Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
File: lvLaL6G8jtLyvGtwOovxU0D5fPo.mft (raw, json)
Hash identifier: LInOuIgIpoVbwYZ2iBGCvWS4p8knCxNgS8CYJ3F2c0g=
Subject key identifier: 14:92:06:FB:25:9C:A1:5E:55:22:4B:DB:36:5C:98:BF:BF:1D:34:19
Authority key identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
Certificate issuer: /CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Certificate serial: 01984B53F63B4D04CD71C137A9516DCC24C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
Manifest number: 09DF
Signing time: Sun 27 Jul 2025 10:00:50 +0000
Manifest this update: Sun 27 Jul 2025 10:00:50 +0000
Manifest next update: Mon 28 Jul 2025 10:00:50 +0000
Files and hashes: 1: HfieAyyFiGHzuxK88Qqlcm0jHjE.roa (hash: 9hArFOOTkWsSdh7y1qMFDzyLMrMdzpKqI+tBBv6IzqM=)
2: lvLaL6G8jtLyvGtwOovxU0D5fPo.crl (hash: k+zySvrhO6Vm9hKUAlytsBpwEzCR+JGScjAdcPgMzUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:f6:3b:4d:04:cd:71:c1:37:a9:51:6d:cc:24:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Validity
Not Before: Jul 27 10:00:50 2025 GMT
Not After : Jul 28 10:00:50 2025 GMT
Subject: CN=149206fb259ca15e55224bdb365c98bfbf1d3419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ef:23:b8:c3:80:33:e9:93:2e:84:a6:98:da:
f9:fc:20:92:48:5e:52:1e:a9:57:71:88:c7:29:de:
37:5f:db:f4:68:08:d9:52:69:40:c1:4d:02:a6:b0:
8b:6a:8e:28:39:ec:91:30:2d:dc:a4:02:de:33:0c:
bf:f2:de:60:5a:43:e7:6a:1a:c8:65:4d:17:98:97:
73:69:67:e7:76:45:87:90:77:d5:61:86:08:11:19:
32:4e:ed:d5:34:34:f4:80:83:5e:a9:b1:db:54:07:
a6:2d:32:f9:4e:61:8f:48:76:bf:a1:bf:be:a1:e9:
6c:89:34:87:0e:92:1b:88:c2:48:27:40:3d:9c:6c:
68:a8:20:db:63:d4:7b:3a:9b:0a:51:8c:f7:0f:c8:
a4:60:bc:dd:3f:3c:29:c4:6d:b3:2a:fe:0b:4b:0c:
a7:fe:43:99:e5:da:20:f4:5a:ef:0d:36:3e:99:4d:
02:8c:8d:f3:9a:16:6f:1f:69:f7:ad:a6:8d:7f:f4:
69:e9:6e:6b:9e:d4:dc:36:17:9c:41:cf:25:a9:86:
d7:db:7b:10:41:63:42:1e:47:33:9f:e5:fa:b7:80:
89:fa:e4:87:01:7d:5d:6a:7b:61:fd:8d:1a:a3:a3:
cf:2f:34:80:e6:28:1e:c3:40:44:cf:b8:42:fb:c2:
f5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:92:06:FB:25:9C:A1:5E:55:22:4B:DB:36:5C:98:BF:BF:1D:34:19
X509v3 Authority Key Identifier:
keyid:96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d7:f2:92:a9:ab:a0:8c:c6:bf:3f:f4:b7:c6:16:ae:88:07:
7d:16:74:06:66:75:00:4d:82:81:8d:da:c3:6d:41:fa:9b:14:
cf:ac:33:4e:7c:a9:17:9e:52:f2:d1:73:11:fe:8b:2f:b0:b5:
42:de:42:3c:c0:ab:3e:2b:d3:6b:f9:fe:46:81:6b:2f:31:04:
ec:50:51:ea:55:63:68:bf:95:08:5c:6d:41:4f:5a:7f:ef:1a:
f4:2a:f8:63:2e:0b:79:3d:c0:b3:1e:0e:bd:50:0f:19:8a:a5:
d8:81:19:0a:e3:ea:c4:b2:99:1b:71:a5:da:1a:d8:60:76:e6:
42:f6:a5:6f:48:04:2d:b1:01:ab:c0:53:37:92:d2:05:26:59:
2f:1a:bd:8d:dc:d4:e7:38:57:54:dc:6c:8b:54:9e:67:ac:d5:
5f:1e:01:2f:ec:aa:7f:08:5b:5b:e8:fc:50:27:c4:80:3f:14:
f1:52:cc:35:2b:f0:64:bf:d5:08:b2:80:3e:c8:d6:e3:0b:1a:
20:c3:fc:37:b4:a2:a9:fd:51:f5:e4:1b:be:4f:76:6b:91:27:
1a:b3:be:ab:41:ec:d3:28:8c:83:68:75:e7:5f:a4:64:93:99:
ee:8e:a5:45:88:24:8d:20:06:19:b5:16:1b:44:2b:cb:8b:11:
54:b2:9e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:48:28 2025 by rpki-client