
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft
File: lvwwAHd_a3tF8DtuyBwcAQv5l94.mft (raw, json)
Hash identifier: Rmg7ayPiL8oWOqX5J8KajChBTYuhUitrOXDSCYrFtCg=
Subject key identifier: 09:0F:D9:71:74:A6:4C:F4:F9:1F:A5:6A:0B:7D:73:FD:0F:15:52:03
Authority key identifier: 96:FC:30:00:77:7F:6B:7B:45:F0:3B:6E:C8:1C:1C:01:0B:F9:97:DE
Certificate issuer: /CN=96fc3000777f6b7b45f03b6ec81c1c010bf997de
Certificate serial: 0198D5F1A468B7661FA1467C486866DF538D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvwwAHd_a3tF8DtuyBwcAQv5l94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft
Manifest number: 46
Signing time: Sat 23 Aug 2025 08:00:39 +0000
Manifest this update: Sat 23 Aug 2025 08:00:39 +0000
Manifest next update: Sun 24 Aug 2025 08:00:39 +0000
Files and hashes: 1: lvwwAHd_a3tF8DtuyBwcAQv5l94.crl (hash: /7nJZsudRbtFqhSB8vmbY77wGI2Qq/5KssMUl3E7ij0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvwwAHd_a3tF8DtuyBwcAQv5l94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a4:68:b7:66:1f:a1:46:7c:48:68:66:df:53:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fc3000777f6b7b45f03b6ec81c1c010bf997de
Validity
Not Before: Aug 23 08:00:39 2025 GMT
Not After : Aug 24 08:00:39 2025 GMT
Subject: CN=090fd97174a64cf4f91fa56a0b7d73fd0f155203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:69:6c:a2:3f:16:ed:a9:c0:4f:34:33:28:
24:44:13:8c:f6:a7:b9:e0:b6:e6:8f:e0:87:55:00:
f6:0e:aa:66:a7:01:a9:d2:d3:f8:c4:2f:3c:a5:dd:
f6:3a:10:8b:82:29:6c:ba:68:72:01:b4:0e:06:b4:
20:0d:d7:2f:2d:06:dd:5c:ea:c3:42:a3:84:e8:09:
06:85:4d:e4:38:b1:8e:af:7c:96:89:6f:98:4d:fd:
ec:d8:23:fe:d4:f7:28:c4:6d:d4:3e:4d:58:f8:3d:
24:b7:97:65:53:17:47:ce:7d:6f:db:a2:ac:26:f4:
47:99:6a:91:7b:6a:e8:59:0e:44:5d:e0:c7:bb:b5:
71:82:f3:7a:60:a4:20:83:8d:51:ec:49:1b:d0:34:
bb:83:0e:2b:de:ac:5d:d6:b5:89:df:2c:80:c7:20:
0b:06:45:de:5a:df:ac:1d:12:38:b9:0a:69:08:12:
17:d1:81:5d:12:c5:27:d3:b8:7a:aa:f5:c9:cb:93:
69:ef:bf:34:9d:1c:44:3a:5d:f6:c6:4d:89:68:a8:
13:49:15:4e:48:d1:33:d8:15:45:34:b3:f8:b6:03:
31:76:85:e2:53:64:b4:cd:a7:11:9c:76:ca:79:6e:
0c:bc:c7:40:91:81:8d:da:34:ea:2d:b5:d2:d9:cc:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0F:D9:71:74:A6:4C:F4:F9:1F:A5:6A:0B:7D:73:FD:0F:15:52:03
X509v3 Authority Key Identifier:
keyid:96:FC:30:00:77:7F:6B:7B:45:F0:3B:6E:C8:1C:1C:01:0B:F9:97:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvwwAHd_a3tF8DtuyBwcAQv5l94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c5:cd:b2:2b:0d:2d:03:e8:30:60:18:96:f6:eb:ee:a6:ba:
