Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
File: lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft (raw, json)
Hash identifier: V7aKz/EI1aH0qMKllUVhtUGsBEMIJLkLtfSFAzKjZ98=
Subject key identifier: 15:AC:47:3A:34:CE:17:3E:69:86:86:52:88:41:47:E5:10:22:6B:5A
Authority key identifier: 96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
Certificate issuer: /CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Certificate serial: 0199FC5900D814454CF5BD7DAB607C72CB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
Manifest number: 05AC
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl (hash: GYfVpxLWFUdaoMX3Xqo/sszFicLcBvocX0e7BCDquVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:00:d8:14:45:4c:f5:bd:7d:ab:60:7c:72:cb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=15ac473a34ce173e69868652884147e510226b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:01:90:3c:a0:1a:5d:c2:8a:05:44:23:a9:
d3:00:0c:6f:7c:8e:8a:77:8f:28:ed:02:ba:d6:8f:
91:1b:27:19:5f:5a:81:92:44:5e:fb:de:34:a0:ae:
91:08:b4:f5:8f:01:ef:6e:b0:0f:cf:84:f1:73:16:
33:38:50:1d:3b:76:5d:cf:87:b5:b1:86:ea:a3:fa:
0b:df:00:99:fc:60:b3:79:df:ac:30:0c:b4:37:37:
56:f9:58:37:de:f1:01:f7:3f:07:f1:fa:8f:8b:18:
2e:32:3c:bb:14:a8:a6:32:ba:c4:ca:ac:56:fb:b2:
2a:70:fc:bd:5b:f2:e9:ac:f0:74:3d:b9:57:ee:3f:
f1:d4:19:7c:12:b3:b6:91:85:4c:e0:fc:54:69:d8:
77:76:13:53:7b:74:aa:84:dd:f1:ce:a7:ff:46:82:
a6:e7:8f:ce:27:74:d3:e8:f4:59:15:c8:27:e6:08:
df:77:d9:8c:4e:5d:03:58:9d:63:e4:2c:14:96:b0:
81:c2:88:4b:b8:04:f6:6a:2f:a4:9e:de:81:8c:42:
1b:4a:f9:02:98:dc:0e:8d:fc:fd:8a:bb:77:a4:c3:
28:31:cb:84:3b:0b:f1:eb:a9:04:a3:e1:fd:13:8b:
8a:98:12:a8:f9:8d:f2:28:f1:a2:d6:2c:a2:76:1a:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AC:47:3A:34:CE:17:3E:69:86:86:52:88:41:47:E5:10:22:6B:5A
X509v3 Authority Key Identifier:
keyid:96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:60:47:b3:fa:41:da:f7:10:89:06:df:99:b3:fc:3f:00:f2:
82:9a:f4:33:0e:6d:c3:12:ab:ba:7f:42:7a:5c:b7:26:0e:d3:
d1:80:2a:ed:0a:72:6f:10:71:da:3e:a6:00:a4:54:7d:fc:95:
d6:51:ce:33:c7:35:ab:49:8b:c5:59:47:55:28:53:67:8a:85:
f3:ad:17:0f:56:70:4b:92:d2:3e:eb:91:7e:18:8d:eb:a8:15:
47:1d:1d:52:82:ce:a5:18:8e:d3:aa:21:e9:08:b2:57:26:ae:
db:69:05:99:5f:c7:4c:7e:91:46:29:8d:25:be:e2:19:11:05:
3d:3e:03:4d:09:fc:f6:80:f4:01:2a:5a:e6:d9:6f:86:a5:79:
80:47:dc:9f:f7:1d:34:08:2f:c1:7d:fe:2e:a8:92:9b:7b:0b:
ee:48:52:cb:f3:f0:11:18:9d:b3:a4:3f:1b:b6:53:e9:0e:d9:
7c:df:e3:0d:a4:90:05:2a:6c:2d:64:f9:f5:a5:30:11:12:2a:
6e:59:83:37:b7:da:46:87:79:dc:2a:a7:2b:be:bd:75:7b:7c:
53:e4:ed:0c:39:ae:f9:1d:b7:33:ab:6d:f1:fb:b1:37:5a:d6:
6e:90:70:65:f3:8b:47:d7:72:9a:76:4b:a1:be:05:99:e9:75:
b3:a4:f7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:58 2025 by rpki-client