
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier: JBAlQGpxPMczcKu99SSRZuh5mXvEnW3vNOB4l1lutOo=
Subject key identifier: E6:D0:40:20:D2:97:7E:2E:8A:D6:C3:40:D6:F3:B4:B4:45:08:6D:B2
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 0198D6980FF2A149AC4C9AB1B8C9B1A4A1BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number: 11E3
Signing time: Sat 23 Aug 2025 11:02:26 +0000
Manifest this update: Sat 23 Aug 2025 11:02:26 +0000
Manifest next update: Sun 24 Aug 2025 11:02:26 +0000
Files and hashes: 1: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: ShPKuXy0F0vQxQfi9UPNzrWco4p5RrSpwLTQ7/na0PE=)
2: pvaPM5j3-BPWJpSuaWFE01jgVBg.roa (hash: vcFvxHEzp1YnutqV+Bq+p/f/FPwpa1xjzTG6Rie7rFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:0f:f2:a1:49:ac:4c:9a:b1:b8:c9:b1:a4:a1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: Aug 23 11:02:26 2025 GMT
Not After : Aug 24 11:02:26 2025 GMT
Subject: CN=e6d04020d2977e2e8ad6c340d6f3b4b445086db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:bf:41:72:5e:29:9d:be:97:3b:7b:a4:99:
d2:e7:97:62:58:e1:26:6a:ee:91:94:ed:e9:f9:47:
c7:e7:f5:67:c5:81:b2:6c:bb:89:95:a2:a7:ba:59:
86:8a:b6:17:0c:7e:a3:cd:b0:be:fb:47:90:c7:ca:
26:f5:65:2e:9b:d2:97:d0:2d:bc:71:c9:7b:66:87:
4f:5f:b3:3e:d1:32:75:77:83:52:a9:38:4e:04:72:
64:65:a3:8b:5c:9b:9d:d4:de:34:ec:67:56:f3:f7:
72:b0:76:df:1f:73:1a:f6:cc:1b:d1:2d:87:5e:79:
63:27:71:0c:76:4f:bf:96:c9:cb:de:87:70:f3:f9:
79:dd:69:a0:91:db:27:09:44:b9:ea:c0:2d:c4:0f:
55:26:ba:80:65:de:d6:86:73:a5:bb:d9:54:08:25:
93:44:d6:30:c3:ee:b5:01:e8:18:8a:b3:ad:cc:01:
40:36:a3:77:7c:a7:8f:e8:86:3c:60:7f:ba:f3:3c:
5e:b9:1e:4d:f9:72:52:15:bc:78:eb:76:4a:c2:3d:
3b:bf:da:36:cb:de:7a:97:af:fa:39:66:40:fd:9a:
56:a3:a0:ce:3e:05:96:a6:26:1f:6b:3f:9d:1c:bb:
2b:6c:15:11:1f:9f:be:a8:0e:4c:a2:e2:d3:12:77:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D0:40:20:D2:97:7E:2E:8A:D6:C3:40:D6:F3:B4:B4:45:08:6D:B2
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:66:5a:8e:12:7c:78:a8:b4:57:3a:d8:01:be:76:47:ea:af:
a0:87:bc:4e:77:c4:4c:fb:b9:6a:e0:94:db:68:0b:95:a2:b2:
63:8e:55:93:dd:ed:b6:43:73:64:d8:5b:44:4f:be:63:8e:58:
28:da:40:5b:af:a2:7c:65:0b:f1:22:bc:50:70:54:13:ed:9e:
d3:c7:43:e9:7c:f7:4e:03:95:eb:a2:3c:24:49:42:88:5e:58:
d0:19:bc:97:8b:08:44:8f:2f:6a:7d:ad:e4:51:cc:c9:10:0a:
81:97:9b:cc:28:8e:14:27:06:71:d1:10:2b:b8:e7:d7:bd:72:
67:46:35:23:b8:44:fe:3a:6b:45:f1:03:c8:f4:ad:a8:a8:75:
64:69:2a:d0:0c:6f:9e:9b:e9:39:e9:00:e5:0d:ba:07:50:85:
c7:e0:4d:35:e2:3b:93:fe:26:69:0b:29:3c:f3:b9:0c:9e:f1:
a2:ae:cb:44:65:30:7d:d0:28:4c:15:86:f7:da:55:0e:ed:26:
7d:60:8a:68:dd:1f:a4:4a:5b:fe:91:be:ae:c3:e1:f3:53:2f:
fc:99:44:bd:05:d1:81:7e:a8:1a:0a:2f:85:b5:fd:55:8b:8b:
af:0d:69:28:14:fb:63:2d:d0:d9:92:40:e0:c7:89:3a:35:48:
ee:0f:19:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:11 2025 by rpki-client