Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: I8HGXwcRZX+6uG4tK9p1R47JpaqnBFhwzf/a7I4L1g4=
Subject key identifier: A5:E1:E7:B9:F6:11:F6:2C:FB:E7:AB:CD:DB:1D:71:A9:43:A8:03:8C
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 0199FE1036A8F6CA670B1D3D544BCC75A72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 121E
Signing time: Sun 19 Oct 2025 20:01:39 +0000
Manifest this update: Sun 19 Oct 2025 20:01:39 +0000
Manifest next update: Mon 20 Oct 2025 20:01:39 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: d+rjH+91hNWrLhRZQ393TxAl8+R5wFuMPCInH3yAyV0=)
2: gtQV_zwRPLHuRPfREjsm-_muUpg.roa (hash: a0Tj7X+5b5MFb1rO/5kUp09wUYkeR9dP9zow62nRTzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:36:a8:f6:ca:67:0b:1d:3d:54:4b:cc:75:a7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Oct 19 20:01:39 2025 GMT
Not After : Oct 20 20:01:39 2025 GMT
Subject: CN=a5e1e7b9f611f62cfbe7abcddb1d71a943a8038c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:04:33:49:6b:a1:b8:2a:b0:28:81:ee:9f:a8:
63:4f:3d:1b:27:a1:5c:3b:9f:01:44:1d:52:9f:7c:
bd:98:a5:c5:5e:e5:d5:56:cc:4a:a8:2b:af:b6:96:
6a:9a:ef:5b:50:2e:a4:52:82:6f:d7:f6:55:a1:4e:
98:3d:f1:91:e6:74:53:e2:bf:26:a5:81:73:f9:68:
13:b3:e2:87:93:01:dc:f1:ab:a6:d5:b8:48:e0:4d:
48:0a:2e:9e:cd:1f:e9:77:65:1a:ae:47:f7:db:bc:
02:22:3b:d2:f2:98:c9:1a:a9:e5:0d:5c:38:31:92:
5c:46:02:94:bb:ae:82:8f:03:a6:97:b7:52:3f:21:
a4:14:bb:b7:9b:a5:42:3d:6f:bb:90:ae:a0:95:d3:
0e:ef:0c:4f:92:36:b2:30:d9:00:2a:ca:c3:ac:3b:
03:72:03:a8:43:d1:d2:bf:ed:5d:4f:f1:0d:b2:2a:
1a:8f:0e:9e:3f:29:ce:52:19:0a:1e:c4:45:23:f6:
e5:bc:ce:56:48:fa:3c:cc:0b:0a:3a:d4:b7:80:2b:
d7:64:28:04:bd:c4:cc:2b:d1:d8:f9:a4:0a:5c:75:
17:70:87:eb:23:b0:ce:29:ab:40:be:4f:2a:b4:cd:
90:78:ce:82:11:ff:23:3d:11:1c:29:ee:27:2f:f4:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E1:E7:B9:F6:11:F6:2C:FB:E7:AB:CD:DB:1D:71:A9:43:A8:03:8C
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:42:0a:9c:5e:5a:b9:6e:e4:81:e7:f2:ba:8e:69:b5:ef:f9:
76:b1:f7:81:74:52:b2:5f:43:0f:8a:06:f4:8a:1f:23:56:bb:
84:94:1d:bb:b9:94:69:9f:76:f1:a2:95:1b:4c:c3:6c:66:99:
e2:2c:53:6e:e4:72:6a:8c:4f:24:2c:7f:96:31:9f:e2:12:1e:
bc:48:a1:b0:29:8e:cf:51:91:13:cd:a9:e0:f2:05:31:3c:28:
1f:7c:83:b3:40:5f:83:1f:fa:55:a8:95:ba:d1:e9:29:81:9a:
d4:d9:05:7c:53:7d:c7:f6:4d:75:c0:7e:10:11:dd:07:4a:14:
01:0b:ad:d0:d7:b2:34:39:33:44:bc:8d:9f:42:e7:a5:55:6f:
6d:60:ef:17:8b:7c:bd:48:89:d0:ff:15:81:c2:ad:af:09:81:
94:f3:90:28:fb:57:d8:00:cd:71:4a:d4:61:1e:bd:09:f0:4f:
0a:28:30:44:2b:5f:13:ad:1d:b8:77:e2:77:28:26:fd:db:ce:
34:03:24:e0:90:77:46:c4:a3:6c:db:2a:0c:9b:6a:e4:e9:96:
e0:ab:6a:38:4c:09:fc:dc:7e:ba:92:ab:d5:87:5d:9a:ca:eb:
d2:be:b3:06:bb:b0:ab:6a:29:cb:ba:70:ef:61:42:f5:6f:6c:
b7:ea:db:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:35 2025 by rpki-client