Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier: +aQV1DKLu9ZckcGntDH2b0kDdvS4gykMaG3CRqAOILk=
Subject key identifier: 33:B7:21:4D:9A:E0:FA:50:DE:7E:6A:F3:1A:FB:11:33:DA:C7:29:42
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial: 019A1E3F22DA5E8DCF2C6F55AB2952A68434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number: 1126
Signing time: Sun 26 Oct 2025 02:00:45 +0000
Manifest this update: Sun 26 Oct 2025 02:00:45 +0000
Manifest next update: Mon 27 Oct 2025 02:00:45 +0000
Files and hashes: 1: Glr6u_s5CXtQU33JFdKRNodC1Uw.roa (hash: xJAriWKl+PmbnYJ4BpPrX2q/YRb7AyfnBhDH2V2YYdU=)
2: UpeD63AhvaLPHL7cT3GFojz3Ckk.roa (hash: mEkJtV27z/pufpdRebXs4QzlDSFPeuvtLb6yKnLyJS8=)
3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: XqUDHOEiw+IvrE+5q3ItI2fbQJy76WZ6cDWVrGiBT2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3f:22:da:5e:8d:cf:2c:6f:55:ab:29:52:a6:84:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Validity
Not Before: Oct 26 02:00:45 2025 GMT
Not After : Oct 27 02:00:45 2025 GMT
Subject: CN=33b7214d9ae0fa50de7e6af31afb1133dac72942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:3f:dd:93:06:05:6e:2c:53:96:85:91:3a:
82:8a:d2:4c:92:d4:f5:ac:d4:d5:da:a8:82:89:67:
00:7f:f7:5e:cf:2e:ca:99:bb:8b:41:6a:a5:de:85:
54:59:77:40:e2:7a:ac:bd:db:87:e5:88:67:78:01:
c7:89:42:a0:00:8a:28:58:1c:35:ca:fe:de:83:95:
ca:4f:e7:61:32:e7:0a:ee:86:7e:19:f3:7d:04:00:
b0:31:ee:be:dd:83:a8:d2:20:5a:95:c7:dd:b1:11:
df:2d:ea:0c:8a:74:99:24:05:eb:bb:4c:1d:56:26:
4f:fd:8b:6b:7d:a7:1a:17:ab:9c:4d:c6:ca:71:7e:
3f:95:ff:fc:f5:d1:b6:49:ab:84:20:d7:90:76:99:
27:35:08:24:99:3a:c8:52:6d:b7:fe:5a:fd:05:b6:
c8:fd:cd:a1:48:2b:8e:f2:2a:a2:83:a1:b1:3d:aa:
79:2c:64:64:0e:1f:50:a6:15:2c:ff:2e:da:8e:58:
bf:b3:9a:4d:7f:61:4d:d6:19:89:3c:eb:de:ef:c2:
6e:7a:0c:9a:b7:08:71:56:e1:81:67:ca:ad:a4:0b:
71:89:1b:fc:93:35:15:14:57:33:c6:43:fb:4d:ba:
c2:f0:3f:f1:4b:3a:b2:95:cb:b3:b6:91:08:59:7a:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B7:21:4D:9A:E0:FA:50:DE:7E:6A:F3:1A:FB:11:33:DA:C7:29:42
X509v3 Authority Key Identifier:
keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:92:59:93:32:4e:46:35:20:77:f6:47:cf:85:98:ed:98:e0:
db:2e:8e:47:c4:8a:78:d3:a8:8d:ab:9c:9d:6e:0e:77:fd:a9:
1d:cd:33:1c:b5:38:12:66:f1:75:ef:12:df:16:5e:cb:08:f8:
46:17:d0:bc:0e:54:6a:fa:9c:c9:04:87:63:2c:8a:0f:e0:dd:
c7:ed:03:5b:a9:db:35:16:77:8f:e9:57:6b:af:82:fc:1c:ee:
52:eb:25:6a:93:7f:1e:2c:92:bf:1f:51:c8:ac:71:1d:da:8f:
3c:0d:30:5a:e8:bb:43:39:f4:3e:c3:35:fb:30:32:82:48:47:
a5:7c:fc:f3:29:72:6c:5d:e4:a7:0d:b8:4e:68:74:14:18:ec:
ae:32:4c:45:44:11:05:09:5c:99:5b:3f:02:93:36:79:4e:18:
a3:b2:75:4c:82:2e:1f:33:c5:10:73:80:81:3c:b3:83:f8:ea:
05:a8:c9:a7:5c:f8:da:bc:54:2a:52:fe:3e:8a:50:ac:cf:aa:
b3:d6:58:29:91:93:ae:06:88:b8:72:f2:3c:87:4f:8b:76:83:
56:68:2e:81:05:f3:1a:1c:74:cf:3b:e8:c9:63:aa:48:67:ef:
7d:49:b6:ba:0d:b0:9e:1c:87:09:d2:80:94:4a:90:f6:61:05:
cc:bd:46:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:30:44 2025 by rpki-client