Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier: DXNspPJS7EPQjrm20XdSXiQKUaek6HZGL8hdNZW3hK0=
Subject key identifier: 64:B2:38:46:F0:A2:39:7D:15:19:D2:0E:CD:F3:4D:5E:26:FD:70:2E
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial: 019A70A569716BFB18824B06AD65F1F9B959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number: 0994
Signing time: Tue 11 Nov 2025 02:01:19 +0000
Manifest this update: Tue 11 Nov 2025 02:01:19 +0000
Manifest next update: Wed 12 Nov 2025 02:01:19 +0000
Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: PcAbkAylpPhmW3chJFbCfZioP4dNNuoJsRSQ9MXYABI=)
2: yyEfKYzfWifnZltk7ctCY5A-44M.roa (hash: Bx/CCORj4vVt+Qie6xpQv8J6eghjTLCeuziTvvg5CUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:69:71:6b:fb:18:82:4b:06:ad:65:f1:f9:b9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Validity
Not Before: Nov 11 02:01:19 2025 GMT
Not After : Nov 12 02:01:19 2025 GMT
Subject: CN=64b23846f0a2397d1519d20ecdf34d5e26fd702e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8e:13:f3:6d:10:2c:fa:d4:00:7e:e1:76:71:
bb:d7:05:5e:55:70:7a:1e:c8:f0:12:80:db:96:d9:
a1:68:88:98:0e:e8:3c:46:b4:e8:d9:d3:dd:a2:37:
6a:23:f6:a1:a9:2c:73:06:08:30:b1:40:6d:5b:ba:
35:0d:b5:e0:f6:73:a7:e0:96:c8:9b:ae:8b:46:43:
ac:7e:5d:d4:4c:52:51:e1:68:0b:b5:1d:0a:be:93:
29:50:c9:e4:ea:8c:c5:8e:06:e4:39:da:b5:e8:9b:
ca:18:e9:ed:46:f2:ab:19:c4:24:89:af:62:b0:6a:
03:55:01:6b:76:0c:6c:3b:1b:eb:cd:98:fc:79:fa:
75:db:a7:af:89:39:4f:2b:f7:46:32:e8:5f:25:a6:
51:1a:83:6a:41:43:c9:dd:4e:81:72:72:ea:09:62:
50:34:6b:99:88:42:33:12:f5:45:b3:f9:bc:20:b0:
10:2e:d6:cc:7c:8c:92:5f:be:43:d6:c0:76:67:83:
fe:61:7f:86:a0:bd:78:28:04:ef:7f:d0:de:97:92:
67:ce:e0:fa:d4:c0:58:fa:c2:00:6f:6d:0a:8f:a8:
d2:c9:9f:68:32:19:b9:56:8f:12:4c:f9:3f:95:c7:
38:d6:2d:b1:60:57:0d:7b:3d:47:f8:ef:cb:a5:d1:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B2:38:46:F0:A2:39:7D:15:19:D2:0E:CD:F3:4D:5E:26:FD:70:2E
X509v3 Authority Key Identifier:
keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1a:c7:8d:6b:41:2d:6b:e2:a8:d1:c7:a4:9e:ce:94:73:f7:
ca:3c:be:7f:45:a4:84:ff:22:06:2e:af:e4:60:2f:e5:11:c2:
67:1a:a5:12:de:5c:37:2a:ac:56:0d:13:de:51:d3:7c:4a:6d:
19:00:8a:e5:4e:62:ad:e7:00:b6:c1:e2:b7:2e:3b:b8:77:46:
ca:1d:2b:10:69:9c:92:ee:9e:ae:0d:6b:e6:de:e4:22:17:57:
cc:88:e5:b5:37:e2:23:01:38:a9:63:bc:3a:de:a9:15:e4:b1:
4d:50:4d:2d:0d:7f:e0:6d:0d:01:0e:9d:b2:b7:9d:0b:eb:fc:
a0:ed:9f:88:88:39:23:4d:11:5e:8c:f2:c7:b1:89:aa:ff:3f:
ac:85:44:58:a8:22:6b:a4:f0:42:9c:91:14:3e:3c:c7:a3:f3:
18:74:0c:e8:ae:b6:4d:82:50:00:5e:43:61:fd:92:5c:51:b5:
5c:7c:c0:ab:e5:6d:01:da:09:5b:4b:a5:43:16:93:3e:a3:bc:
39:de:90:37:8e:62:fb:ff:de:0a:87:4e:6a:95:40:9f:e6:70:
84:63:f2:c9:41:61:f6:c1:2d:9a:bc:0d:b7:9e:1d:08:9e:41:
51:41:db:7a:55:d3:e4:b7:50:98:9b:ca:2e:9a:0f:7f:34:8d:
3d:8c:3b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:12 2025 by rpki-client