Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier: 4Cxyo81gpWrLV+DjIp3taM9MoTslMHTBsLb5gTNia2A=
Subject key identifier: B2:F3:2E:AC:47:5E:E1:30:FE:D4:F3:37:3C:EA:E9:A1:A8:6A:C7:61
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial: 019930B5C30FBD9DD6D3B82E16F32681279C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number: 10AB
Signing time: Tue 09 Sep 2025 23:00:42 +0000
Manifest this update: Tue 09 Sep 2025 23:00:42 +0000
Manifest next update: Wed 10 Sep 2025 23:00:42 +0000
Files and hashes: 1: Glr6u_s5CXtQU33JFdKRNodC1Uw.roa (hash: xJAriWKl+PmbnYJ4BpPrX2q/YRb7AyfnBhDH2V2YYdU=)
2: UpeD63AhvaLPHL7cT3GFojz3Ckk.roa (hash: mEkJtV27z/pufpdRebXs4QzlDSFPeuvtLb6yKnLyJS8=)
3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: 2U72WT0xPTC++CVfx8tRhqIkDsBMaaZWAQ4GxJ/N42Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:b5:c3:0f:bd:9d:d6:d3:b8:2e:16:f3:26:81:27:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Validity
Not Before: Sep 9 23:00:42 2025 GMT
Not After : Sep 10 23:00:42 2025 GMT
Subject: CN=b2f32eac475ee130fed4f3373ceae9a1a86ac761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0d:02:87:c0:f9:1a:24:fe:32:19:43:08:74:
fb:24:ea:f6:de:73:68:d2:b3:b1:8d:39:c7:39:a1:
5a:5f:e4:e2:f3:c1:84:d4:74:50:88:01:35:2b:b6:
5d:33:02:77:ee:e8:24:0e:05:a9:94:4b:1e:b7:f5:
b8:06:77:7e:74:58:6c:30:13:43:fe:d1:06:dd:eb:
19:ab:97:5e:e4:eb:8b:9b:50:a2:bb:f7:f0:63:6e:
01:98:49:14:e6:b4:0b:31:e2:cc:43:57:e0:0f:8c:
3a:b3:ed:96:e9:68:0c:c3:54:af:78:75:70:3f:61:
ff:80:ea:e1:60:54:02:ee:3c:52:eb:f4:4b:b6:50:
f3:bf:1f:10:0a:28:dd:f9:ff:d2:ae:62:f0:e3:78:
50:e0:86:42:88:4b:c3:c3:48:59:86:29:db:4e:7e:
9c:5f:4a:cf:ef:5c:fe:64:9a:1a:94:f4:21:41:65:
55:dc:33:3a:e2:30:27:58:bd:08:f3:0d:04:e0:2b:
87:93:58:ab:e9:16:92:19:0c:71:e1:f0:63:80:9a:
7f:74:b7:cf:b6:13:c2:9e:e9:b0:a0:dc:eb:39:5a:
da:5b:46:10:87:8d:a8:25:f9:96:a4:8b:26:04:63:
66:a9:4f:72:e5:8e:13:b9:f8:d2:70:7b:fd:95:66:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F3:2E:AC:47:5E:E1:30:FE:D4:F3:37:3C:EA:E9:A1:A8:6A:C7:61
X509v3 Authority Key Identifier:
keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9b:a2:ea:56:ef:4c:40:d0:0d:e4:db:d2:17:d3:04:76:37:
44:4d:2c:fd:1e:04:0b:80:87:75:eb:60:4b:aa:44:f5:ff:78:
e4:f6:4a:f6:ff:9c:f5:e2:f3:e7:b0:83:08:5a:4d:dd:a9:d8:
92:ad:13:7f:cd:ab:fb:6a:ea:eb:ca:33:41:c9:03:91:fa:64:
21:0f:b0:9c:b0:64:93:33:05:16:9e:33:53:ee:67:9d:10:ab:
66:5a:e3:6d:ea:f1:cd:54:7e:e6:da:4b:63:41:ad:84:18:42:
3b:de:b3:c5:f0:3b:07:fe:ae:e3:44:09:b5:54:8e:09:1f:85:
5f:da:79:38:59:4e:52:41:e6:f8:bf:9c:dd:9f:64:28:06:a3:
08:40:01:d2:e0:0c:d9:27:39:d8:ea:7b:62:7e:e9:09:db:20:
28:a1:b3:5b:a7:ed:b5:f8:d7:5f:0b:34:e1:c8:13:06:d4:14:
ed:d3:c4:d6:b8:e9:2d:21:bf:e5:e4:aa:bb:0d:5d:27:ec:74:
ee:4b:5d:e8:04:36:08:d0:93:2c:78:45:fe:69:1e:c1:72:8c:
12:1f:e3:9f:2d:fb:db:c9:69:c0:ba:51:06:97:24:4d:0d:c5:
11:d7:88:5f:20:6c:e7:ee:49:9e:2d:38:eb:c9:8f:0a:b2:e3:
d1:0f:58:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwtcMPvZ3W07guFvMmgSecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZjcxYjIyNzNhYjM0ZWQ0YTU0ODExNzZlZjcwZmFkODY3
ZWYxNjYwHhcNMjUwOTA5MjMwMDQyWhcNMjUwOTEwMjMwMDQyWjAzMTEwLwYDVQQD
EyhiMmYzMmVhYzQ3NWVlMTMwZmVkNGYzMzczY2VhZTlhMWE4NmFjNzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A0Ch8D5GiT+MhlDCHT7JOr23nNo
0rOxjTnHOaFaX+Ti88GE1HRQiAE1K7ZdMwJ37ugkDgWplEset/W4Bnd+dFhsMBND
/tEG3esZq5de5OuLm1Ciu/fwY24BmEkU5rQLMeLMQ1fgD4w6s+2W6WgMw1SveHVw
P2H/gOrhYFQC7jxS6/RLtlDzvx8QCijd+f/SrmLw43hQ4IZCiEvDw0hZhinbTn6c
X0rP71z+ZJoalPQhQWVV3DM64jAnWL0I8w0E4CuHk1ir6RaSGQxx4fBjgJp/dLfP
thPCnumwoNzrOVraW0YQh42oJfmWpIsmBGNmqU9y5Y4TufjScHv9lWZ3EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLzLqxHXuEw/tTzNzzq6aGoasdhMB8GA1UdIwQY
MBaAFJb3GyJzqzTtSlSBF273D62GfvFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAt
NDY5MzVmY2M4NTVlLzEvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAtNDY5MzVmY2M4NTVl
LzEvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpui6lbv
TEDQDeTb0hfTBHY3RE0s/R4EC4CHdetgS6pE9f945PZK9v+c9eLz57CDCFpN3anY
kq0Tf82r+2rq68ozQckDkfpkIQ+wnLBkkzMFFp4zU+5nnRCrZlrjberxzVR+5tpL
Y0GthBhCO96zxfA7B/6u40QJtVSOCR+FX9p5OFlOUkHm+L+c3Z9kKAajCEAB0uAM
2Sc52Op7Yn7pCdsgKKGzW6fttfjXXws04cgTBtQU7dPE1rjpLSG/5eSquw1dJ+x0
7ktd6AQ2CNCTLHhF/mkewXKMEh/jny3728lpwLpRBpckTQ3FEdeIXyBs5+5Jni04
68mPCrLj0Q9YgQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 04:16:56 2025 by rpki-client