Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier: EJy3kCzncKrl9yC7d8YxGX/LmTpiffnZyuR1AfjhB2k=
Subject key identifier: DD:2B:73:75:F9:08:2F:5D:11:15:1F:BD:FA:70:0D:16:8E:76:97:D0
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 0199643535A41877BCD6580072DDB59EF50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number: 13B8
Signing time: Fri 19 Sep 2025 23:00:32 +0000
Manifest this update: Fri 19 Sep 2025 23:00:32 +0000
Manifest next update: Sat 20 Sep 2025 23:00:32 +0000
Files and hashes: 1: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: TOyrDHBmVh6wF4fXByURZnf3Vhr4s28mXMIIFYXc4SE=)
2: _bmYfKJFyK9blFnDt5sQ68mX470.roa (hash: /IaqLo5gnKUuY45J9bE0d2C3v3+D2fXVryN2uunSGag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:64:35:35:a4:18:77:bc:d6:58:00:72:dd:b5:9e:f5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Sep 19 23:00:32 2025 GMT
Not After : Sep 20 23:00:32 2025 GMT
Subject: CN=dd2b7375f9082f5d11151fbdfa700d168e7697d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:92:7b:ea:45:1e:74:71:9a:09:92:46:2c:
a2:ff:09:a0:8f:c1:8c:7c:b6:74:a8:06:31:16:0e:
9c:21:7c:9c:d6:3d:97:a4:22:55:2e:84:ba:22:4a:
ef:fe:94:6f:0b:99:57:b1:68:4b:11:85:89:2a:06:
2e:05:16:17:80:49:e2:5e:ab:73:72:b5:33:90:57:
0b:a6:f9:16:74:44:f6:cf:4b:69:7a:57:8e:7f:b3:
18:ff:8f:c5:14:83:07:df:a6:d2:2e:d1:fa:fc:4a:
1a:02:62:71:25:b0:31:94:2a:98:b1:02:9b:05:9c:
d8:0e:66:34:32:14:1f:f6:5e:e1:48:58:a8:65:34:
d8:09:98:c8:a5:0d:59:f1:df:ec:a1:c6:78:82:8d:
bc:a9:ff:75:1c:43:62:f8:2f:d0:85:d4:ca:d2:47:
ed:bb:c0:e0:d8:66:a9:eb:05:60:90:a3:38:f3:86:
80:e3:38:fa:07:21:0a:94:73:1e:61:ce:93:af:09:
76:53:50:6f:d9:00:3e:bb:bb:2a:41:6b:36:8a:87:
0d:c4:46:b9:23:1f:f9:e3:1e:12:d8:b1:c5:3d:b2:
67:22:e6:1b:36:8b:37:c1:0e:02:4b:4f:0d:1f:39:
e8:82:b6:be:78:d9:f8:93:ee:7b:ce:7d:59:66:22:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2B:73:75:F9:08:2F:5D:11:15:1F:BD:FA:70:0D:16:8E:76:97:D0
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bf:2f:b6:b6:91:de:1f:82:b4:ed:77:8a:3b:94:1f:dd:63:
6f:d3:42:f5:e0:1a:45:71:de:73:74:55:2b:cc:9a:d1:41:3c:
d7:85:b2:93:38:bc:16:d9:82:78:e2:a9:ec:16:0f:05:9d:64:
29:de:ea:0d:42:b2:b4:c0:c2:b7:30:72:5f:3c:43:09:54:b8:
12:e1:e5:8d:bf:d4:58:65:c1:6c:36:c5:27:fa:99:8b:82:02:
a4:ff:e4:16:68:a0:4e:f2:67:ca:59:cf:3f:cf:82:1d:2f:23:
74:65:91:b7:b8:e3:19:ea:01:b7:f4:13:89:6d:e2:54:16:59:
ea:ba:64:26:ea:7e:2b:03:38:05:59:51:e5:bd:0b:73:69:f8:
3d:27:0f:71:c8:de:53:9c:6e:11:2a:c0:89:9f:66:2b:a8:d0:
35:64:00:2d:49:46:d8:7b:7b:2c:6b:e6:6e:be:7b:3e:f1:65:
5b:40:d1:50:5c:3a:91:ad:ea:53:1f:3e:74:8b:d2:cc:fe:b9:
ea:3c:c0:9c:76:77:c5:37:18:3c:69:7b:c3:d6:c2:61:a5:fb:
e7:da:70:04:e2:18:f9:1f:55:04:69:65:e3:4f:59:95:32:3e:
96:b4:31:37:ad:71:23:31:7b:7a:20:85:46:a7:a2:38:35:5c:
f8:ec:3f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 07:34:15 2025 by rpki-client