Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
File: LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft (raw, json)
Hash identifier: 3dWcU2ySJmdW2SW/G4Hcsru1Qi/eMmHr/7j2OtvQryg=
Subject key identifier: C4:D4:F8:A5:8B:97:8F:31:E3:09:C5:31:12:0B:22:A4:88:EA:16:D7
Authority key identifier: 2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2
Certificate issuer: /CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2
Certificate serial: 019A718095C097BEDF81DCDEE289B7B0FE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
Manifest number: DA
Signing time: Tue 11 Nov 2025 06:00:43 +0000
Manifest this update: Tue 11 Nov 2025 06:00:43 +0000
Manifest next update: Wed 12 Nov 2025 06:00:43 +0000
Files and hashes: 1: LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl (hash: PDV/oikjsSsSpLDR4NI8oCYWTAeAqcqGb92sShscpI0=)
2: vFgo2fcMFH1qOUYrkjlx17yCv1M.roa (hash: 2YQo4Uqir13EMfjJ9TnN1NRVWIzLXUPu2su8ibLa58Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:95:c0:97:be:df:81:dc:de:e2:89:b7:b0:fe:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2
Validity
Not Before: Nov 11 06:00:43 2025 GMT
Not After : Nov 12 06:00:43 2025 GMT
Subject: CN=c4d4f8a58b978f31e309c531120b22a488ea16d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:f3:97:7c:6b:4e:ec:39:52:a1:a2:33:55:
8f:29:f7:45:ec:e5:2c:d5:0b:d2:59:9a:d3:b4:3a:
bd:de:58:47:3f:33:72:bc:07:ee:2e:79:39:ef:19:
eb:e2:16:4e:b3:f3:04:71:39:11:70:19:61:c5:1a:
ce:4c:fb:9c:78:ec:60:0f:fa:da:f1:78:c3:35:a6:
20:1e:bd:7e:8c:c0:a7:64:df:f7:65:2c:3d:fd:e6:
74:7f:09:7e:4e:f5:b4:d4:c7:e3:1a:53:5d:ea:b0:
86:ef:09:8f:f9:00:a1:65:be:7d:8c:84:4d:83:b3:
76:ed:1e:6b:24:3f:66:2a:96:b5:a8:c4:8d:70:4d:
57:26:b8:22:a8:d5:35:8b:45:1d:43:3c:2c:b7:26:
7c:21:d5:d6:92:63:ff:07:c5:1b:3f:e1:09:2b:65:
42:0e:64:f0:db:2b:2e:64:0d:01:ac:bc:c0:0a:6a:
c9:b1:34:56:7a:9f:17:ea:a7:f8:a9:fb:7d:b6:27:
12:f0:d4:e0:31:4a:79:aa:e3:f7:c1:85:12:9b:3b:
c9:a4:7b:03:fd:b2:39:31:0c:fb:9e:c8:48:b7:f6:
0e:3d:9f:58:bf:c0:db:81:c3:14:2c:2e:aa:b2:03:
2a:76:be:ba:ab:6a:ef:97:55:59:a3:a7:76:bc:89:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D4:F8:A5:8B:97:8F:31:E3:09:C5:31:12:0B:22:A4:88:EA:16:D7
X509v3 Authority Key Identifier:
keyid:2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:fd:b8:d6:9b:ed:1a:69:ee:42:21:fc:d4:95:7b:75:25:c3:
fe:6e:63:99:6f:0e:54:f6:6e:c8:c4:8e:50:c0:7f:e5:33:64:
0e:4c:ec:ff:2f:e2:b2:9f:4d:fd:e9:86:62:0a:10:85:b9:15:
75:4c:04:d4:76:83:06:15:b2:dd:ed:2a:0c:50:10:b9:3f:7d:
17:75:e4:42:51:eb:55:1a:d5:71:38:99:11:91:e6:5c:e4:3e:
3b:51:a2:86:b6:4c:0f:a9:a0:7d:03:88:75:7c:7e:38:01:25:
3f:8c:9f:0a:10:90:b6:91:f2:ec:57:c3:21:30:30:2e:c0:ba:
c1:00:9d:17:33:69:ea:c1:22:db:b9:2b:93:d7:97:6a:db:c1:
40:04:20:51:c5:36:89:d9:cf:b5:ca:93:12:eb:fb:cb:2d:eb:
6f:36:73:75:6c:43:47:85:24:c9:69:db:d5:29:d6:88:9f:18:
ac:16:0b:ab:ae:ca:cf:16:9e:d7:fd:59:c4:1b:00:7e:f1:4c:
9d:05:af:41:f4:10:13:92:cb:ad:fb:d3:5d:b1:e9:b7:1d:ab:
af:09:e1:fb:1a:ef:84:1b:db:1c:b8:ca:15:46:57:0d:8e:18:
94:08:77:80:bb:14:13:67:e1:90:82:ba:6e:6e:e5:56:0a:8a:
8d:b5:83:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:19 2025 by rpki-client