Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier: LwSMhWMSbjYCBtFcbCXepHNOJ3tjKQQCYwSDGoIw3PI=
Subject key identifier: 13:D1:BA:96:F8:23:1E:B2:56:4B:75:05:99:40:96:CA:38:41:66:05
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 019A730114219A670115355DB1B7C9A385E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number: 1178
Signing time: Tue 11 Nov 2025 13:00:41 +0000
Manifest this update: Tue 11 Nov 2025 13:00:41 +0000
Manifest next update: Wed 12 Nov 2025 13:00:41 +0000
Files and hashes: 1: 00zUmefDnJyqqgzSdsn0MV9Tkqo.roa (hash: huADW82oDJAq5twpGQcGLwROZsWOsqN3XkZE8P766lk=)
2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: NZBpRk6YFAUzMAmvXWQNch+JQj16wxX1IidAFqQPPWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:14:21:9a:67:01:15:35:5d:b1:b7:c9:a3:85:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Nov 11 13:00:41 2025 GMT
Not After : Nov 12 13:00:41 2025 GMT
Subject: CN=13d1ba96f8231eb2564b7505994096ca38416605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:ac:75:8a:4e:87:24:a0:97:fa:7a:c6:82:
60:72:58:ac:7f:79:56:79:e2:2c:80:15:c4:9b:7f:
b3:9d:61:09:5b:8d:74:79:5f:7a:bb:72:82:32:06:
a3:a5:33:a8:b5:62:78:86:fb:a5:ee:b1:9c:2b:08:
49:00:1d:08:99:47:db:da:c1:16:8b:b3:37:b7:c1:
29:bf:72:ee:4c:50:78:92:12:dd:3e:92:a9:39:f8:
d2:46:da:43:72:3a:b8:9b:78:4c:e2:55:e7:a9:7f:
a3:08:af:08:3f:a2:2d:b9:2f:66:4f:36:88:7d:ae:
42:f5:75:f7:48:dc:8e:df:fb:a4:6b:2f:e9:fc:ea:
e2:fe:7f:63:06:3e:57:cd:f8:98:90:29:97:71:70:
23:ea:b4:70:d2:8b:71:9d:9c:d7:48:78:ea:18:ef:
fb:f3:b8:fd:4f:87:44:34:d2:73:41:0b:df:b6:82:
22:4b:da:f4:07:58:f7:b7:00:88:c2:e7:78:d8:23:
6e:63:17:53:9c:d3:5f:89:9a:0f:3e:f2:11:43:db:
82:ef:9c:15:99:d2:dc:37:c5:f9:1e:e4:18:d9:36:
28:20:c7:44:76:3c:24:79:bf:b9:2a:76:9a:18:36:
9a:43:9d:19:a7:5e:a2:43:96:c7:c3:2c:21:be:48:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D1:BA:96:F8:23:1E:B2:56:4B:75:05:99:40:96:CA:38:41:66:05
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:88:d2:72:e1:55:c2:f4:b1:3b:6f:50:ab:82:e6:67:cc:e1:
db:ad:ef:30:00:64:00:3a:a0:6b:a8:be:5c:19:fc:47:b4:38:
71:13:37:f1:a0:20:4f:77:68:89:ea:45:d5:a9:41:bd:16:e1:
00:6b:22:9a:08:c9:97:df:cd:77:38:0f:3c:5c:ce:8a:fe:68:
a8:da:77:4d:8f:fa:14:cf:b4:76:2c:16:52:cc:0e:0b:5b:90:
a7:eb:c9:ea:b2:5d:7b:2d:af:cc:ad:0e:5a:f0:9d:67:de:1f:
33:c1:3a:e4:f8:0b:43:e3:9d:17:9e:ea:b6:b5:c3:1b:4e:a5:
23:77:7f:24:46:de:21:65:db:1a:b8:fe:9c:58:fc:56:ef:40:
5f:c9:88:86:99:4a:48:92:66:01:25:29:ae:07:51:73:aa:75:
70:18:80:23:50:73:c6:85:61:58:e1:3d:07:a5:ae:d0:8a:88:
05:30:f4:27:5f:3d:0e:c2:88:82:2d:02:0e:79:65:22:9c:c5:
d5:cb:74:0e:13:b5:0b:b1:4e:e6:fe:08:e0:22:ff:a8:20:bc:
59:44:ab:4b:0b:51:a0:70:87:78:3b:d5:15:ac:5c:f8:7c:3b:
22:c1:f0:89:56:1c:a6:16:99:8a:ad:f8:6b:5b:f1:51:bc:4e:
59:0d:5c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:17 2025 by rpki-client