Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
File: lvLaL6G8jtLyvGtwOovxU0D5fPo.mft (raw, json)
Hash identifier: dzVsJeReHszQXF5swGRgD+Xet5rgEaw45D3bxfvZz/I=
Subject key identifier: 27:61:74:58:EB:37:AE:B9:69:95:27:00:3F:BF:74:BE:3A:12:F5:3C
Authority key identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
Certificate issuer: /CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Certificate serial: 019A736EF07124CCB93AE1DC11B417A48AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
Manifest number: 0AFD
Signing time: Tue 11 Nov 2025 15:00:41 +0000
Manifest this update: Tue 11 Nov 2025 15:00:41 +0000
Manifest next update: Wed 12 Nov 2025 15:00:41 +0000
Files and hashes: 1: HfieAyyFiGHzuxK88Qqlcm0jHjE.roa (hash: 9hArFOOTkWsSdh7y1qMFDzyLMrMdzpKqI+tBBv6IzqM=)
2: lvLaL6G8jtLyvGtwOovxU0D5fPo.crl (hash: Sl6vnEaOtRZxVxLQoC5VPtjXlOedy8W2MjG+NUtINIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:6e:f0:71:24:cc:b9:3a:e1:dc:11:b4:17:a4:8a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Validity
Not Before: Nov 11 15:00:41 2025 GMT
Not After : Nov 12 15:00:41 2025 GMT
Subject: CN=27617458eb37aeb9699527003fbf74be3a12f53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:62:d6:63:ed:77:96:46:84:6a:42:85:fb:
9e:12:d4:55:18:af:30:6f:64:15:9e:d4:69:f2:eb:
1a:09:1b:22:45:e2:83:43:a4:32:c0:f6:bb:60:ce:
ee:e0:9a:04:7f:37:bc:f5:2c:a8:ab:3a:bd:24:0e:
b4:d6:79:99:6d:5a:e4:f3:44:07:78:ea:fa:5f:27:
d3:c2:b9:1e:aa:b9:08:e5:4d:2e:e0:52:75:d5:77:
74:af:64:14:99:75:38:d7:8f:cf:93:b4:ad:71:c1:
5a:2f:eb:6e:77:ad:30:7a:b1:0d:96:fa:ec:54:8a:
85:18:94:92:ad:03:e7:a3:db:d6:1e:19:f0:4a:4d:
e8:8b:1a:a6:42:1f:08:b4:f5:d0:76:56:e0:c5:70:
79:7a:33:fe:1d:6f:bf:31:38:4b:a6:0e:65:18:7e:
1c:62:e7:d6:e0:6e:a0:62:9a:6d:2a:1e:a6:fc:4c:
7b:1e:03:79:26:4a:32:96:0b:d2:5e:bc:35:5a:40:
90:17:d4:00:1c:90:5f:ea:b0:f0:b8:03:6a:00:5b:
a4:d5:22:f7:cb:d5:02:de:90:96:35:49:ba:70:ab:
f6:db:7e:a8:d9:f8:65:6d:26:4e:f0:ac:e0:2d:91:
68:f8:c3:e7:ae:b7:0b:dd:95:c1:a1:11:2f:f1:48:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:61:74:58:EB:37:AE:B9:69:95:27:00:3F:BF:74:BE:3A:12:F5:3C
X509v3 Authority Key Identifier:
keyid:96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:59:9f:53:bc:de:41:0a:d7:ca:8f:09:73:9c:50:f5:dc:11:
63:38:0a:ff:2e:9a:86:dc:f6:6e:eb:ea:d5:3c:68:ba:0f:b2:
0d:cb:ac:36:e5:5c:3a:c5:8a:9c:a7:00:93:b9:2a:4f:b0:82:
48:af:0a:2b:e8:5e:32:75:57:e9:80:6c:32:0d:7e:b1:8a:fd:
94:07:a7:b4:75:32:01:74:70:59:6b:29:9e:79:c2:a6:98:6e:
60:a1:8e:d6:8e:13:f3:72:2a:5e:00:f0:f8:8b:e8:fd:75:9c:
b6:c6:3f:17:3d:d2:c6:4e:3d:77:be:b1:c6:ae:cf:c6:67:d1:
4d:1b:34:b6:ec:aa:c5:be:3e:62:2b:8c:f2:da:28:19:7b:91:
bb:82:f5:82:bc:ec:aa:61:d2:f2:5a:9a:8a:a3:1b:9b:84:b2:
ae:84:b8:ba:7f:fa:4e:61:ae:9d:f7:9b:7e:87:e6:9b:f2:88:
7b:bb:b6:00:65:86:6c:e1:a5:ff:ed:0d:58:94:38:b7:6c:31:
f9:21:6e:a8:46:b7:2c:dc:dd:eb:89:84:15:7d:09:81:3c:6d:
23:ee:e7:8c:10:cc:61:bd:64:85:e0:4f:15:83:34:98:ca:64:
41:9e:6f:d3:1a:b6:c1:da:a5:80:af:48:f1:f7:7a:ec:11:bc:
09:e6:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:42 2025 by rpki-client