
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier: Kt19J5QGP3Z/7ncNmFMdAYCrOOca/dpQCgJUqTEcdlM=
Subject key identifier: 3D:54:E8:E8:DF:EB:1D:CC:40:E4:AB:E0:C6:B9:85:7E:8B:39:4C:24
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial: 0197B820E785F67D2B65F6167A252666C846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number: 0FE8
Signing time: Sat 28 Jun 2025 20:00:53 +0000
Manifest this update: Sat 28 Jun 2025 20:00:53 +0000
Manifest next update: Sun 29 Jun 2025 20:00:53 +0000
Files and hashes: 1: Glr6u_s5CXtQU33JFdKRNodC1Uw.roa (hash: xJAriWKl+PmbnYJ4BpPrX2q/YRb7AyfnBhDH2V2YYdU=)
2: UpeD63AhvaLPHL7cT3GFojz3Ckk.roa (hash: mEkJtV27z/pufpdRebXs4QzlDSFPeuvtLb6yKnLyJS8=)
3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: RIW+kt07TLy+X5AM3WbT6CiSfeO6EmwjHsHNy5/s0YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e7:85:f6:7d:2b:65:f6:16:7a:25:26:66:c8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Validity
Not Before: Jun 28 20:00:53 2025 GMT
Not After : Jun 29 20:00:53 2025 GMT
Subject: CN=3d54e8e8dfeb1dcc40e4abe0c6b9857e8b394c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6c:f9:52:e0:97:f2:01:9c:3c:c7:cb:ef:5e:
eb:bb:1a:57:75:4c:93:e8:85:f1:ca:55:2e:67:4f:
71:b1:31:c6:4e:0c:ca:f6:79:58:49:a8:b5:81:d9:
97:7b:9b:65:3a:41:b5:e5:cd:77:0c:07:17:e4:eb:
0e:b7:3a:b9:19:57:b6:22:74:3d:5d:c6:e5:c9:dc:
b4:de:a0:d5:1a:60:d6:f8:cb:b0:0c:dd:47:0b:b9:
83:38:b3:83:9b:ed:80:66:25:85:3b:03:1c:dc:50:
4a:bf:62:3c:81:3d:c5:43:d9:49:60:bd:63:cc:21:
bd:34:47:65:72:5d:56:b0:2d:73:e5:d3:c5:bf:a4:
89:83:68:9a:47:ca:36:86:d5:bf:a0:dd:8a:ae:73:
f5:0a:89:a8:1f:ff:e3:9e:16:3f:5a:96:59:22:9c:
02:e2:da:2d:ee:2a:00:74:86:6c:43:e8:3f:b3:96:
68:52:ef:f2:2a:0c:20:6e:9c:a2:7c:47:8d:56:ef:
36:fa:f7:56:9b:68:c2:24:30:9f:f8:9b:38:b7:03:
c2:66:fd:f6:42:a2:82:39:08:c3:16:dd:a9:81:fa:
5a:24:f6:78:d2:47:ed:63:d3:9f:e4:c0:1b:53:25:
c0:a9:d4:22:9f:f7:fc:21:9d:c2:8d:80:a3:a9:9d:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:54:E8:E8:DF:EB:1D:CC:40:E4:AB:E0:C6:B9:85:7E:8B:39:4C:24
X509v3 Authority Key Identifier:
keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4c:e7:69:80:32:fe:5c:5e:2a:a4:d9:2a:76:25:c8:46:fd:
a7:97:36:c4:57:a1:79:a6:c2:d2:96:c0:4b:05:d4:ee:d7:f7:
43:55:fb:c9:d5:fd:14:f0:18:18:4a:87:f9:bd:35:75:df:00:
29:b9:89:43:51:a6:ec:c0:e7:13:c2:78:52:89:49:48:48:de:
b3:23:d9:40:38:b9:48:9f:27:3f:43:c6:51:fd:ed:63:ad:2a:
c0:eb:37:c6:3b:88:37:9f:b9:8c:b6:d1:a2:b9:79:45:c1:94:
2c:1f:45:7a:c6:c3:68:35:72:eb:52:af:bb:dd:92:0c:b5:9a:
6c:9b:8b:9a:d7:cf:f1:e9:71:49:9f:06:ae:1c:04:d1:0b:4a:
80:6e:ee:51:c3:c5:99:5d:80:56:28:ce:6d:d3:44:cc:e8:44:
6b:66:73:bc:1a:61:eb:76:5a:aa:44:f0:a4:ef:8a:85:8d:50:
d8:dc:ff:ce:35:16:fc:f3:eb:b6:0e:a4:20:cf:50:ff:9c:a1:
15:0d:36:f2:d0:9f:0d:2a:5f:43:d6:20:53:dd:2e:da:47:13:
0f:d2:e0:8e:96:58:8d:d5:ca:b8:f5:9b:92:8e:ed:9a:f3:03:
f2:6d:9b:76:8c:d0:b7:80:6b:69:3f:ce:a0:55:18:14:81:24:
84:06:b0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:37 2025 by rpki-client