Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier: QyPS9Pr5s1lJ5LOKWegaJ/GSsbFDAjDiLaq2uG8PW0I=
Subject key identifier: D3:4B:05:56:BC:A1:5D:B1:BF:98:EA:00:E0:81:A7:47:C5:36:4B:70
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 0198D5BC421E699978AE7B1528E94F0083C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number: 10A2
Signing time: Sat 23 Aug 2025 07:02:21 +0000
Manifest this update: Sat 23 Aug 2025 07:02:21 +0000
Manifest next update: Sun 24 Aug 2025 07:02:21 +0000
Files and hashes: 1: 00zUmefDnJyqqgzSdsn0MV9Tkqo.roa (hash: huADW82oDJAq5twpGQcGLwROZsWOsqN3XkZE8P766lk=)
2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: IeVDHJxvly6PqSEvWPnXLz4w/AZiXKAy7B7csN/WlOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:42:1e:69:99:78:ae:7b:15:28:e9:4f:00:83:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Aug 23 07:02:21 2025 GMT
Not After : Aug 24 07:02:21 2025 GMT
Subject: CN=d34b0556bca15db1bf98ea00e081a747c5364b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:aa:16:6f:b7:04:6e:c5:55:a0:31:c1:ae:
2c:d0:42:3e:32:c0:96:f0:58:78:f9:66:c7:41:f3:
66:d5:fc:76:00:de:6c:7d:b2:b7:9b:5f:90:a7:5d:
17:67:f0:1d:82:c0:14:97:0e:7d:10:d4:82:52:a4:
51:72:1f:a8:08:d1:be:37:2e:01:60:6c:5f:6f:29:
4d:7d:6a:38:f0:ca:a8:7c:c4:54:1c:37:d4:7d:3a:
7b:6d:fc:70:a3:21:23:f6:13:8a:9f:d1:97:4b:f8:
27:b0:4f:c0:fb:27:d0:77:05:18:b7:76:89:d5:b0:
7b:42:f2:16:eb:b7:db:0c:00:e7:8c:07:8b:c8:0e:
7a:f4:11:46:bb:8b:38:55:53:a1:d6:a3:63:08:98:
1c:03:11:10:f4:9f:b3:64:bd:e7:fb:b2:b0:28:a6:
e6:51:9d:05:ed:ef:16:b1:96:e3:bd:dd:6d:09:23:
56:2d:6a:f9:f5:91:02:15:e3:b3:3e:68:6e:e1:8d:
ae:5b:fd:19:2a:10:85:ea:7b:9b:7d:3c:fb:0d:3e:
0f:c5:7e:b7:59:c9:20:5e:27:3f:a3:13:ea:76:d4:
c4:18:17:67:ad:7d:a5:36:6a:89:5f:f2:10:bd:93:
0c:0d:6d:36:86:42:9f:f3:1d:c2:c2:21:a8:31:ee:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4B:05:56:BC:A1:5D:B1:BF:98:EA:00:E0:81:A7:47:C5:36:4B:70
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:91:8a:38:ea:21:3e:6f:ec:27:60:66:7e:4c:1b:ad:8c:ed:
cd:a8:ea:56:8c:04:01:eb:96:05:ea:c5:cc:6a:75:96:c8:4e:
9c:4b:1b:75:8e:60:fa:02:9b:55:0b:8b:84:58:7b:8a:64:d7:
b9:21:ed:7d:79:21:57:c4:37:36:1c:9b:ef:12:f0:79:c8:3e:
83:b6:01:71:45:ee:ef:90:21:de:0a:d5:7f:92:78:c6:76:28:
a7:d8:a4:cc:6e:ac:9e:7b:d2:f1:6b:1a:75:3a:75:e6:3c:15:
bc:23:0c:e8:7f:ca:66:23:09:39:ce:11:b5:a8:d1:9e:43:d5:
ef:08:8e:74:60:ef:e6:95:ea:8e:37:57:36:b1:c8:28:07:4a:
d7:08:4e:51:16:db:dd:05:36:aa:7d:5d:28:e2:27:39:14:4a:
17:34:95:c3:30:f2:ba:af:9e:3f:af:4d:30:9b:32:4c:7e:07:
83:02:5d:a1:d1:72:14:07:f8:2d:6f:8f:b1:5f:25:81:92:97:
f2:61:86:90:ad:df:64:e1:8b:fb:c3:a0:ba:62:5f:ed:c2:ad:
e0:11:53:ed:13:55:bb:74:a4:1b:e8:76:9f:6a:0f:a4:b8:92:
a2:c0:1e:7d:77:48:6b:6b:58:99:06:fe:5c:23:bc:74:ae:f3:
0c:6b:ff:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:06 2025 by rpki-client