c7:f6:bd:0d:37:9f:6d:c9:26:69:c2:75:8f:28:38:78:3d:2d:
44:b6:7e:53:7f:6c:58:0c:d8:65:7f:7c:10:bc:4c:94:cd:55:
23:e0:3c:d2:f9:fb:40:1e:9b:00:05:a0:f4:09:6d:90:81:e8:
52:ea:2a:90:b1:13:e7:72:83:1b:35:19:25:95:87:ac:0e:8c:
38:84:b6:aa:55:65:d0:6f:e6:f9:2b:b1:f2:d9:d9:8d:a7:53:
96:45:7d:0e:40:0c:30:69:f8:3b:b0:4a:3a:7f:3c:95:3a:ca:
8c:12:ca:69:9d:06:9a:c6:1f:3d:39:fe:d2:0b:f6:cb:57:61:
89:7b:68:ff:cd:51:f9:50:aa:7e:fd:6c:bd:f9:5c:75:e9:42:
16:d8:d1:6d:9c:83:9f:c5:03:a1:e8:79:15:3a:1f:5a:da:38:
fe:36:d5:f7:04:d8:51:14:88:81:8c:4e:93:63:f9:fb:10:f5:
1a:2f:59:82:68:61:df:b5:aa:a3:4d:67:26:01:bd:6d:e9:a3:
1a:1a:7c:d0:99:a9:30:f2:14:31:18:2d:fc:8a:22:12:a0:55:
fe:36:38:78:8f:ad:7c:ab:9d:97:74:44:c0:42:3f:54:e2:6e:
3d:af:24:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8aRot2YfoUZ8SGhm31ONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZmMzMDAwNzc3ZjZiN2I0NWYwM2I2ZWM4MWMxYzAxMGJm
OTk3ZGUwHhcNMjUwODIzMDgwMDM5WhcNMjUwODI0MDgwMDM5WjAzMTEwLwYDVQQD
EygwOTBmZDk3MTc0YTY0Y2Y0ZjkxZmE1NmEwYjdkNzNmZDBmMTU1MjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyBpbKI/Fu2pwE80MygkRBOM9qe5
4Lbmj+CHVQD2DqpmpwGp0tP4xC88pd32OhCLgilsumhyAbQOBrQgDdcvLQbdXOrD
QqOE6AkGhU3kOLGOr3yWiW+YTf3s2CP+1PcoxG3UPk1Y+D0kt5dlUxdHzn1v26Ks
JvRHmWqRe2roWQ5EXeDHu7VxgvN6YKQgg41R7Ekb0DS7gw4r3qxd1rWJ3yyAxyAL
BkXeWt+sHRI4uQppCBIX0YFdEsUn07h6qvXJy5Np7780nRxEOl32xk2JaKgTSRVO
SNEz2BVFNLP4tgMxdoXiU2S0zacRnHbKeW4MvMdAkYGN2jTqLbXS2cyR/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkP2XF0pkz0+R+lagt9c/0PFVIDMB8GA1UdIwQY
MBaAFJb8MAB3f2t7RfA7bsgcHAEL+ZfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZ3d0FIZF9hM3RGOER0dXlCd2NBUXY1bDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83NzZmNTgtYzlmYS00ZTJmLTlmZjEt
NzU2ZDJhNmZjN2JjLzEvbHZ3d0FIZF9hM3RGOER0dXlCd2NBUXY1bDk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83NzZmNTgtYzlmYS00ZTJmLTlmZjEtNzU2ZDJhNmZjN2Jj
LzEvbHZ3d0FIZF9hM3RGOER0dXlCd2NBUXY1bDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMXNsisN
LQPoMGAYlvbr7qa6x/a9DTefbckmacJ1jyg4eD0tRLZ+U39sWAzYZX98ELxMlM1V
I+A80vn7QB6bAAWg9AltkIHoUuoqkLET53KDGzUZJZWHrA6MOIS2qlVl0G/m+Sux
8tnZjadTlkV9DkAMMGn4O7BKOn88lTrKjBLKaZ0GmsYfPTn+0gv2y1dhiXto/81R
+VCqfv1svflcdelCFtjRbZyDn8UDoeh5FTofWto4/jbV9wTYURSIgYxOk2P5+xD1
Gi9Zgmhh37Wqo01nJgG9bemjGhp80JmpMPIUMRgt/IoiEqBV/jY4eI+tfKudl3RE
wEI/VOJuPa8kqA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:07 2025 by rpki-client