Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
File: lrvRv8ovihV4-qtbEMD8NVVhzGU.mft (raw, json)
Hash identifier: BsDYbkfxu6B9HKtunnHxwc2aHIbic7BywrJzNSEKZts=
Subject key identifier: 90:06:4F:A4:02:CD:FD:DA:47:13:8F:B6:C1:72:40:02:C4:EF:CF:8D
Authority key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
Certificate issuer: /CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Certificate serial: 019A29D54BB6B26CA5CFCC5FEFD7BD7E2C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
Manifest number: 0691
Signing time: Tue 28 Oct 2025 08:00:35 +0000
Manifest this update: Tue 28 Oct 2025 08:00:35 +0000
Manifest next update: Wed 29 Oct 2025 08:00:35 +0000
Files and hashes: 1: lrvRv8ovihV4-qtbEMD8NVVhzGU.crl (hash: qT4WZeLRVEkewS5FOQ3rxDxyVTjf7MazUJdNkXPYgHI=)
2: t9Y7BeYu12mZq7yxIRtEySM1Rtc.roa (hash: pHqieJKSJe/cYuypW4oPbapHkZUvdCP0qK0tLzbxp4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d5:4b:b6:b2:6c:a5:cf:cc:5f:ef:d7:bd:7e:2c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Validity
Not Before: Oct 28 08:00:35 2025 GMT
Not After : Oct 29 08:00:35 2025 GMT
Subject: CN=90064fa402cdfdda47138fb6c1724002c4efcf8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:7a:cb:fd:85:47:58:00:98:83:b3:b2:ea:
44:b7:15:a3:10:48:9c:da:2f:bf:67:47:be:75:3f:
d0:69:65:25:ea:42:e7:98:09:76:16:81:2d:50:86:
5d:8d:6c:4d:7f:12:77:e8:7e:54:cc:70:c7:f5:a6:
d1:74:80:de:c4:6b:f6:29:01:4e:af:41:db:71:fc:
38:9b:85:3b:b0:aa:54:bc:58:2c:39:2c:8e:92:04:
bb:62:cc:33:e2:ec:51:e4:ba:17:7e:8b:5f:d0:68:
6e:55:48:d0:ea:19:0b:c2:61:a9:83:44:e6:c1:a6:
90:62:5b:65:95:fc:b5:6c:ad:70:b5:81:67:17:88:
99:03:25:5c:9a:ab:f1:78:90:b7:b9:d6:1b:52:b1:
fe:3b:78:69:5e:d9:14:a8:3f:3f:44:7f:05:56:c2:
3b:7a:d6:99:c9:ff:29:c9:0e:7e:b3:c3:6a:5e:12:
80:c0:a0:2c:1c:50:15:dd:e7:b1:6a:f4:c1:4a:de:
5b:eb:24:7d:f3:8a:cb:13:5a:92:d2:eb:7f:4e:b1:
ba:15:1c:e8:36:22:52:c2:07:9a:90:6f:6b:11:01:
aa:05:1a:a3:72:c4:6f:7e:00:52:d1:d5:5b:cb:c3:
a2:79:90:52:84:b4:e8:7f:c2:9d:b5:11:42:36:1a:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:06:4F:A4:02:CD:FD:DA:47:13:8F:B6:C1:72:40:02:C4:EF:CF:8D
X509v3 Authority Key Identifier:
keyid:96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:24:b8:6d:df:54:69:da:93:06:ec:83:b7:aa:7a:ee:0d:b3:
de:23:c7:d8:3f:67:d5:eb:71:49:a9:6f:1c:24:e0:93:c2:1b:
0d:c5:30:be:6c:63:17:70:ee:8c:3b:78:dd:82:76:cb:c8:89:
ed:d6:a8:ed:6d:3b:84:8d:3d:f8:37:60:52:85:86:10:36:90:
71:45:8b:26:d4:22:c9:cd:2e:db:67:67:44:ef:dc:ac:96:c0:
ed:0d:ad:b7:a5:ab:c9:2d:3d:8f:a1:7e:e6:c7:9d:ed:f8:94:
25:a0:eb:e1:3a:b5:3b:db:14:85:b6:b3:0a:32:60:43:4d:a4:
b7:98:8e:a9:0d:f9:94:3a:56:66:21:f3:b7:2f:5a:f8:bb:72:
17:d2:47:75:ad:cc:c7:bc:7a:46:00:4a:1c:b1:f0:34:38:8c:
3a:eb:d8:28:f1:48:cc:d5:69:bb:93:29:6f:c9:60:02:5b:50:
2e:c8:41:00:51:95:f4:fa:d1:48:1c:43:dc:9e:85:7e:7c:69:
44:f3:76:04:3d:ee:e6:6c:55:28:f1:77:42:b9:5d:5f:91:52:
37:7b:7f:e8:43:df:3b:0e:5c:fb:64:80:14:42:5f:d6:a2:0d:
af:79:26:7d:5a:15:53:f5:e2:b5:84:82:d0:12:b0:15:ff:c2:
ab:50:83:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:09:13 2025 by rpki-client