Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
File: lvLaL6G8jtLyvGtwOovxU0D5fPo.mft (raw, json)
Hash identifier: f2yVSUAh9MG8Kt2vFjww8HG/8PJ82z2LsDK7hESDLR8=
Subject key identifier: 1A:36:FD:57:6A:72:B0:22:8C:47:66:0E:4D:DD:C1:19:02:A1:32:6E
Authority key identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
Certificate issuer: /CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Certificate serial: 0198D66015BB9391E809C6665CDD83EDBFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
Manifest number: 0A27
Signing time: Sat 23 Aug 2025 10:01:17 +0000
Manifest this update: Sat 23 Aug 2025 10:01:17 +0000
Manifest next update: Sun 24 Aug 2025 10:01:17 +0000
Files and hashes: 1: HfieAyyFiGHzuxK88Qqlcm0jHjE.roa (hash: 9hArFOOTkWsSdh7y1qMFDzyLMrMdzpKqI+tBBv6IzqM=)
2: lvLaL6G8jtLyvGtwOovxU0D5fPo.crl (hash: t7AS4V4q3HKhZyVibOkayEpyizVbDCYaHG4paajjGLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:15:bb:93:91:e8:09:c6:66:5c:dd:83:ed:bf:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Validity
Not Before: Aug 23 10:01:17 2025 GMT
Not After : Aug 24 10:01:17 2025 GMT
Subject: CN=1a36fd576a72b0228c47660e4dddc11902a1326e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:ee:fd:65:46:ce:b0:ec:0b:bc:8a:70:cc:
55:76:51:11:f3:18:b6:87:a8:4b:e9:25:49:48:3e:
8c:ea:9c:19:c5:29:2a:49:cb:e0:2a:1e:f8:47:e3:
5a:df:c2:9a:4e:ef:39:c1:0b:e0:df:2e:71:1b:8b:
f6:da:89:fe:29:ed:7e:ee:19:30:29:ab:9a:b2:18:
96:f9:a8:07:a5:17:f1:93:ca:7c:fe:e0:5a:1a:16:
f1:b5:9e:39:72:84:fb:ef:fb:d1:ba:aa:79:74:85:
dc:e1:e4:d4:99:36:b2:60:68:0f:43:c8:92:7b:82:
07:94:65:c0:6c:a6:5f:33:6e:5e:a2:00:f1:c9:27:
52:15:b3:79:30:cb:14:1e:53:d8:cd:ac:65:d5:60:
4f:fc:9e:73:1f:b7:bc:ce:0d:6f:15:e7:6b:44:7f:
1c:ef:98:0a:df:30:74:6f:00:e2:a9:26:3e:39:6d:
dc:c0:c7:ce:cc:84:33:08:0c:a7:fc:b2:55:0a:14:
f6:3c:d9:54:05:76:ca:47:be:ed:a9:21:9e:8b:88:
54:84:1f:61:b0:f1:0d:d3:39:b5:7b:89:a7:23:a9:
77:d4:b6:aa:73:9e:0f:96:5d:93:fe:6c:1f:aa:c3:
9f:85:7c:2c:93:4d:49:72:dc:47:cf:e6:39:87:8c:
58:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:36:FD:57:6A:72:B0:22:8C:47:66:0E:4D:DD:C1:19:02:A1:32:6E
X509v3 Authority Key Identifier:
keyid:96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6a:04:5c:af:67:95:d3:d9:1c:4f:18:9d:96:76:6e:8a:ed:
f9:04:df:73:da:25:cf:55:ff:13:cc:23:b9:01:92:ab:3f:b3:
50:f9:65:d4:14:66:77:28:4b:54:b3:53:56:99:ee:90:7f:36:
88:c4:4f:b5:0a:fe:02:ee:2d:56:02:4f:83:c7:13:c5:08:ee:
b7:3a:26:d6:0f:c2:67:53:96:ae:6f:62:e1:f8:d9:54:9b:23:
32:87:f2:37:20:ed:79:47:ec:e1:b9:f1:57:47:f7:97:2f:6e:
b3:7a:94:13:c2:d1:2d:52:a5:6e:2d:ed:34:61:e2:dd:67:2c:
19:1a:71:d6:ab:5f:7a:b4:c3:82:46:24:e1:48:ff:2d:e9:db:
7c:68:5a:8b:19:7c:e6:16:15:7c:04:32:a8:2c:c8:74:e2:60:
b9:1c:1e:f8:b7:90:88:47:50:50:5c:24:b9:62:bb:a3:23:be:
a0:66:53:df:24:a7:4e:fd:7d:68:23:36:b2:36:b1:fb:15:fc:
e0:fa:e9:34:58:5d:32:d1:2c:cf:9d:1f:59:5d:59:d0:70:10:
84:20:e9:1b:43:a4:02:0f:fb:9b:5b:8d:db:49:65:52:e3:3c:
09:66:1e:97:de:be:78:e6:77:47:54:77:b0:3f:26:54:0e:d3:
99:4c:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:37 2025 by rpki-client