Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
File: lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft (raw, json)
Hash identifier: 3Bc5bQTt/ew23+gaZN0fuZtULJ5KGYxpmTtcN1OYRIc=
Subject key identifier: 38:1B:E7:41:2B:5F:A1:88:B3:C2:D6:40:13:21:AF:98:B7:FF:AB:67
Authority key identifier: 96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
Certificate issuer: /CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Certificate serial: 0198D4E0872FE8E1D61E34DAF7692519C025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
Manifest number: 0513
Signing time: Sat 23 Aug 2025 03:02:21 +0000
Manifest this update: Sat 23 Aug 2025 03:02:21 +0000
Manifest next update: Sun 24 Aug 2025 03:02:21 +0000
Files and hashes: 1: lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl (hash: 1yLOa5iOGI4HJ0oasSs8vyBfxe7xtCYAZuvn4BEK86o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:87:2f:e8:e1:d6:1e:34:da:f7:69:25:19:c0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Validity
Not Before: Aug 23 03:02:21 2025 GMT
Not After : Aug 24 03:02:21 2025 GMT
Subject: CN=381be7412b5fa188b3c2d6401321af98b7ffab67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:b2:f5:eb:7f:c0:27:08:be:d2:e9:b4:83:
c3:34:24:22:ae:4b:12:91:f1:64:01:16:bf:42:28:
3e:ae:2a:0e:5d:85:06:94:12:32:1e:00:61:c1:19:
39:c2:5e:7a:45:c9:37:35:fb:c3:29:a5:a5:01:8b:
88:53:3a:78:dc:cb:ae:ed:b6:cf:40:e1:14:9c:ae:
59:f9:c2:97:13:cd:5f:1b:70:4b:cf:0f:45:24:35:
88:bc:fc:21:6e:8b:8c:fd:26:19:ce:d3:e0:8a:17:
88:f0:34:49:ec:dd:31:39:5f:62:e3:47:5c:d9:1b:
b4:2f:76:32:06:64:cd:2f:09:eb:0c:d0:8a:1c:10:
8d:f8:94:67:06:31:02:ba:66:cd:b8:00:3c:11:3c:
5a:64:58:18:5d:ac:8c:43:16:62:ae:4d:c9:b5:0f:
78:b6:70:53:3f:91:3a:3b:72:54:4d:e1:19:c0:ea:
cf:78:81:29:97:a6:13:88:a8:81:a6:e9:60:91:93:
9b:a5:2e:fd:13:91:fe:fa:16:81:43:bb:05:4a:6a:
60:17:59:f9:1f:58:b2:f4:c3:0f:76:5e:ff:64:03:
e5:7b:46:83:88:a7:25:45:ee:63:06:ac:b3:56:3f:
4c:7d:6e:1c:4f:bc:b1:dd:68:df:fe:f5:f2:c4:09:
fe:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1B:E7:41:2B:5F:A1:88:B3:C2:D6:40:13:21:AF:98:B7:FF:AB:67
X509v3 Authority Key Identifier:
keyid:96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:17:7a:66:83:1c:46:21:7c:d1:dd:1c:21:49:e1:17:ee:ba:
06:16:74:32:d3:d0:65:1a:f3:f9:d5:0c:cb:fe:e9:4a:5e:e1:
83:07:09:aa:3e:10:27:4a:72:2e:72:7a:e0:bb:0e:1d:57:1d:
d5:b7:d2:95:b9:63:36:f5:8e:2c:3e:88:f6:27:b7:b9:b4:21:
31:0f:99:40:6e:dd:3e:cb:25:82:9d:3e:39:1b:35:f9:29:ed:
14:31:26:49:96:4c:c3:cb:89:4f:dc:17:b3:71:a1:5a:2f:ac:
f4:5d:68:22:5c:2c:9f:67:7f:3a:48:20:d0:a5:70:a4:34:9d:
6b:f4:fb:8e:c5:94:63:a8:33:7f:f3:b0:9f:a5:d3:10:36:da:
4a:fc:f0:89:89:ca:8f:d3:db:77:f1:89:41:ad:80:e9:02:f0:
61:3f:71:9e:80:ad:13:48:29:5e:6c:7d:69:13:e8:4b:3b:85:
36:f8:1e:b2:ee:2c:59:99:6f:4f:7a:42:55:39:1a:33:ac:c6:
cb:5c:36:17:73:9d:48:96:63:8d:34:c4:92:d5:f0:65:e2:89:
0f:88:4f:f4:31:3a:6d:6a:1f:1c:32:06:9c:ba:2d:47:6e:6c:
53:e8:89:4b:37:39:de:02:03:6a:f3:33:59:24:40:41:80:c9:
72:54:89:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:56:23 2025 by rpki-client