Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier: DJblRJKYP9FYnBAoxnw9WjyIZDvF/Jz39fKbQHXl5UM=
Subject key identifier: A9:33:8B:82:76:F1:D0:31:83:76:19:D7:C2:17:A9:D2:CB:B9:7C:F7
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 01991763BED239140A7B19BAE18A70D37E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number: 10C4
Signing time: Fri 05 Sep 2025 01:00:36 +0000
Manifest this update: Fri 05 Sep 2025 01:00:36 +0000
Manifest next update: Sat 06 Sep 2025 01:00:36 +0000
Files and hashes: 1: 00zUmefDnJyqqgzSdsn0MV9Tkqo.roa (hash: huADW82oDJAq5twpGQcGLwROZsWOsqN3XkZE8P766lk=)
2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: NQiX1cH9GbH3VNY65Npu1T4yRrO9VLIV67JMJQDQ9bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:63:be:d2:39:14:0a:7b:19:ba:e1:8a:70:d3:7e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Sep 5 01:00:36 2025 GMT
Not After : Sep 6 01:00:36 2025 GMT
Subject: CN=a9338b8276f1d031837619d7c217a9d2cbb97cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:85:a2:b4:e5:ed:d8:3a:53:a9:82:58:0f:
82:f1:c1:ee:95:b4:0a:e6:7e:a6:71:75:a7:6f:a5:
d4:01:eb:34:e1:98:fb:e3:9c:02:7f:48:da:8d:fa:
7a:f7:20:17:ee:18:7a:bd:c7:a1:7d:eb:c0:13:67:
d6:6c:02:b8:40:8a:11:fe:3a:b6:fe:e3:db:1f:0e:
33:2e:03:8d:43:81:62:5e:6d:03:d6:b8:b8:30:ef:
81:29:0b:5a:ef:51:5a:17:24:b1:81:ea:ae:13:19:
1b:6a:65:06:3d:17:e8:83:3d:cd:bb:e4:65:a1:7c:
2d:2c:87:a9:58:d9:f9:76:d1:3b:49:7e:51:e9:c4:
00:8a:a5:c7:a2:d3:b2:11:6b:10:85:72:9e:3e:d0:
fd:93:ac:ea:23:fd:ec:af:36:79:5f:cd:44:7f:eb:
aa:2d:cb:8e:4a:4a:a1:51:45:46:95:0d:a4:81:12:
95:81:88:79:c3:f8:55:2b:08:8e:a9:66:f5:55:17:
30:d7:dd:6c:66:13:d9:23:e5:b6:26:b3:f1:70:20:
3d:d0:0c:da:30:6b:99:7d:d3:16:1a:c4:69:92:08:
a3:05:66:f2:1c:eb:2d:06:24:fc:fe:17:aa:ea:bc:
1c:24:1f:9a:40:b5:9a:a9:f9:b5:0c:f4:5f:5b:2a:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:33:8B:82:76:F1:D0:31:83:76:19:D7:C2:17:A9:D2:CB:B9:7C:F7
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b8:29:d5:dc:ba:a0:94:b5:77:32:0b:9e:1b:ac:c8:bd:95:
ee:2e:fb:c7:41:e8:98:d1:e2:c4:0f:8d:a5:b2:20:82:69:e6:
2f:45:0b:35:5e:0e:ae:c1:38:22:4a:6c:f4:53:76:ec:aa:30:
1c:cb:53:59:77:15:a9:38:7d:d6:8b:40:a6:e3:a5:52:d8:ed:
2b:b5:25:95:8a:ab:70:82:9d:de:0c:65:92:39:c8:e6:fd:24:
04:0a:3c:4d:9a:6c:c0:17:3e:76:0f:bf:11:fd:4b:3d:58:13:
96:dc:3d:ae:75:ea:ca:b1:45:c9:58:86:57:55:13:9d:0f:8a:
de:b2:32:7c:8e:a6:65:6e:bc:ae:1e:00:a1:77:cb:9c:4f:46:
98:e1:04:4f:3d:f3:fd:a1:36:99:7b:02:f9:33:93:f2:b2:38:
a1:f9:17:18:a8:0d:f7:07:f4:44:32:7a:17:32:46:a4:14:7d:
3c:af:a0:ae:b6:f9:58:69:13:ff:b3:de:50:80:fa:fe:ab:3c:
22:95:30:da:d8:c1:af:2d:e3:ec:f9:5e:ce:55:dc:24:af:cf:
5b:58:eb:3f:ae:d4:f1:f9:04:f5:80:b6:af:96:32:41:6b:7b:
f7:2d:f8:23:a8:55:17:b3:22:67:bc:b0:b3:8f:1f:e1:4a:8c:
10:f0:b5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:11 2025 by rpki-client