Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier: BfVqlERK+WN5SzN5XWeoAw9JoE+Kw5xPcAi/PYkN0/I=
Subject key identifier: F5:8A:30:1C:13:E9:15:7B:98:1D:7F:B3:8A:C9:E7:94:F8:BC:08:5E
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 019A0290F0D0219615BDABB0D2B148A181C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number: 140A
Signing time: Mon 20 Oct 2025 17:00:44 +0000
Manifest this update: Mon 20 Oct 2025 17:00:44 +0000
Manifest next update: Tue 21 Oct 2025 17:00:44 +0000
Files and hashes: 1: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: m2Vrxf+ApD3AywvKIylzf1VdEhh1XCzXkD8RknNOpLQ=)
2: _bmYfKJFyK9blFnDt5sQ68mX470.roa (hash: /IaqLo5gnKUuY45J9bE0d2C3v3+D2fXVryN2uunSGag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:f0:d0:21:96:15:bd:ab:b0:d2:b1:48:a1:81:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Oct 20 17:00:44 2025 GMT
Not After : Oct 21 17:00:44 2025 GMT
Subject: CN=f58a301c13e9157b981d7fb38ac9e794f8bc085e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:e8:a7:67:57:a9:f2:9c:cc:7b:4a:33:c1:
52:bd:b2:90:02:cd:c0:50:9a:bd:47:4e:18:42:be:
b3:57:da:2d:a4:93:be:c2:59:f8:c7:57:7d:12:15:
b9:2f:05:6f:fb:ca:17:0e:c5:38:4b:db:72:00:18:
1f:c9:25:18:a9:80:d1:73:2f:23:68:95:05:6b:7a:
c3:a9:6f:c6:8f:80:83:1d:92:1c:6e:78:35:30:7f:
bd:c4:01:ac:aa:4d:73:aa:4b:1b:e0:ea:30:e1:70:
80:82:2a:85:cb:a3:7e:9d:02:aa:dd:92:cd:52:52:
35:98:e3:57:ed:71:f8:dc:1b:4c:8b:04:cf:70:f4:
ff:7f:cc:97:0f:f8:a9:00:7e:a6:a3:0d:a8:ef:07:
2e:2c:0f:e3:ae:0b:61:f0:28:84:ee:c9:f3:f8:60:
81:4d:dc:e9:92:df:68:78:fb:c4:03:ba:16:5c:49:
37:11:f6:4e:66:cb:30:ca:a0:ea:24:a7:e9:cd:a0:
0f:ff:d8:a4:cc:3b:6c:73:94:2c:e4:87:4a:39:10:
7e:d9:8f:bf:1f:ca:40:59:8c:fa:8a:3e:19:af:ac:
5b:d7:99:12:85:e2:97:7e:4c:bd:04:9b:7c:21:8e:
c3:f6:df:02:25:31:af:0a:5f:0a:e7:87:d4:a3:27:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8A:30:1C:13:E9:15:7B:98:1D:7F:B3:8A:C9:E7:94:F8:BC:08:5E
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:05:d5:75:7c:8a:6f:73:49:62:85:60:57:6d:60:3a:2f:f7:
95:37:1d:e3:14:cd:d5:e1:85:e9:f7:05:66:80:06:15:00:b7:
13:af:a4:e8:41:83:c8:7b:45:4e:10:89:7f:fd:87:15:a7:2a:
77:ff:11:8c:5a:4c:ac:4e:41:b6:e1:1e:0a:21:be:e6:6c:43:
1a:7e:8b:1b:8a:b9:a8:19:b7:3a:f9:3b:57:6d:ca:a9:57:a1:
ac:58:a7:dc:fc:7b:bc:4e:49:f7:e7:35:d4:06:79:e6:3a:1c:
b9:b9:96:2d:1e:e7:13:dc:47:e2:9c:3d:b2:f0:d6:5f:f4:b3:
b3:b9:4f:83:1b:c4:2b:6b:a7:d1:60:5e:67:ca:59:51:7f:9e:
0f:b5:65:bb:29:ee:48:b4:51:40:7a:04:7e:2d:99:90:49:37:
e6:3b:46:ae:3d:90:1e:00:67:05:c3:a6:0b:41:84:8c:32:1a:
ac:97:37:00:5c:90:00:13:34:76:2d:2b:bc:05:d8:63:a7:76:
80:ee:56:2b:bd:4b:e2:1b:b3:9d:ed:ee:ad:ad:b7:9b:f6:d1:
aa:51:9d:38:8e:d4:7d:56:bf:87:00:cd:bb:c8:59:61:55:7e:
76:46:af:eb:61:77:23:a7:8d:33:15:64:b2:6a:cf:9e:a6:77:
b0:af:5e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:06:33 2025 by rpki-client