Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier: 99/8huRUMSCLYSIQmNnotL3dvvrWvIIdoXOYcvNGwg8=
Subject key identifier: 49:F5:7D:C3:A7:54:18:EC:40:24:38:38:24:16:C8:A5:71:E3:24:FF
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial: 0198D54E1C674F84D8F039FF16E3E466E37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number: 08BF
Signing time: Sat 23 Aug 2025 05:02:02 +0000
Manifest this update: Sat 23 Aug 2025 05:02:02 +0000
Manifest next update: Sun 24 Aug 2025 05:02:02 +0000
Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: L7jwNLjU0IbJomT5P0aUubFLPgs2DpmWOMOdSJ5Xpcw=)
2: yyEfKYzfWifnZltk7ctCY5A-44M.roa (hash: Bx/CCORj4vVt+Qie6xpQv8J6eghjTLCeuziTvvg5CUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1c:67:4f:84:d8:f0:39:ff:16:e3:e4:66:e3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Validity
Not Before: Aug 23 05:02:02 2025 GMT
Not After : Aug 24 05:02:02 2025 GMT
Subject: CN=49f57dc3a75418ec402438382416c8a571e324ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:ba:c5:72:22:6c:4e:75:39:54:f3:68:04:
3b:0e:b2:c5:41:4d:61:49:b2:04:44:29:23:97:97:
68:ac:b7:7b:68:f9:c2:09:6c:8c:e9:14:d9:21:99:
75:03:fb:44:b1:f2:ef:c6:69:2d:32:f8:94:59:30:
02:bb:86:4f:0d:5f:c4:f5:2a:e9:f1:e0:1d:3b:2d:
70:e6:d5:3c:4a:68:7a:ec:9b:57:c0:91:fd:08:40:
6b:30:c5:ec:96:09:0e:e9:1d:73:55:08:aa:13:63:
b3:38:4d:fd:d2:66:2e:5a:ed:9f:49:88:07:ed:fa:
82:1c:95:93:d9:b3:32:db:dd:f8:84:85:f0:47:71:
d1:c1:58:cb:c1:f5:22:9b:f8:a3:df:f6:98:0d:05:
0a:0f:14:bb:87:52:bf:4a:15:d4:84:18:1d:d4:3b:
44:ed:2e:f6:62:f7:61:cb:65:0d:47:d8:71:c3:01:
9a:bc:2c:b4:7b:8f:f2:ac:e8:03:07:13:b3:14:d7:
c4:0c:e1:5d:ad:4b:bd:c2:ed:1d:ce:a7:18:5b:67:
3e:c2:57:35:5b:62:51:4c:95:8c:27:0c:15:be:fb:
f2:6d:9d:46:d8:67:5e:08:4d:a9:52:b1:a2:ea:a7:
b3:1d:d8:d1:46:68:d9:5e:78:46:9e:da:71:50:62:
6c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F5:7D:C3:A7:54:18:EC:40:24:38:38:24:16:C8:A5:71:E3:24:FF
X509v3 Authority Key Identifier:
keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:01:83:6b:25:98:a0:10:cc:af:a1:8f:52:79:9b:7b:0d:5b:
18:bc:a4:b2:b0:f7:f3:57:05:d4:bc:fe:cc:d1:62:37:c6:17:
d9:aa:3d:7d:9c:9c:14:29:d2:8b:10:d2:a6:34:91:00:ca:93:
22:2a:02:3d:1b:3c:ed:89:bf:4a:eb:b9:68:33:00:b6:82:1d:
5b:f7:80:10:cf:73:73:d4:a0:bc:f9:9f:7a:15:c1:c2:95:d8:
12:cd:f9:bf:6e:b8:9c:98:fd:6d:35:fa:4f:6f:a8:26:13:53:
41:6b:60:24:1b:d2:d0:0c:7e:f0:4e:b0:3f:3b:4d:13:8a:db:
80:b5:4b:07:72:98:75:c2:4d:c7:33:09:1a:09:08:58:36:bb:
18:02:e0:d1:99:4e:f6:bc:59:49:45:56:40:18:20:8d:3e:5f:
88:0e:8f:a7:24:2b:ff:b9:05:a2:b9:7d:a7:45:d0:7a:e1:1f:
9e:54:14:fd:79:74:be:79:1b:21:5c:dc:24:81:9d:2b:c7:b1:
de:20:b3:33:d2:16:ca:0b:1c:cf:93:ee:a0:29:b6:85:1f:17:
8b:2d:df:8e:31:43:b9:a6:00:01:8d:be:48:75:47:99:8c:d2:
ce:14:ac:e2:65:29:41:9e:0d:f5:92:13:51:b2:e8:e0:e4:57:
fe:cd:49:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVThxnT4TY8Dn/FuPkZuN+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZjE5NzdjZjE3ZmU0ZTFkZTJmMTYyOTNjNjY5ZjQ0ZDVi
ZDc0MzMwHhcNMjUwODIzMDUwMjAyWhcNMjUwODI0MDUwMjAyWjAzMTEwLwYDVQQD
Eyg0OWY1N2RjM2E3NTQxOGVjNDAyNDM4MzgyNDE2YzhhNTcxZTMyNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Pe6xXIibE51OVTzaAQ7DrLFQU1h
SbIERCkjl5dorLd7aPnCCWyM6RTZIZl1A/tEsfLvxmktMviUWTACu4ZPDV/E9Srp
8eAdOy1w5tU8Smh67JtXwJH9CEBrMMXslgkO6R1zVQiqE2OzOE390mYuWu2fSYgH
7fqCHJWT2bMy2934hIXwR3HRwVjLwfUim/ij3/aYDQUKDxS7h1K/ShXUhBgd1DtE
7S72Yvdhy2UNR9hxwwGavCy0e4/yrOgDBxOzFNfEDOFdrUu9wu0dzqcYW2c+wlc1
W2JRTJWMJwwVvvvybZ1G2GdeCE2pUrGi6qezHdjRRmjZXnhGntpxUGJsxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEn1fcOnVBjsQCQ4OCQWyKVx4yT/MB8GA1UdIwQY
MBaAFJbxl3zxf+Th3i8WKTxmn0TVvXQzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNGE0N2QtNmE0ZC00ZTE1LWEyMzgt
Nzc0MGIzZDY5MDVlLzEvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNGE0N2QtNmE0ZC00ZTE1LWEyMzgtNzc0MGIzZDY5MDVl
LzEvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAGDayWY
oBDMr6GPUnmbew1bGLyksrD381cF1Lz+zNFiN8YX2ao9fZycFCnSixDSpjSRAMqT
IioCPRs87Ym/Suu5aDMAtoIdW/eAEM9zc9SgvPmfehXBwpXYEs35v264nJj9bTX6
T2+oJhNTQWtgJBvS0Ax+8E6wPztNE4rbgLVLB3KYdcJNxzMJGgkIWDa7GALg0ZlO
9rxZSUVWQBggjT5fiA6PpyQr/7kForl9p0XQeuEfnlQU/Xl0vnkbIVzcJIGdK8ex
3iCzM9IWygscz5PuoCm2hR8Xiy3fjjFDuaYAAY2+SHVHmYzSzhSs4mUpQZ4N9ZIT
UbLo4ORX/s1JiA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:39 2025 by rpki-client