Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier: lk3L1ewBpb9Cc/ikIBmxqYuQ097pVPaPUrSczruG48g=
Subject key identifier: 5E:60:AB:53:ED:2D:6A:71:AE:CA:35:86:A4:C2:ED:3F:91:6D:CF:D0
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 019A71EECE328857B5FAC594E139E4551714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number: 12B8
Signing time: Tue 11 Nov 2025 08:01:07 +0000
Manifest this update: Tue 11 Nov 2025 08:01:07 +0000
Manifest next update: Wed 12 Nov 2025 08:01:07 +0000
Files and hashes: 1: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: s4uJ//whiuKTupZH4cOFd1NTQRyLtoyibSArBOZVLWs=)
2: pvaPM5j3-BPWJpSuaWFE01jgVBg.roa (hash: vcFvxHEzp1YnutqV+Bq+p/f/FPwpa1xjzTG6Rie7rFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ce:32:88:57:b5:fa:c5:94:e1:39:e4:55:17:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: Nov 11 08:01:07 2025 GMT
Not After : Nov 12 08:01:07 2025 GMT
Subject: CN=5e60ab53ed2d6a71aeca3586a4c2ed3f916dcfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:85:94:f2:41:0d:56:05:92:23:0b:c2:e9:
d4:77:be:d7:ab:91:f2:bb:c0:69:b9:54:6d:1e:fb:
d3:b7:23:e3:28:c9:4d:3b:4b:e6:d7:db:9c:96:9b:
8a:25:5c:2a:b2:f9:b4:67:f7:ba:9c:90:72:23:ae:
09:16:51:cf:7a:cf:b6:2b:0a:7b:f8:ee:68:e7:5e:
83:73:b2:05:d9:ed:1e:b8:b3:c0:25:40:5a:44:76:
a2:c7:25:12:83:cc:3d:48:2c:0e:13:2c:f6:02:54:
0c:ef:99:74:f6:3b:5e:2a:9b:29:b0:df:79:fd:15:
07:7a:be:74:7a:d4:8b:70:e2:00:9f:26:95:84:95:
9f:f8:6e:df:67:5f:ad:e6:96:21:b5:a6:5e:3a:48:
15:8d:11:06:37:7f:9c:eb:85:2c:6e:e0:76:26:d6:
12:c0:9a:c4:aa:23:6e:0f:87:2d:fd:62:4e:95:1e:
1b:55:2e:52:e1:7a:ce:92:5a:e1:33:35:1f:e8:f5:
de:a0:3c:63:19:b5:24:65:cb:a7:7c:fd:53:aa:90:
46:d1:5a:2e:52:0b:84:67:e9:b6:25:d7:c8:5e:dc:
c7:77:77:84:d7:16:b4:33:ec:d3:2c:b2:2a:d6:28:
ba:7d:8a:c5:ce:c8:f7:69:c7:85:58:b0:12:dd:9c:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:60:AB:53:ED:2D:6A:71:AE:CA:35:86:A4:C2:ED:3F:91:6D:CF:D0
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e0:d1:aa:3e:77:e5:a7:12:a1:07:46:9c:1d:57:09:76:b3:
c4:62:54:a5:d6:c8:1b:98:af:3f:fa:69:6d:0f:44:4f:14:16:
f0:9e:8f:a8:40:0c:13:1e:e1:1a:7a:6e:9b:85:f0:38:b8:c7:
59:d0:6d:ca:08:90:56:e6:b6:aa:1d:92:4d:d2:2d:09:e1:7b:
3c:6b:de:6d:98:c2:37:7e:47:7f:56:c6:f0:a3:43:1c:26:17:
43:fb:37:39:97:99:46:ff:df:e4:5e:28:d2:65:fc:64:1c:f0:
1a:ee:3c:0e:f6:b2:c3:9f:6c:ff:2d:d6:34:03:04:5f:72:75:
f6:0b:15:32:3e:54:04:ad:91:c5:0d:2f:5a:89:32:27:87:97:
2a:2c:e9:05:54:a2:77:70:3b:f6:17:24:06:5a:fd:bf:bd:70:
ba:01:99:43:68:3b:be:0d:bd:10:36:57:e0:7f:fa:d6:bf:bc:
1e:10:49:14:d9:8e:b7:ea:47:a4:ce:a6:2d:f7:d4:52:a2:3c:
df:f2:88:53:90:5b:3d:39:c0:3b:08:95:19:69:5a:0c:b6:3d:
65:ba:65:1e:cc:3b:17:4c:64:4e:b8:57:3a:2f:8e:88:c4:6e:
44:bf:38:8f:13:26:2f:e4:85:83:d8:33:96:a6:0c:19:c2:8a:
b8:92:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:21 2025 by rpki-client