Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: cFaarqO/SWB7lapPcyefK63Wh50S6o7fiGJjC7HGB54=
Subject key identifier: 64:4D:3F:92:94:CE:18:01:ED:C7:48:E5:0D:68:B6:03:34:74:7D:E5
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 019A71EE8B7F982F57C0C027C9ECC2AB5688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 0577
Signing time: Tue 11 Nov 2025 08:00:49 +0000
Manifest this update: Tue 11 Nov 2025 08:00:49 +0000
Manifest next update: Wed 12 Nov 2025 08:00:49 +0000
Files and hashes: 1: A3mZEclriGszqRGoUvbHgF-KInU.roa (hash: i8Kmi4yyeQAKrcdjfPdTmfjuSQ/uP2lhkQpuex0W13Y=)
2: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: KVOpVBlgZj+k7xIBom0Jjk+JWHbmTCf1wCjuYZ7HuHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8b:7f:98:2f:57:c0:c0:27:c9:ec:c2:ab:56:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Nov 11 08:00:49 2025 GMT
Not After : Nov 12 08:00:49 2025 GMT
Subject: CN=644d3f9294ce1801edc748e50d68b60334747de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:61:e7:ec:81:6c:22:2d:c2:9c:f5:75:39:7a:
46:e1:3b:d7:09:cd:bf:88:52:b5:57:e0:e1:5e:a8:
da:58:d0:3b:d2:ea:22:83:4c:1c:9d:41:70:a7:ff:
bd:ea:aa:d1:b9:ad:e6:41:b5:a5:78:4c:31:91:51:
bc:58:ff:01:7c:1b:bb:6b:aa:6e:c8:1a:12:b6:d6:
73:f9:6e:46:54:ab:bd:ea:94:11:a8:93:c1:6e:3a:
7a:24:38:47:73:fd:56:7d:0f:6f:72:0c:42:0e:a1:
ac:9b:e1:d5:52:14:23:fe:db:41:c1:a0:74:04:33:
40:d7:34:86:01:55:fc:7c:d2:e2:4d:ce:b9:da:52:
3b:8d:8f:62:02:eb:a7:0d:0b:a8:52:86:ab:75:ae:
35:c2:62:f4:21:89:ce:84:67:cb:34:b7:57:48:d7:
4f:67:18:6a:ac:6c:f8:03:fb:1d:da:26:7a:f9:da:
48:7c:7d:cb:79:1c:0f:1a:93:1b:e8:02:b5:b3:dd:
70:57:cd:c7:69:65:20:48:af:3b:3d:c2:e1:6d:86:
b9:e9:39:8c:52:93:cd:7d:20:d6:34:fe:50:ca:4d:
f8:64:62:d3:3d:5a:86:0f:ef:5b:16:f4:41:65:cb:
0c:59:c4:90:df:54:ce:08:c0:43:d1:e7:ee:20:ab:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4D:3F:92:94:CE:18:01:ED:C7:48:E5:0D:68:B6:03:34:74:7D:E5
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7f:a0:e8:da:c2:8e:91:62:d5:a4:41:ce:a4:6e:f1:5c:2c:
fa:a6:29:21:98:e5:73:46:57:f4:be:2b:67:c2:4d:3a:15:24:
06:5e:d7:1d:17:b5:9b:1b:11:06:f0:b5:b9:7a:3b:e6:f6:9f:
50:04:9b:59:b6:6a:62:41:64:53:95:6b:dd:2d:47:ae:0e:15:
c4:e3:a4:7a:2e:7c:39:be:51:10:a5:50:9f:d4:3b:5f:a5:fe:
8e:21:d8:e7:dc:e1:40:14:15:14:79:5d:b4:be:bb:2d:7c:90:
3b:bc:af:b3:bb:74:4a:b4:71:38:32:2c:f1:a6:7d:2b:c6:33:
f5:c5:a7:c3:4e:9b:af:e1:3b:21:82:f2:ea:70:dd:0b:b0:e2:
b4:53:29:3d:db:ed:34:be:dc:4c:b1:b1:34:d6:78:70:1e:69:
39:a5:18:77:ea:2f:3e:c1:e6:4f:94:38:4f:f0:44:09:aa:4d:
1b:3f:18:44:13:60:f1:64:1b:67:f7:92:46:e0:14:ac:06:98:
3f:53:24:c4:ac:88:08:e2:de:1a:3f:14:18:97:c1:ac:d4:1d:
75:be:61:ca:6c:d3:24:8d:ea:c5:10:15:ba:2d:46:8e:7f:3f:
51:65:4c:fc:17:89:10:a4:9e:c0:09:30:f4:2b:dc:62:3c:37:
94:8f:3d:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7ot/mC9XwMAnyezCq1aIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZmNkYTEyOGZlODJhZmMwNmU4YWFkMWM4ZTVjY2RmYjM1
NTYxZTQwHhcNMjUxMTExMDgwMDQ5WhcNMjUxMTEyMDgwMDQ5WjAzMTEwLwYDVQQD
Eyg2NDRkM2Y5Mjk0Y2UxODAxZWRjNzQ4ZTUwZDY4YjYwMzM0NzQ3ZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2Hn7IFsIi3CnPV1OXpG4TvXCc2/
iFK1V+DhXqjaWNA70uoig0wcnUFwp/+96qrRua3mQbWleEwxkVG8WP8BfBu7a6pu
yBoSttZz+W5GVKu96pQRqJPBbjp6JDhHc/1WfQ9vcgxCDqGsm+HVUhQj/ttBwaB0
BDNA1zSGAVX8fNLiTc652lI7jY9iAuunDQuoUoarda41wmL0IYnOhGfLNLdXSNdP
ZxhqrGz4A/sd2iZ6+dpIfH3LeRwPGpMb6AK1s91wV83HaWUgSK87PcLhbYa56TmM
UpPNfSDWNP5Qyk34ZGLTPVqGD+9bFvRBZcsMWcSQ31TOCMBD0efuIKtvFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRNP5KUzhgB7cdI5Q1otgM0dH3lMB8GA1UdIwQY
MBaAFJb82hKP6Cr8Buiq0cjlzN+zVWHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81MzM4NmMtNDhjNS00MmVlLWJkMDkt
ZTUwYWJjOGU4ODQ0LzEvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81MzM4NmMtNDhjNS00MmVlLWJkMDktZTUwYWJjOGU4ODQ0
LzEvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3+g6NrC
jpFi1aRBzqRu8Vws+qYpIZjlc0ZX9L4rZ8JNOhUkBl7XHRe1mxsRBvC1uXo75vaf
UASbWbZqYkFkU5Vr3S1Hrg4VxOOkei58Ob5REKVQn9Q7X6X+jiHY59zhQBQVFHld
tL67LXyQO7yvs7t0SrRxODIs8aZ9K8Yz9cWnw06br+E7IYLy6nDdC7DitFMpPdvt
NL7cTLGxNNZ4cB5pOaUYd+ovPsHmT5Q4T/BECapNGz8YRBNg8WQbZ/eSRuAUrAaY
P1MkxKyICOLeGj8UGJfBrNQddb5hymzTJI3qxRAVui1Gjn8/UWVM/BeJEKSewAkw
9CvcYjw3lI89zw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:51 2025 by rpki-client