Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
File: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft (raw, json)
Hash identifier: 6ykSC0clQT1BjdUP5L5p9oZedGXNb/wzVt5lUB5y7Fs=
Subject key identifier: B6:80:14:D6:22:97:E2:05:BD:77:F5:D1:45:33:1F:47:52:74:DE:AF
Authority key identifier: 2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
Certificate issuer: /CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Certificate serial: 019A29679397360E23E30840D4DBAEC1A4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
Manifest number: 062F
Signing time: Tue 28 Oct 2025 06:00:45 +0000
Manifest this update: Tue 28 Oct 2025 06:00:45 +0000
Manifest next update: Wed 29 Oct 2025 06:00:45 +0000
Files and hashes: 1: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl (hash: VgAWnizyQrzQEKZEz1LF3WYPs1sDxhnf0o4Qq4/7Idw=)
2: sL3129FsiQ9EOiD-6Y-oRWZ0HUI.roa (hash: OeP8VcF7txOpzsrTuc07O34NirN/Zqlu2vZ40ZPG7ls=)
3: vnYIdpkDdS6bRMveVXglLZHbY50.roa (hash: RbsMHBbR5PlZx+oytvnpiwybpf9Mt1fYmOVDql1MbsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:93:97:36:0e:23:e3:08:40:d4:db:ae:c1:a4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Validity
Not Before: Oct 28 06:00:45 2025 GMT
Not After : Oct 29 06:00:45 2025 GMT
Subject: CN=b68014d62297e205bd77f5d145331f475274deaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:ae:c8:ce:c6:76:1c:8b:5e:df:ee:5b:21:
da:1b:3b:ed:44:51:0d:42:5c:55:1c:a1:8f:e6:e7:
86:44:56:19:4b:33:d8:0b:80:b7:65:3f:09:18:35:
cc:12:b6:f6:27:fb:af:46:c0:dd:9e:39:08:45:94:
0c:5e:b7:da:75:ed:e2:d0:e6:45:53:16:ae:38:84:
3c:75:3a:5c:df:84:fb:fe:3b:d2:61:dc:dd:8b:81:
d7:9b:df:c3:5d:d7:9b:42:d0:e5:fd:f8:0e:54:34:
e9:48:53:35:a9:b4:fb:04:33:d2:d9:90:cd:e2:e2:
fc:08:ee:42:32:93:8c:28:9e:e2:f7:ab:0f:a9:df:
a1:d5:d7:91:fc:d2:43:3d:a4:09:33:06:37:48:e6:
f3:45:3f:5e:68:41:86:6d:e6:4b:d7:01:a9:58:4e:
70:0e:61:1b:29:24:5c:3a:ee:54:99:80:48:9b:eb:
f7:0e:81:ff:1f:2d:42:1a:65:6a:7d:19:04:ca:52:
6a:5d:af:57:8a:72:2d:b3:df:4e:56:5a:53:98:58:
3d:a7:d2:7c:a5:ef:b2:8a:db:66:d2:19:c5:3b:00:
8d:5a:17:ef:66:b7:c1:f9:17:bb:34:12:70:0a:34:
e3:c4:08:65:4d:f9:4d:59:e7:77:e1:73:69:2e:79:
10:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:80:14:D6:22:97:E2:05:BD:77:F5:D1:45:33:1F:47:52:74:DE:AF
X509v3 Authority Key Identifier:
keyid:2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e6:89:41:4c:6a:17:a0:5b:a6:05:61:f2:6b:9f:df:95:ff:
