Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: gKKX9l4881oYptaxXqICNrVTgLELIHJRrmuq9gyt0jE=
Subject key identifier: 50:99:7E:2D:3E:10:49:1B:92:99:D4:5D:51:2B:86:35:49:13:47:12
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 0199FC21952C10A9F425015041778566F84E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 053A
Signing time: Sun 19 Oct 2025 11:01:23 +0000
Manifest this update: Sun 19 Oct 2025 11:01:23 +0000
Manifest next update: Mon 20 Oct 2025 11:01:23 +0000
Files and hashes: 1: A3mZEclriGszqRGoUvbHgF-KInU.roa (hash: i8Kmi4yyeQAKrcdjfPdTmfjuSQ/uP2lhkQpuex0W13Y=)
2: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: EFRweHZTWM7GTFnomDPgkne/ztXuCeFAMZpQrQhsCrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:95:2c:10:a9:f4:25:01:50:41:77:85:66:f8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Oct 19 11:01:23 2025 GMT
Not After : Oct 20 11:01:23 2025 GMT
Subject: CN=50997e2d3e10491b9299d45d512b863549134712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:9b:75:86:43:3d:7a:2f:72:a1:b3:44:27:
72:ea:1d:71:37:38:69:b3:b0:cf:93:db:36:0a:fa:
19:e2:38:ea:45:92:df:35:70:94:86:e6:92:be:cd:
1a:35:2a:c2:f7:af:66:cb:f4:9b:5b:c4:a9:7d:c6:
9a:bd:3b:23:d5:7f:75:29:53:35:0f:7b:da:e2:f4:
53:c0:2e:06:41:c3:03:58:f4:ca:0f:41:bd:51:ff:
ce:b9:06:62:64:2e:22:14:a1:cc:90:87:77:9d:9f:
56:43:de:c2:a8:8e:65:ae:50:8b:66:4c:90:3f:7a:
5c:cb:da:9b:3a:06:a7:95:53:b6:9e:2a:82:54:38:
44:15:00:b4:4c:9f:bb:ed:3d:e8:f7:6d:e2:03:95:
bb:cf:22:83:b5:8c:23:ca:d9:d2:ba:c0:e9:41:d0:
31:64:e4:93:05:d6:bf:76:b0:f7:8d:7f:81:16:02:
fb:db:de:2e:36:aa:ec:69:dd:d6:0c:6d:9c:57:b1:
72:d2:39:67:38:ca:db:e5:5a:6a:17:fc:c1:c5:bb:
ca:dd:cd:f6:e4:9a:3d:41:52:41:02:7f:f9:d9:25:
ea:5a:1c:b9:ba:6b:8f:46:72:27:61:e6:fd:4e:a8:
22:cf:79:34:d8:94:1e:77:58:d9:f6:1f:f5:6b:6c:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:99:7E:2D:3E:10:49:1B:92:99:D4:5D:51:2B:86:35:49:13:47:12
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:48:54:cd:73:70:1d:35:a0:dc:e6:e2:55:dc:9c:be:7e:a3:
9f:7d:e8:75:09:e2:c4:24:5d:f9:cb:b4:b6:16:63:ed:c4:bf:
bd:6b:7b:0f:d6:51:f1:8a:ea:4e:de:d3:68:2e:fa:9d:e8:cd:
71:8b:d8:f8:e4:01:83:42:37:4c:19:fb:8c:45:fc:e5:b4:50:
bf:8a:ff:a5:51:02:be:99:fe:e9:6a:f3:eb:ec:c3:4b:5f:ed:
f7:70:4f:b3:51:24:0a:ec:b0:bb:05:2b:c7:25:4a:4d:4f:25:
74:c2:b8:19:fa:d5:28:3e:e5:48:31:78:1f:92:6e:8c:ff:4a:
c7:87:8e:d4:0f:89:13:5f:f7:ea:a3:de:75:63:d9:d0:b2:5b:
44:53:1b:55:7f:56:22:3e:eb:99:ea:86:fb:91:38:df:de:3b:
de:33:31:e6:21:09:e9:40:bc:9f:cd:b7:3f:31:97:b1:9b:92:
53:2e:46:d2:a4:02:2e:51:c9:31:ca:dc:fd:22:c6:a3:16:43:
01:57:76:21:d8:33:5d:a6:6d:8f:fb:11:30:60:b8:7e:6f:18:
55:14:0f:f8:df:a6:01:22:ef:a4:8d:4e:93:3d:1e:2b:89:d9:
a8:30:73:27:30:b9:90:1e:fc:89:84:3f:00:18:06:f9:a8:28:
fa:f7:dd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:36 2025 by rpki-client