Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier: F3XqoRBpFczLUrTOot2QQTwl2CGEENF5bW7gUt9aXTo=
Subject key identifier: DD:16:CD:73:A6:03:80:55:13:E3:4A:51:BA:71:52:4E:5A:1D:73:53
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 0199FD342AEBE24EC293D79D4550856D2553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number: 113B
Signing time: Sun 19 Oct 2025 16:01:18 +0000
Manifest this update: Sun 19 Oct 2025 16:01:18 +0000
Manifest next update: Mon 20 Oct 2025 16:01:18 +0000
Files and hashes: 1: 00zUmefDnJyqqgzSdsn0MV9Tkqo.roa (hash: huADW82oDJAq5twpGQcGLwROZsWOsqN3XkZE8P766lk=)
2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: fY4BTa6tLBlKp8Uf1kTwmPG6sAyEJwQNHsKGYGIHa6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2a:eb:e2:4e:c2:93:d7:9d:45:50:85:6d:25:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Oct 19 16:01:18 2025 GMT
Not After : Oct 20 16:01:18 2025 GMT
Subject: CN=dd16cd73a603805513e34a51ba71524e5a1d7353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:96:41:e9:54:ad:0a:7d:6b:35:20:62:83:
60:28:80:86:93:3f:91:ea:4e:09:96:05:95:29:d7:
b3:93:c8:a3:36:46:96:72:a4:e1:91:b6:6c:1d:c8:
14:24:27:ee:c0:0e:37:96:b0:69:b4:39:9c:ad:3c:
e8:e9:e1:83:84:42:51:3b:c6:c8:1f:4c:06:f6:9a:
07:e1:e0:27:95:45:f1:e9:0a:00:0e:22:8f:a6:d0:
8f:b5:f8:b9:38:79:46:ae:29:cd:73:dd:33:56:81:
9b:01:c6:32:e8:b6:6e:43:ea:ad:41:c5:60:28:a3:
1d:5c:05:18:95:30:e4:f2:4f:e9:9a:a2:f8:96:2a:
4e:b6:7f:89:fd:84:0c:49:b6:e1:26:ab:50:8e:99:
ed:e9:d0:9e:4b:45:ef:4f:8e:91:72:f2:5e:8d:b4:
91:3e:b5:11:20:6e:0f:f9:7a:4a:ab:14:44:0d:21:
b1:79:5c:7b:20:76:3c:4d:5c:c8:8b:59:de:ab:9b:
13:ba:d1:80:48:c5:bb:56:02:a9:bd:d8:6a:97:8b:
98:7a:3f:8b:f9:ca:f9:18:56:ef:c3:f1:3b:d4:28:
30:40:72:8f:3d:11:6b:d2:42:c4:be:6e:2e:be:ca:
18:fa:31:10:91:56:24:2c:96:bf:61:c5:d7:7b:1e:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:16:CD:73:A6:03:80:55:13:E3:4A:51:BA:71:52:4E:5A:1D:73:53
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fb:df:1d:57:0e:f4:28:0a:46:03:fb:02:8c:f1:74:c2:fa:
cf:a0:dd:6c:11:33:a7:93:5b:80:a1:7f:9e:be:72:58:53:ab:
8e:d4:f3:3e:d2:de:4c:0f:4c:e8:c3:8a:84:8f:a1:36:57:ca:
89:44:6f:c1:b2:57:b2:aa:9b:1a:41:38:17:f3:22:17:d4:41:
c4:5e:02:77:80:c8:66:ab:c6:26:10:90:8a:8c:d3:66:38:1d:
b0:65:09:a7:99:96:1d:0e:26:1a:55:d0:82:4f:d9:bf:63:50:
47:3c:62:66:95:de:14:82:50:0a:76:54:22:4b:1f:d6:ef:39:
37:be:4b:77:ce:bb:10:9c:de:3e:8a:3c:ee:17:5d:71:84:16:
94:62:5a:35:02:fb:0c:3c:d0:19:73:2e:3a:fd:48:07:c9:f4:
f6:95:de:df:ba:2f:af:b0:ca:3b:93:a3:ea:19:c7:04:e8:f3:
7c:c3:a4:3f:96:f7:0d:12:4c:d8:73:71:54:2d:8b:68:43:2b:
cb:6f:e9:04:d2:24:32:c8:b6:9d:43:3a:13:77:26:3e:90:61:
fc:24:04:97:1f:09:d6:e4:c9:0f:32:d3:de:38:b2:48:50:7e:
40:7e:5b:6a:5e:fd:e8:c6:88:b6:9e:10:66:76:5a:20:0f:5f:
68:4a:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:16 2025 by rpki-client