71:62:23:0a:0c:ae:6c:33:09:08:be:87:bd:62:32:8d:91:44:
cd:cc:f2:13:2f:54:65:95:be:0e:d0:73:06:e5:c4:a7:1f:03:
d7:25:42:95:28:5d:bc:a1:aa:b6:ee:bf:f0:b9:74:40:d4:a8:
a1:70:90:c6:48:bb:b1:06:bd:7d:dc:b2:1b:1d:aa:ff:6c:c7:
b4:de:84:03:a6:f3:d9:a7:f6:82:c5:07:88:31:95:f4:10:82:
d2:72:07:d0:fb:bd:2d:b5:64:ef:e6:08:ef:df:f4:a4:45:66:
24:71:e2:6e:c6:7c:93:06:1b:df:c3:4f:29:d4:dd:6b:75:68:
f1:37:55:6b:1c:5e:e0:82:0c:06:c5:f5:b8:cb:6f:6c:55:1b:
5d:da:3b:4a:c0:d2:72:90:85:40:1d:c8:26:63:bc:11:70:31:
4c:a4:35:d8:15:aa:87:96:0a:88:b9:7c:62:98:d3:e4:b9:99:
0a:9e:bb:28:5c:9f:2a:eb:c1:0a:c5:e5:e6:2b:19:d1:f8:40:
c1:2d:3b:72:37:a7:29:77:f6:a4:82:cc:56:49:ca:7d:0e:21:
45:f9:92:35:3c:f1:cf:b4:2f:51:2e:f6:5a:a1:a4:5e:6a:28:
65:e8:1a:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopZ5OXNg4j4whA1NuuwaSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNThiNmJlOWM2YzAzM2IzYjEyNmYyNzdkMDJiYzA1NDQ5
OWZjZmIwHhcNMjUxMDI4MDYwMDQ1WhcNMjUxMDI5MDYwMDQ1WjAzMTEwLwYDVQQD
EyhiNjgwMTRkNjIyOTdlMjA1YmQ3N2Y1ZDE0NTMzMWY0NzUyNzRkZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sWuyM7GdhyLXt/uWyHaGzvtRFEN
QlxVHKGP5ueGRFYZSzPYC4C3ZT8JGDXMErb2J/uvRsDdnjkIRZQMXrfade3i0OZF
UxauOIQ8dTpc34T7/jvSYdzdi4HXm9/DXdebQtDl/fgOVDTpSFM1qbT7BDPS2ZDN
4uL8CO5CMpOMKJ7i96sPqd+h1deR/NJDPaQJMwY3SObzRT9eaEGGbeZL1wGpWE5w
DmEbKSRcOu5UmYBIm+v3DoH/Hy1CGmVqfRkEylJqXa9XinIts99OVlpTmFg9p9J8
pe+yittm0hnFOwCNWhfvZrfB+Re7NBJwCjTjxAhlTflNWed34XNpLnkQWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaAFNYil+IFvXf10UUzH0dSdN6vMB8GA1UdIwQY
MBaAFC1Ytr6cbAM7OxJvJ30CvAVEmfz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZpMnZweHNBenM3RW04bmZRSzhCVVNaX1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zNzk4ZDItMjhmMi00YjE4LWExN2Mt
Y2I4NmRiMzUwOTMxLzEvTFZpMnZweHNBenM3RW04bmZRSzhCVVNaX1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zNzk4ZDItMjhmMi00YjE4LWExN2MtY2I4NmRiMzUwOTMx
LzEvTFZpMnZweHNBenM3RW04bmZRSzhCVVNaX1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxOaJQUxq
F6BbpgVh8muf35X/cWIjCgyubDMJCL6HvWIyjZFEzczyEy9UZZW+DtBzBuXEpx8D
1yVClShdvKGqtu6/8Ll0QNSooXCQxki7sQa9fdyyGx2q/2zHtN6EA6bz2af2gsUH
iDGV9BCC0nIH0Pu9LbVk7+YI79/0pEVmJHHibsZ8kwYb38NPKdTda3Vo8TdVaxxe
4IIMBsX1uMtvbFUbXdo7SsDScpCFQB3IJmO8EXAxTKQ12BWqh5YKiLl8YpjT5LmZ
Cp67KFyfKuvBCsXl5isZ0fhAwS07cjenKXf2pILMVknKfQ4hRfmSNTzxz7QvUS72
WqGkXmooZegaTg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:02:54 2025 by rpki-client