Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: b8MsAU8zuW72jr3O7RF8Uha8a4Qr6LCm12FOHFxYMCM=
Subject key identifier: 8F:20:5D:76:E2:83:69:DD:20:4D:49:0D:D8:4D:D2:34:B0:E2:39:19
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 0198D4A825EC817A08F78162CA091499E060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 04A1
Signing time: Sat 23 Aug 2025 02:00:46 +0000
Manifest this update: Sat 23 Aug 2025 02:00:46 +0000
Manifest next update: Sun 24 Aug 2025 02:00:46 +0000
Files and hashes: 1: A3mZEclriGszqRGoUvbHgF-KInU.roa (hash: i8Kmi4yyeQAKrcdjfPdTmfjuSQ/uP2lhkQpuex0W13Y=)
2: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: FUlmyXBpNysV67ma0c1H973S6w8+L9zoDsp9lk3PWvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:25:ec:81:7a:08:f7:81:62:ca:09:14:99:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Aug 23 02:00:46 2025 GMT
Not After : Aug 24 02:00:46 2025 GMT
Subject: CN=8f205d76e28369dd204d490dd84dd234b0e23919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f9:3a:f3:69:b5:ff:76:81:ea:c2:95:27:0f:
3b:31:55:51:c9:94:9c:3e:7c:c0:12:9e:5e:ba:4b:
75:37:c9:22:23:e1:e4:3b:ca:9c:4d:85:3c:ea:8b:
a9:6f:1c:4c:21:08:91:00:4f:36:0d:ea:0b:f9:8a:
ac:6e:b3:23:24:e9:67:5f:3e:91:ee:3c:96:bc:0e:
27:d1:3a:48:07:71:c7:d5:e3:0f:1f:79:b7:f6:11:
12:00:6c:eb:dd:13:3b:c3:6f:95:ae:85:4f:7a:8e:
47:34:39:48:25:4e:98:33:fa:f1:49:70:18:f7:49:
d0:d5:00:64:3c:39:c0:6a:9e:9f:de:19:65:5c:95:
e1:cd:b3:0d:61:a2:6a:dd:d9:95:59:78:72:67:7f:
30:d9:75:36:35:f9:83:f8:fb:0c:14:78:eb:66:72:
e9:dd:a7:0d:b7:d2:15:fd:f6:41:87:23:64:27:81:
1d:63:80:b1:b3:a5:dd:a9:57:ba:ac:70:13:b9:ff:
20:87:0b:cd:e0:f6:87:50:be:15:dc:8b:fe:6b:b9:
13:8e:60:4e:a9:a9:aa:d9:29:ef:42:8b:cc:3f:b6:
df:3e:9f:51:c1:a8:ed:9d:6c:c2:c7:ca:c1:04:0b:
09:93:6b:9f:77:37:32:f8:c5:90:e7:dc:64:9d:d2:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:20:5D:76:E2:83:69:DD:20:4D:49:0D:D8:4D:D2:34:B0:E2:39:19
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ba:67:e5:83:9f:81:83:85:24:37:b1:02:3f:e6:a4:17:f4:
05:95:7d:30:d5:ca:d4:e9:87:24:62:e3:72:81:09:ed:57:dc:
25:09:94:8a:5c:13:e8:ae:f1:ad:94:95:9d:75:e1:a8:2a:b6:
0d:80:94:6d:eb:e1:3f:e9:12:2f:14:59:65:28:01:fe:be:35:
1a:ce:88:83:8d:82:96:9c:0e:0a:bc:de:c4:9d:a9:f0:de:d5:
12:7f:19:a2:77:e7:f7:25:ad:58:ad:e0:a3:ac:ae:9e:bb:1d:
fe:4c:d2:d8:e5:5a:73:c1:26:23:00:f4:a4:da:2d:2a:b7:d5:
70:e8:83:be:b6:81:03:cd:c9:a0:9c:2b:72:6a:3f:ed:15:fb:
f7:42:08:5c:e5:fa:0e:b4:a8:c2:9a:21:c7:02:68:15:93:7d:
79:f5:4c:d0:c9:d2:c0:ee:07:f9:29:f6:07:d4:83:81:14:d5:
df:6b:c2:cf:fe:65:88:be:0b:54:77:72:bd:04:c9:59:29:3c:
f1:d0:33:c8:de:1e:64:b6:d5:b1:d2:d3:ec:01:ce:ed:90:ff:
89:4d:c6:dc:dc:dc:6c:ff:f4:c2:1d:c4:ef:07:fd:5f:3f:dd:
32:5b:c7:ef:a4:23:4a:70:95:c4:b8:51:07:2b:1a:fb:a9:0e:
5f:d1:ae:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:35 2025 by rpki-client