Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: iSDbxd0K6MpvwaLymuPC6gnT1T9kYqZE28kT8kIkfrY=
Subject key identifier: 55:AC:9D:E2:34:0E:8A:12:D3:90:F8:BA:D9:5A:90:C9:3A:03:3F:85
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 0198499C6367C9DA8CEF23A33FEC96D760FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 0459
Signing time: Sun 27 Jul 2025 02:00:42 +0000
Manifest this update: Sun 27 Jul 2025 02:00:42 +0000
Manifest next update: Mon 28 Jul 2025 02:00:42 +0000
Files and hashes: 1: A3mZEclriGszqRGoUvbHgF-KInU.roa (hash: i8Kmi4yyeQAKrcdjfPdTmfjuSQ/uP2lhkQpuex0W13Y=)
2: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: t3aKtCQtfXG+hgKsM9iPU3TmBUysnmIqVDiKOJ/U/DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:63:67:c9:da:8c:ef:23:a3:3f:ec:96:d7:60:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Jul 27 02:00:42 2025 GMT
Not After : Jul 28 02:00:42 2025 GMT
Subject: CN=55ac9de2340e8a12d390f8bad95a90c93a033f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:7f:68:7f:34:b5:38:62:62:a1:4c:e2:17:
07:79:c7:a8:7e:af:d6:46:e7:ef:b2:d7:22:1c:0c:
56:00:18:fb:eb:93:1a:92:20:a5:31:84:02:8e:f2:
e1:c9:05:c4:7f:6c:dc:ba:f9:83:b0:b6:ca:7e:a5:
8f:44:28:92:a8:2f:9a:7a:59:de:a2:d4:1c:e2:20:
bd:0d:c3:9e:15:7e:74:de:9c:ee:61:ac:c4:20:da:
bc:ca:3f:05:7d:81:10:c5:e7:e5:17:ff:e4:e3:0a:
5d:f9:0d:7c:78:48:8c:82:2c:e2:37:fc:21:5f:a5:
8b:67:77:b8:c5:47:8b:dc:12:77:57:bd:74:4e:a7:
d2:29:9e:e8:1d:ca:6b:95:e1:60:12:65:06:02:d7:
69:bd:32:99:65:cb:f4:06:74:06:61:57:b8:55:27:
73:6c:1c:9d:8b:ad:87:07:91:4c:8a:b0:42:87:58:
bc:02:00:9f:b1:55:65:4a:a5:bd:b9:74:a7:1f:e0:
f9:b6:d7:14:25:55:ae:fc:d2:7e:06:2e:6e:b7:fc:
2a:dd:7f:f0:47:a3:ab:9b:a3:ee:72:9f:c3:c6:1e:
48:81:6c:cc:df:ca:50:7e:06:f8:85:e4:b7:cf:c6:
a7:c8:87:7a:5d:8f:17:76:60:35:7f:da:ea:1e:15:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AC:9D:E2:34:0E:8A:12:D3:90:F8:BA:D9:5A:90:C9:3A:03:3F:85
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:58:9f:fc:af:36:9f:a0:5a:57:4f:4c:9d:3d:57:3a:c1:9a:
41:0d:c2:7f:0d:a0:c8:d0:db:31:99:0f:5e:a8:6c:8f:ea:da:
cc:36:dd:f3:9b:2e:3e:c2:e3:01:db:9b:6c:aa:d9:d1:a4:cc:
37:6f:a9:77:0b:cb:ee:78:e1:4f:4b:2a:57:f0:88:a3:24:65:
fa:c2:ab:6e:05:df:8a:06:63:66:96:11:91:02:5a:4e:55:a8:
d1:f7:37:cc:e5:32:ec:45:ec:89:6f:b5:78:62:38:40:c6:8c:
d0:0d:f3:6a:cc:42:b4:ad:eb:25:27:7f:d0:d6:cc:e4:10:87:
72:2a:35:ce:9b:17:58:a2:bd:d7:71:d5:d4:78:16:c6:2e:2f:
00:d8:82:63:cb:53:c0:ae:39:a5:81:e4:d4:52:d0:27:3a:41:
55:a7:89:d5:52:ef:13:f6:7e:c2:c6:37:98:af:31:4d:7a:0c:
42:79:1a:06:e5:7a:fa:e6:08:2a:65:00:b7:62:9d:3b:79:95:
0a:bb:16:6b:2b:72:c9:86:0e:ad:7d:74:80:67:d3:29:0a:25:
98:9e:59:6c:65:0c:80:81:6d:8b:9e:13:23:39:82:5a:8b:84:
29:44:f2:ca:ec:a8:16:4f:4f:3a:c7:a1:51:41:13:e2:6c:91:
ad:47:77:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:29 2025 by rpki-client