:cd:4e:75:87:b3:c0:88:58:bb:4f:7d:0a:88:
bc:42:5e:cb:32:2f:e5:18:5c:c1:bd:02:99:ae:b5:81:8a:bf:
7a:b5:8d:bd:ac:3e:71:89:77:43:38:34:bb:2d:f0:e8:f4:7d:
bb:f7:c4:33:4f:c5:4d:7f:87:09:e2:71:9d:9b:a6:61:45:8b:
00:20:80:03:0b:ab:89:6c:b7:36:a9:82:ce:73:83:50:8a:dd:
e7:61:df:82:5a:3a:a8:63:f3:94:6b:31:73:fa:05:be:d4:24:
fc:dc:3a:f8:f9:ee:7d:11:3c:c5:fe:ca:00:07:9b:13:6a:78:
2d:97:1e:50:ef:ee:b3:50:61:df:48:81:b0:70:e5:a8:d1:bf:
80:b9:4c:88:b5:61:c3:d9:94:90:4c:14:8e:6a:5f:e6:f4:b9:
72:6e:26:55:31:48:f0:2b:ef:1b:bb:61:27:d1:e7:e1:cd:14:
f6:d8:e7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:15:23 2025 by rpki-client