Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier: je6m9DFiXVaimegUUzj88dpmAF13OwMnQ+IBanO+2Ig=
Subject key identifier: 8E:05:45:47:76:1E:25:6F:43:50:A4:9B:89:52:18:3B:D8:00:EA:2C
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial: 0199FEB4995B78C8AD7DDFDA733838567080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number: 0959
Signing time: Sun 19 Oct 2025 23:01:12 +0000
Manifest this update: Sun 19 Oct 2025 23:01:12 +0000
Manifest next update: Mon 20 Oct 2025 23:01:12 +0000
Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: xuoEbuwTzvbC+qg048kWzSU8qq/2hSdVSP4SNWsw8CU=)
2: yyEfKYzfWifnZltk7ctCY5A-44M.roa (hash: Bx/CCORj4vVt+Qie6xpQv8J6eghjTLCeuziTvvg5CUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:99:5b:78:c8:ad:7d:df:da:73:38:38:56:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Validity
Not Before: Oct 19 23:01:12 2025 GMT
Not After : Oct 20 23:01:12 2025 GMT
Subject: CN=8e054547761e256f4350a49b8952183bd800ea2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cd:6b:29:22:b1:f5:b3:3f:71:a4:93:6f:e7:
39:f7:85:c4:41:ef:b3:d6:0d:f4:26:ab:ab:c0:07:
d0:5a:a8:01:88:58:a3:46:33:5b:39:f1:d9:45:9c:
19:bd:92:5d:6d:75:ae:d9:63:92:b2:4f:06:6d:13:
f1:44:39:8d:3d:a0:73:30:ac:4e:59:76:07:63:d6:
70:70:19:82:4e:1e:00:a6:81:44:0f:f7:33:94:a9:
00:be:ab:66:c0:41:4e:ab:03:cd:90:e9:80:f7:35:
f8:f7:59:37:f9:1d:64:92:db:c7:35:9b:30:10:5e:
e2:0d:c8:d9:a6:89:0b:7e:cd:96:3d:9c:76:fb:0b:
6c:32:75:3b:19:34:91:9e:4b:f4:0c:2d:c8:0d:62:
4f:b2:93:2b:3b:b9:e0:cf:83:29:b2:ef:be:71:3e:
3b:2c:cf:ea:63:ff:63:21:ee:2e:d7:73:b2:39:22:
9d:c4:82:a6:0e:38:95:24:ff:a9:66:ff:ae:bd:84:
61:c1:2f:70:95:0d:30:26:cc:5f:1e:3a:13:b5:7e:
91:09:d6:7c:eb:c1:3a:c3:01:81:73:06:2a:3e:47:
eb:95:6d:b2:06:95:e2:36:6a:6d:9d:3a:f9:16:5c:
61:67:a0:d4:f3:a7:67:f0:69:3b:81:aa:33:13:f3:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:05:45:47:76:1E:25:6F:43:50:A4:9B:89:52:18:3B:D8:00:EA:2C
X509v3 Authority Key Identifier:
keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:78:de:4f:54:32:56:ad:5d:1a:a0:ef:51:9a:47:7b:e7:92:
ba:be:08:97:7b:2f:36:fe:a5:94:24:7e:51:0a:ab:84:cf:e0:
83:8a:be:05:2d:cf:cd:09:f5:11:6d:81:fc:47:4a:89:fc:e1:
be:6e:5a:a2:46:78:7d:e9:ce:0d:0a:9e:6a:ff:a2:91:64:0d:
44:f0:52:a5:3f:6f:ef:6f:37:60:31:ed:2a:e5:76:d3:e2:8c:
30:ff:0d:d9:9e:a0:ea:a4:ec:38:e1:c8:2f:4c:6e:da:26:be:
d0:71:3b:7d:3c:c9:5a:0c:77:0b:d3:b0:c8:4c:bd:61:e9:c1:
19:ec:dc:66:48:86:3b:a1:e5:7f:0a:8f:ad:7a:ad:f3:73:1c:
c4:c0:e3:f9:f5:9f:73:f4:66:67:c5:f4:2e:bc:b1:bd:c3:13:
e6:42:ab:ba:92:e3:7e:55:49:4e:6b:65:d8:33:89:e3:5d:65:
c2:be:c2:cc:55:f3:67:71:bc:a5:0f:27:5f:b5:0c:12:99:02:
01:a7:5a:e3:24:86:25:24:f7:5c:af:4a:b2:1f:0f:e4:44:2f:
a5:82:b7:5e:1b:a1:f4:cb:24:4d:02:e8:f3:35:14:91:fe:87:
1d:44:7f:ce:d3:c4:f5:ec:9b:6a:74:b5:84:31:e5:43:e3:37:
0c:58:0f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:45 2025 by rpki-client