Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
File: LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft (raw, json)
Hash identifier: d5cxZ9YeWX22ad5PwkfZCWATT+oO8md9MyxxKDYppZw=
Subject key identifier: 92:99:CB:28:55:F2:97:34:A9:A9:FB:F0:00:88:56:E3:42:5E:AC:DC
Authority key identifier: 2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2
Certificate issuer: /CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2
Certificate serial: 0199FBB36B651FB989D59ADA6416F5CBE88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
Manifest number: 9D
Signing time: Sun 19 Oct 2025 09:01:03 +0000
Manifest this update: Sun 19 Oct 2025 09:01:03 +0000
Manifest next update: Mon 20 Oct 2025 09:01:03 +0000
Files and hashes: 1: LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl (hash: yTDTGCJYq9uvkQjR/MJVZI/DR+PF7mHWq++AXBLjbeM=)
2: vFgo2fcMFH1qOUYrkjlx17yCv1M.roa (hash: 2YQo4Uqir13EMfjJ9TnN1NRVWIzLXUPu2su8ibLa58Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6b:65:1f:b9:89:d5:9a:da:64:16:f5:cb:e8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2
Validity
Not Before: Oct 19 09:01:03 2025 GMT
Not After : Oct 20 09:01:03 2025 GMT
Subject: CN=9299cb2855f29734a9a9fbf0008856e3425eacdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ba:29:15:22:71:59:be:ce:32:95:df:7c:e8:
49:4a:84:df:f9:5e:af:84:ed:f7:d9:47:e3:8c:a9:
94:01:1b:be:7c:15:15:50:f4:a1:83:e9:ed:fb:3e:
3b:a9:74:e5:05:8d:54:3f:9a:28:1d:02:8b:ec:53:
a5:46:25:d7:dd:60:18:34:ce:67:e8:ea:a1:7b:64:
ed:60:62:83:aa:e2:60:a0:37:8f:33:c8:43:9d:e6:
5f:23:84:97:7f:1e:87:35:f3:83:33:8a:7d:91:f2:
21:2c:ea:2b:66:d2:2c:53:63:82:57:5a:f5:1a:64:
6c:c9:76:26:91:e7:df:42:cb:ad:a1:e1:86:ce:f7:
ca:e1:69:21:b1:fa:83:17:32:fc:14:92:6c:df:04:
fa:40:28:a2:05:df:e3:c3:ed:58:d2:50:89:4f:1f:
00:24:71:c5:21:7b:9a:07:8b:e2:58:26:46:1b:b2:
a1:e6:6e:3b:56:2d:2e:69:48:12:97:3e:42:81:f7:
c6:93:2f:2b:a4:cb:fd:cd:19:19:c3:0e:64:e3:0a:
67:8f:0b:c7:24:6e:61:8b:96:d0:f4:23:ea:54:b1:
5c:be:ba:cd:d4:71:d5:b7:51:01:b8:41:90:aa:7d:
0f:e9:a6:76:3b:34:ee:4d:c7:56:0e:2d:05:ec:2b:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:99:CB:28:55:F2:97:34:A9:A9:FB:F0:00:88:56:E3:42:5E:AC:DC
X509v3 Authority Key Identifier:
keyid:2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:85:af:56:2d:aa:b9:64:5b:af:05:9e:74:b8:0f:b5:bc:b4:
7d:d1:36:7b:c5:ae:93:4f:b9:12:36:f3:37:f4:2e:a6:2d:7c:
9b:6c:78:58:94:9b:7e:a7:74:2f:07:c4:e3:35:b7:31:fa:df:
79:f2:eb:39:f5:76:fe:b7:a9:85:ba:cb:5d:2d:d4:51:df:8d:
c5:7b:85:4a:10:b8:bc:a4:69:75:b8:9e:39:fe:70:0c:48:34:
40:04:47:c8:da:0b:2d:ae:fe:3d:d4:b4:9e:2f:95:b8:83:9d:
cd:02:a0:cb:40:55:f7:57:a2:df:c8:5f:80:86:3e:f7:17:d4:
28:cd:93:51:ea:76:53:51:87:f2:e3:cf:c0:e9:00:15:f9:54:
a7:e2:19:cc:d3:14:a7:98:ac:b0:86:84:a2:ac:1d:e3:3e:f8:
15:f5:12:e2:19:70:3f:58:19:74:10:6f:e4:3b:0c:de:1e:61:
2e:90:d5:ce:5b:77:43:88:de:8a:bc:36:ff:33:3d:d2:82:92:
65:11:38:ea:64:1d:9c:8d:aa:ae:78:3d:66:16:30:29:81:17:
d2:ec:75:a4:eb:23:51:27:1a:32:30:4e:0a:51:e3:2c:d9:70:
3b:16:4b:18:a7:94:40:ed:04:6e:67:7b:11:47:c1:7b:0a:11:
7c:df:47:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:51 2025 by rpki-client