Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: W2JVwAlERYQCriw0mnuF4tzvzYL6hChNuhVqqSlqEi8=
Subject key identifier: 3C:A4:FD:62:D8:BB:FC:BD:66:C2:B2:A1:73:32:1B:62:0C:AC:96:99
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 0198D4A8184A9BAF529C8D6270397477C629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 1184
Signing time: Sat 23 Aug 2025 02:00:42 +0000
Manifest this update: Sat 23 Aug 2025 02:00:42 +0000
Manifest next update: Sun 24 Aug 2025 02:00:42 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: /oCKtivcVUmt2LhimgmoYlZdomq+hf2nhpOqlNZ2cqk=)
2: gtQV_zwRPLHuRPfREjsm-_muUpg.roa (hash: a0Tj7X+5b5MFb1rO/5kUp09wUYkeR9dP9zow62nRTzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:18:4a:9b:af:52:9c:8d:62:70:39:74:77:c6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Aug 23 02:00:42 2025 GMT
Not After : Aug 24 02:00:42 2025 GMT
Subject: CN=3ca4fd62d8bbfcbd66c2b2a173321b620cac9699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:98:0a:fd:fe:a8:32:60:3d:fe:46:fd:7e:
e9:6d:e7:65:2d:7b:81:0d:2f:fe:20:6a:6e:e5:d6:
f9:a3:6e:0a:dc:b9:89:1e:2f:84:08:34:a8:d4:40:
02:bc:5b:88:90:e2:77:7d:ed:db:36:ed:c6:aa:b9:
ef:15:b4:e5:c3:d9:a7:a8:40:16:56:9a:a5:34:aa:
3c:84:f7:bf:56:bd:61:a8:56:ad:b7:fe:9f:d8:2b:
ef:99:73:fd:c3:41:2d:19:92:0e:fb:f5:e2:58:e8:
ab:27:af:cb:dd:3c:6e:9d:92:4c:e1:1c:22:60:ce:
a4:c0:80:b3:d5:80:d5:35:50:0c:2c:a8:17:2f:4f:
62:fd:87:3f:44:a8:fb:f3:20:69:a1:2c:3d:83:76:
46:c1:87:40:d8:85:d7:7c:6f:8f:a5:4e:cc:04:78:
95:05:24:23:d2:86:06:c8:7f:bc:ac:47:7e:8c:e2:
98:0e:ef:f7:54:4b:9d:87:b3:8d:f5:64:fe:7c:1d:
b7:ae:06:b0:01:7b:42:a9:0a:61:04:9a:65:87:b5:
e8:19:4b:28:48:75:a3:51:80:71:63:f9:2f:97:a8:
07:f8:3c:44:59:bd:5c:42:ad:3b:d6:32:0a:17:73:
ab:d4:61:4f:a4:99:32:8a:bc:c2:d2:49:54:ed:0d:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A4:FD:62:D8:BB:FC:BD:66:C2:B2:A1:73:32:1B:62:0C:AC:96:99
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:81:be:9e:23:05:6f:cf:ce:2f:3d:55:89:4f:d4:70:d8:74:
ee:d9:b7:fb:08:00:45:6c:22:23:8f:6e:b4:2d:2e:4f:a2:b3:
a5:db:8b:04:e0:b9:f5:5d:c0:c6:d8:e1:9f:0c:7c:72:a8:26:
a3:a1:b6:c9:d7:1a:97:9d:d2:e2:b9:a3:61:3d:7c:af:2f:f7:
9d:f6:e9:ed:87:8b:7c:82:65:98:30:38:a5:c4:a7:ba:e8:62:
a0:65:0f:3e:63:0f:8c:16:2b:de:cd:41:0d:ba:09:66:c1:9d:
5a:2c:8f:71:4d:06:69:3d:63:39:c3:51:90:09:2e:a1:50:77:
94:e9:3d:c3:0a:dd:6d:7a:da:67:e1:fe:a0:78:c5:d4:e3:97:
bc:96:82:a2:b4:bb:aa:c8:c1:56:bd:c7:73:b2:35:7c:90:a9:
79:7e:35:31:03:a8:0f:2a:85:28:6e:27:2f:35:66:62:be:4e:
bb:17:6a:50:17:03:18:e4:99:74:1a:89:68:90:8a:48:3b:93:
8f:bf:7f:02:ff:77:90:8a:06:8e:39:dd:a4:7d:63:98:09:e0:
e8:52:1f:0a:df:ae:76:24:a5:e0:f8:e7:7e:c2:7f:18:55:49:
95:d0:f8:46:30:a5:b8:02:90:ab:b4:bf:af:ba:b9:c6:b6:2b:
2f:05:e6:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqBhKm69SnI1icDl0d8YpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMGJmMTA2MGFmOTM5MTdkYWZiNTY5YTgwY2NlYzlkYjA4
YTc2YzUwHhcNMjUwODIzMDIwMDQyWhcNMjUwODI0MDIwMDQyWjAzMTEwLwYDVQQD
EygzY2E0ZmQ2MmQ4YmJmY2JkNjZjMmIyYTE3MzMyMWI2MjBjYWM5Njk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2heYCv3+qDJgPf5G/X7pbedlLXuB
DS/+IGpu5db5o24K3LmJHi+ECDSo1EACvFuIkOJ3fe3bNu3GqrnvFbTlw9mnqEAW
VpqlNKo8hPe/Vr1hqFatt/6f2CvvmXP9w0EtGZIO+/XiWOirJ6/L3TxunZJM4Rwi
YM6kwICz1YDVNVAMLKgXL09i/Yc/RKj78yBpoSw9g3ZGwYdA2IXXfG+PpU7MBHiV
BSQj0oYGyH+8rEd+jOKYDu/3VEudh7ON9WT+fB23rgawAXtCqQphBJplh7XoGUso
SHWjUYBxY/kvl6gH+DxEWb1cQq071jIKF3Or1GFPpJkyirzC0klU7Q3icQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyk/WLYu/y9ZsKyoXMyG2IMrJaZMB8GA1UdIwQY
MBaAFC8L8QYK+TkX2vtWmoDM7J2winbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83M2Y3MzktODFiOC00NTExLTgxYTEt
YjNhMTY4MDMyMGFkLzEvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83M2Y3MzktODFiOC00NTExLTgxYTEtYjNhMTY4MDMyMGFk
LzEvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4G+niMF
b8/OLz1ViU/UcNh07tm3+wgARWwiI49utC0uT6KzpduLBOC59V3Axtjhnwx8cqgm
o6G2ydcal53S4rmjYT18ry/3nfbp7YeLfIJlmDA4pcSnuuhioGUPPmMPjBYr3s1B
DboJZsGdWiyPcU0GaT1jOcNRkAkuoVB3lOk9wwrdbXraZ+H+oHjF1OOXvJaCorS7
qsjBVr3Hc7I1fJCpeX41MQOoDyqFKG4nLzVmYr5OuxdqUBcDGOSZdBqJaJCKSDuT
j79/Av93kIoGjjndpH1jmAng6FIfCt+udiSl4PjnfsJ/GFVJldD4RjCluAKQq7S/
r7q5xrYrLwXmMw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:05 2025 by rpki-client