Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier: oJGEeS8Cp5ti2w0yCrfBVVhEF4dh5oG7KtdK280b65g=
Subject key identifier: D9:53:3E:BD:69:C9:6C:FB:F0:15:45:E1:03:27:20:13:73:4F:09:B0
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial: 0199228C8EAF42BF8D4AC7E11DFED4916B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number: 08E7
Signing time: Sun 07 Sep 2025 05:01:00 +0000
Manifest this update: Sun 07 Sep 2025 05:01:00 +0000
Manifest next update: Mon 08 Sep 2025 05:01:00 +0000
Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: TWLMiuAxY2V2Ra8XuoOesiiQVKw/W45OzMPd7M7f3Ok=)
2: yyEfKYzfWifnZltk7ctCY5A-44M.roa (hash: Bx/CCORj4vVt+Qie6xpQv8J6eghjTLCeuziTvvg5CUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:8e:af:42:bf:8d:4a:c7:e1:1d:fe:d4:91:6b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Validity
Not Before: Sep 7 05:01:00 2025 GMT
Not After : Sep 8 05:01:00 2025 GMT
Subject: CN=d9533ebd69c96cfbf01545e103272013734f09b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c0:3a:4e:51:23:74:55:cc:c7:69:e1:5e:d3:
3c:2e:31:3e:19:c7:7a:dc:4b:0a:bf:c3:47:e7:71:
a1:a4:9b:d5:ed:d1:42:bf:ce:96:d4:1d:9b:cc:4f:
0e:d5:ae:5d:8d:41:a9:16:a6:56:ce:ae:5f:2b:f1:
a9:99:fe:b4:3b:3e:99:a1:06:6e:dd:3c:1a:a2:f4:
70:a9:88:78:05:21:ec:3e:7b:01:43:59:e8:e1:0d:
a8:b2:5d:15:87:35:a5:37:3f:42:85:9c:21:1d:86:
80:7a:ad:14:88:b9:98:47:4c:1b:fe:ec:6e:54:db:
d3:76:36:0f:67:28:c9:ff:55:83:e0:48:39:f7:9c:
6a:33:d1:d5:51:9d:68:b0:42:50:e2:46:85:f0:c8:
03:1c:0e:c7:cb:90:59:54:8c:25:34:ff:14:da:36:
9f:54:60:ee:7b:e5:e4:83:6d:c8:c1:24:10:ee:80:
ae:7a:6c:a9:fc:b6:87:ef:58:a3:03:95:1e:9e:b4:
48:6d:0b:32:55:3a:e4:1f:61:ac:2c:5b:34:7d:0f:
1c:fe:52:90:8d:e7:fe:73:ad:f5:46:93:1d:e2:11:
69:a3:2d:47:e8:bb:e2:9c:e3:6e:a1:40:9a:ff:b4:
41:92:26:a3:43:86:56:67:b3:fe:c3:da:d3:23:e9:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:53:3E:BD:69:C9:6C:FB:F0:15:45:E1:03:27:20:13:73:4F:09:B0
X509v3 Authority Key Identifier:
keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:71:84:59:1f:51:0b:0c:2c:98:8a:2d:29:18:d9:7c:58:c4:
cf:ef:aa:b2:c9:32:05:42:09:6e:78:7a:e3:2e:5b:62:6a:3f:
ac:25:0b:2f:bb:3b:77:e4:cd:28:20:f4:23:75:b1:84:b1:5f:
1e:a1:03:22:53:de:9b:72:e5:c2:96:a3:ae:8a:3c:7c:ab:63:
76:88:8c:77:76:61:52:ad:0d:25:a2:a5:3e:b8:eb:5e:54:47:
8c:13:95:26:fc:1d:d8:c8:dd:da:25:fe:93:a2:29:2b:5f:ea:
79:d4:c7:7c:c5:d5:87:39:93:75:51:46:22:fc:05:39:61:5b:
96:00:1e:81:5c:35:97:96:11:93:07:9a:61:0a:a0:e2:88:d0:
12:a6:6f:d9:94:6d:c0:52:d7:dd:a2:12:39:b4:36:74:58:63:
8b:5a:9e:6f:90:2b:1b:72:2c:82:fe:cd:6b:69:98:96:2c:40:
30:29:ca:5e:2e:bb:35:9c:1c:b5:7c:c9:ab:23:82:79:68:cd:
26:5f:2a:a7:bc:e1:87:65:62:c2:cb:c2:29:87:df:f6:e8:e1:
12:5a:02:49:88:54:8c:b1:91:fc:50:1b:7a:ac:e7:de:38:c7:
d5:c8:74:fd:52:39:2b:ef:fb:d2:3a:5b:2b:95:87:45:18:f6:
10:59:22:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:33 2025 by rpki-client