Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
File: LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft (raw, json)
Hash identifier: ljfc8xl5nAWOiV0BHSZGxnDqymsl4fPtd0RTt/MBfmE=
Subject key identifier: 05:32:6C:0A:9F:21:B1:5D:7B:1E:F4:61:21:D9:2D:40:03:16:61:EB
Authority key identifier: 2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2
Certificate issuer: /CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2
Certificate serial: 01992367B8BB3B2403CE3030028994ED88ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
Manifest number: 2D
Signing time: Sun 07 Sep 2025 09:00:23 +0000
Manifest this update: Sun 07 Sep 2025 09:00:23 +0000
Manifest next update: Mon 08 Sep 2025 09:00:23 +0000
Files and hashes: 1: LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl (hash: 4CakpcJmFEMnltL5kylxf/KdsDH1z5jbowxCHEZOOPc=)
2: vFgo2fcMFH1qOUYrkjlx17yCv1M.roa (hash: 2YQo4Uqir13EMfjJ9TnN1NRVWIzLXUPu2su8ibLa58Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:b8:bb:3b:24:03:ce:30:30:02:89:94:ed:88:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2
Validity
Not Before: Sep 7 09:00:23 2025 GMT
Not After : Sep 8 09:00:23 2025 GMT
Subject: CN=05326c0a9f21b15d7b1ef46121d92d40031661eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:c0:83:34:51:b1:63:ca:1a:a4:b9:79:f6:
4d:77:33:bb:97:3d:74:4d:58:7b:31:bb:87:91:99:
ec:97:45:5f:d1:f1:69:8d:19:7b:c6:75:e3:a7:6f:
10:7e:ad:8d:1c:f6:43:7f:8c:02:a0:06:5c:93:0e:
5b:84:cf:79:6b:ce:11:e2:dc:66:2c:94:5c:d1:1f:
0c:e3:3d:49:ba:8a:dd:72:22:26:c3:c9:4d:05:2a:
d7:af:98:1c:c9:6a:7d:63:94:23:c1:92:7f:85:c7:
6f:6e:69:51:0f:98:a3:b2:91:e4:69:88:6b:b7:aa:
f9:eb:5c:f4:02:aa:fc:7f:0a:0e:09:f4:ca:c7:1d:
d7:b8:4f:58:a0:0b:bb:23:14:c5:23:dd:65:a4:33:
b6:02:0b:87:3c:a7:94:60:57:04:05:1d:12:d7:95:
a2:46:d7:71:b8:88:da:ec:e0:01:43:cd:76:c6:5a:
3a:e7:cf:23:62:bf:d9:9e:d0:38:4b:ef:a8:9d:d1:
ba:93:b3:54:d9:0c:9a:a3:6f:ef:77:bc:d1:65:60:
06:4c:df:f9:6a:6a:45:a7:66:eb:84:eb:7d:09:7f:
6b:f1:b6:ce:4f:08:d5:4e:1a:19:02:d8:4b:fe:e2:
86:88:69:2d:54:0c:63:2f:63:75:f8:68:2f:86:5e:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:32:6C:0A:9F:21:B1:5D:7B:1E:F4:61:21:D9:2D:40:03:16:61:EB
X509v3 Authority Key Identifier:
keyid:2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:45:0b:26:a5:c4:26:dc:7e:a3:20:37:88:30:f5:80:1e:a7:
dd:23:64:91:57:71:ec:e4:ef:4e:d9:d3:5e:cb:85:cd:9a:42:
ec:3e:23:18:3f:41:58:97:01:ab:f3:e1:a1:e2:e2:38:58:ac:
c6:46:66:7d:e8:36:d7:78:86:82:3c:cf:11:43:aa:c2:9f:60:
df:1c:18:d1:2e:ea:f7:3d:ae:d1:b3:e6:54:ff:9d:7b:6b:20:
c5:02:52:87:fa:d6:ec:a0:e4:87:c8:fb:16:3f:2c:bd:6c:54:
d7:6c:64:a3:54:be:9e:6a:fd:86:33:ac:51:a1:92:35:35:21:
5c:40:c9:6a:d1:c3:c5:6d:ed:31:72:a1:2e:1e:5a:97:4c:11:
e2:3f:97:e1:92:de:ab:e4:37:88:2c:ea:97:cf:35:1c:56:3f:
7b:97:24:7d:b5:ee:5e:9b:ff:b3:e4:ae:35:f3:4b:4b:85:cf:
7e:bb:f8:ad:e8:ac:1f:c4:c0:b4:22:73:11:cc:7f:d3:41:0c:
38:9d:f1:97:37:d8:68:ce:2a:c5:e3:ca:d1:b8:77:24:53:85:
cc:74:b2:ef:6e:8b:fd:3b:24:60:94:35:b9:7a:05:f5:c8:21:
b0:d2:7b:43:9c:7d:97:27:4f:d4:cc:9d:02:34:2d:5a:68:d9:
ea:92:11:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:52:05 2025 by rpki-client