Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
File: LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft (raw, json)
Hash identifier: Yfn0ojw2wzu+vAJ/uO+ZmeFDZ1dPAFnHQVLqvRgbsdc=
Subject key identifier: 72:4F:25:C3:C3:C7:E6:80:99:D3:38:D3:1E:3E:EF:4B:7C:F6:D9:0F
Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
Certificate issuer: /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Certificate serial: 019A24E587C18E8ED0B275F2E66086155E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
Manifest number: 04C9
Signing time: Mon 27 Oct 2025 09:00:13 +0000
Manifest this update: Mon 27 Oct 2025 09:00:13 +0000
Manifest next update: Tue 28 Oct 2025 09:00:13 +0000
Files and hashes: 1: LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl (hash: AOo/203u6Tj7CMlcWukmJ231ezo7VILPwrPg1FW8/P0=)
2: qnFffULuZkD3WAJFMjcSjE8KLV0.roa (hash: 3RoDeJIvhLdUQNKp3436G/+SXszr4AzKvXyWP5Iyh00=)
3: wqY_ixYVjH1acrjorGcEZywYgRk.roa (hash: XpP+SvIXR1YO15boQPEoJQXvWDeccH3hUbCAlDZexo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:87:c1:8e:8e:d0:b2:75:f2:e6:60:86:15:5e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Validity
Not Before: Oct 27 09:00:13 2025 GMT
Not After : Oct 28 09:00:13 2025 GMT
Subject: CN=724f25c3c3c7e68099d338d31e3eef4b7cf6d90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:36:d1:ea:eb:e0:2b:76:c6:89:8f:37:93:
00:8e:46:9d:c4:5e:73:2b:d0:0b:84:4c:c9:a7:de:
ab:4b:20:e3:34:9f:19:63:c8:e0:f7:70:25:f5:42:
5d:06:ff:95:ec:7a:66:5f:da:49:c2:b6:2e:ed:0e:
9e:02:29:aa:23:f7:dc:b6:cc:67:20:07:ce:97:88:
33:38:84:9d:66:d0:34:d6:bf:5d:9a:f3:17:1d:bd:
61:3d:37:2d:f8:5d:4d:38:f4:6f:57:61:01:f4:6b:
02:88:16:42:1d:e8:5a:6c:ad:0d:68:c2:0e:10:ea:
f6:9d:f6:81:d6:fe:63:06:a6:45:68:13:b5:29:ed:
f6:21:b1:f4:db:c7:b7:12:60:af:22:f8:22:6b:65:
26:2e:75:be:ce:0a:28:5b:6b:6a:e8:8c:db:b7:d6:
04:98:ee:78:1d:7c:c1:b5:71:80:77:1d:c5:cf:b6:
1f:63:02:af:c8:d8:26:e0:a0:6e:f0:08:8a:18:81:
ae:0b:14:30:92:54:95:94:37:e9:d8:25:5d:87:ce:
c3:63:fe:61:0e:8b:e2:ec:57:ac:aa:12:43:2b:9a:
a1:94:0f:89:5a:c4:64:72:55:d1:54:fe:05:73:ff:
b9:cb:87:f9:e2:b6:fa:a2:38:fc:13:6a:36:6d:07:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4F:25:C3:C3:C7:E6:80:99:D3:38:D3:1E:3E:EF:4B:7C:F6:D9:0F
X509v3 Authority Key Identifier:
keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:84:61:2b:4b:44:de:d9:fd:0e:7e:48:5c:20:cc:e6:3a:15:
65:ed:ab:39:4f:2b:cd:c8:b1:e0:a0:89:b0:ca:0f:69:ed:48:
92:9d:78:97:6b:55:c2:08:7a:81:8f:18:41:f3:49:c1:e2:47:
56:38:20:cf:18:dc:e5:06:dc:cc:39:2d:dc:24:ce:33:02:d7:
7b:67:d6:19:03:c6:07:cc:b9:3c:18:8e:ea:d4:4c:f8:1b:46:
72:09:c4:ee:10:ae:62:ec:c5:7e:9b:24:5a:ed:6b:ea:d0:00:
55:7a:3b:0e:2c:09:f8:c6:ac:04:3c:20:f7:9b:aa:38:f1:cb:
76:69:90:5e:b9:10:2b:03:b6:97:9f:09:59:b8:16:22:31:26:
35:95:30:6f:ed:33:21:fd:f8:57:c7:e7:de:a0:0c:dc:2c:b7:
fa:c0:a3:34:d7:27:8d:63:42:31:43:eb:d3:a4:51:20:70:6b:
aa:60:bd:be:ff:4f:93:f4:35:77:ce:56:55:70:9d:24:f6:9f:
ec:a2:c7:67:31:83:7c:f5:ee:d7:7a:a9:27:d2:d4:db:13:c1:
05:e7:3d:07:67:48:55:3b:02:08:86:e1:7c:75:ff:42:67:42:
4a:f0:8f:a5:8b:75:d2:74:ab:d2:2f:90:93:95:04:0f:d3:30:
be:f9:94:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:02:55 2025 by rpki-client