
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
File: LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft (raw, json)
Hash identifier: /7Sf+8/gGFAzItcsmebjRm9cA+wxN1uqOxXOw3MUxoQ=
Subject key identifier: 20:4B:0B:DC:80:8B:C6:C6:89:A4:BD:F3:51:8F:C4:7E:48:03:6A:8D
Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
Certificate issuer: /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Certificate serial: 0198D4DFEFAF1B9BFECCF00D9FC2A0E291ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
Manifest number: 041B
Signing time: Sat 23 Aug 2025 03:01:42 +0000
Manifest this update: Sat 23 Aug 2025 03:01:42 +0000
Manifest next update: Sun 24 Aug 2025 03:01:42 +0000
Files and hashes: 1: LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl (hash: +WpoLxY0O9omqKvtxu2CK9mYBgt50FOZcMpT671GTc4=)
2: qnFffULuZkD3WAJFMjcSjE8KLV0.roa (hash: 3RoDeJIvhLdUQNKp3436G/+SXszr4AzKvXyWP5Iyh00=)
3: wqY_ixYVjH1acrjorGcEZywYgRk.roa (hash: XpP+SvIXR1YO15boQPEoJQXvWDeccH3hUbCAlDZexo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ef:af:1b:9b:fe:cc:f0:0d:9f:c2:a0:e2:91:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Validity
Not Before: Aug 23 03:01:42 2025 GMT
Not After : Aug 24 03:01:42 2025 GMT
Subject: CN=204b0bdc808bc6c689a4bdf3518fc47e48036a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:0d:f0:6f:61:ef:c1:96:49:1a:2f:2d:39:
82:cf:d4:29:bc:89:30:a4:4c:9a:ec:fa:95:ed:f5:
36:13:02:c8:d7:d5:92:09:2f:fd:cb:57:2d:0d:a6:
bc:01:82:bf:0c:b7:ae:69:e8:c2:ee:2f:30:06:cc:
c5:15:60:e3:ad:3e:2b:d2:65:46:01:cc:66:29:01:
20:ba:73:6d:0b:36:37:34:30:7c:d9:77:cd:75:c0:
dc:56:17:29:41:c5:c0:57:19:fe:c3:b2:62:24:2f:
0d:be:4a:6f:41:d2:fc:17:44:c3:75:fe:88:4e:29:
91:2f:7d:0d:8a:2b:f4:4c:02:aa:23:ad:6b:0f:c0:
2a:8f:2a:d3:0a:4e:4f:05:91:d7:6c:39:88:4c:17:
23:4d:7c:5a:e6:91:70:09:ae:f5:a8:9e:e2:f6:7c:
c8:b6:88:39:d4:4a:a5:4e:77:3a:6f:1e:32:e2:cd:
0c:d9:ba:7d:10:c9:cc:bc:72:44:c2:af:4e:a6:73:
d2:c1:de:99:5f:b9:ab:df:0c:09:4b:b6:28:d5:b2:
b3:3c:f9:03:3b:fe:15:7b:2e:5c:b9:a9:68:48:b4:
bf:aa:4a:4b:a7:cb:39:29:06:70:9e:41:38:3f:af:
ea:df:f2:2d:d8:d2:b2:56:04:1e:fa:2c:06:32:96:
d0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4B:0B:DC:80:8B:C6:C6:89:A4:BD:F3:51:8F:C4:7E:48:03:6A:8D
X509v3 Authority Key Identifier:
keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a6:12:09:ec:8f:20:82:6d:9e:cf:41:96:2c:66:29:7f:75:
5c:b7:fe:53:be:92:14:5b:35:9f:6c:59:6d:32:31:4e:88:ee:
dd:e5:8f:d4:d8:c2:d5:c7:28:fc:a2:9a:8a:05:ea:85:bc:fb:
93:0d:b5:28:40:c3:8b:dc:19:28:da:ad:e7:d3:ac:d1:9c:1e:
c5:b1:26:4f:bc:44:3c:38:90:d1:30:be:24:d4:ea:50:7e:ef:
4f:47:a0:b3:fa:25:a9:20:ec:4c:4a:8a:c7:10:74:db:6b:33:
88:8b:88:cb:16:8a:68:c4:27:e7:76:f3:3a:42:42:65:d0:e4:
32:45:c0:b0:81:87:0d:6a:fb:df:71:a0:83:1c:7d:05:37:48:
da:8c:ee:73:16:6d:d1:d5:8c:79:76:41:fb:0e:b8:91:e7:fa:
51:5f:94:09:76:9b:fe:b6:1d:0d:d9:96:d1:a0:2c:b8:cc:bf:
fe:3e:85:07:83:ae:4a:9f:03:ac:e0:dc:10:d7:fb:60:bd:8a:
dc:0c:6b:5b:86:50:b2:0d:2b:c6:03:17:c7:3b:06:82:84:48:
22:6d:34:ed:8f:64:58:0a:4d:71:4c:4b:e6:2c:ce:a9:8f:7d:
3e:bf:67:99:c3:b9:71:25:e0:3f:d1:19:0b:52:d7:a9:fb:9b:
bb:a2:d8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:59 2025 by rpki-client