Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier: 39bjbnNj54oymdrF0SD7HLq6cUcrc8LOz22Ae2TVWdQ=
Subject key identifier: FB:03:1A:8C:7D:34:F2:D8:6D:38:05:39:93:AC:23:95:F8:BA:8B:ED
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 0199FC21B26ACACBC89FFB4022D4E2EA2824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number: 127B
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: moSwa26S+3Qo4KUhdfLg5UDcVH5jKYe6PVQbs4DMg88=)
2: pvaPM5j3-BPWJpSuaWFE01jgVBg.roa (hash: vcFvxHEzp1YnutqV+Bq+p/f/FPwpa1xjzTG6Rie7rFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b2:6a:ca:cb:c8:9f:fb:40:22:d4:e2:ea:28:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=fb031a8c7d34f2d86d38053993ac2395f8ba8bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:6c:4a:9c:64:06:93:d9:93:49:41:2d:34:
d6:ed:b9:89:32:d2:6a:2d:c5:4e:8f:89:a6:fc:25:
bd:6a:aa:d6:c4:6b:0e:b1:a9:09:cb:0c:f9:8e:ff:
bb:c7:62:11:fe:89:24:cc:12:97:36:5e:1e:c7:24:
23:8d:4c:e5:c6:c8:93:9d:26:72:e7:5a:4a:3f:c1:
2d:c7:ff:38:b6:10:92:7b:ed:07:31:02:e7:cf:fc:
88:35:11:9e:b0:75:35:63:1a:f5:5c:ba:fa:5d:b9:
3c:b8:43:c8:c3:d2:1a:6e:5b:be:c9:00:99:50:71:
a8:77:e0:9a:a3:39:d5:fc:b2:10:fa:b1:7f:63:74:
d2:45:f0:45:9b:90:ef:0d:29:26:d9:cf:05:d7:eb:
a9:9a:82:a1:15:5c:ac:65:d0:65:d6:90:a1:cf:57:
82:73:f6:37:89:af:6f:fe:9e:c3:c3:a3:79:8a:bf:
74:40:0d:55:af:27:10:65:f5:ea:0f:4e:5c:ab:6d:
f6:41:fb:ec:d8:b3:61:d7:b0:e7:60:ef:97:d6:74:
f0:37:73:e3:de:40:ad:91:47:ae:1e:e2:47:f0:7e:
3b:b1:b6:0a:e7:97:62:b4:f4:3a:0d:54:db:90:78:
89:61:d9:f7:ea:a4:ed:80:bf:9f:ad:e0:b8:f6:ad:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:03:1A:8C:7D:34:F2:D8:6D:38:05:39:93:AC:23:95:F8:BA:8B:ED
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:36:63:47:48:64:96:dc:e6:2d:ac:5e:50:8f:e0:b8:fe:91:
bf:f8:3a:72:b6:bd:86:33:a5:c5:89:55:33:e4:c8:ac:cc:4d:
0d:e6:a9:5a:13:cd:c8:5f:e4:a9:47:fe:aa:71:a9:20:1f:ee:
9c:b8:20:dd:7a:5e:b9:e6:15:96:7c:8a:bb:4d:7c:35:b2:ce:
01:9a:a5:e7:1d:f9:47:a4:dd:1a:04:c2:3a:f5:f7:2f:eb:31:
4c:cc:67:00:9f:28:a8:87:2c:52:3f:09:11:77:80:df:ff:1c:
64:a0:e0:d3:26:0f:74:16:f6:db:5f:c5:fc:1e:e9:eb:4d:bb:
9f:6d:a1:a8:a5:27:dd:75:c5:be:d2:e2:48:80:56:a8:b5:88:
c6:b3:bf:0b:f9:ad:70:6d:c1:06:59:a1:83:76:c7:17:aa:bd:
29:3f:56:92:c4:e6:e8:5a:3f:cd:58:23:1b:52:4e:6c:9f:b8:
2f:2a:32:4c:6b:26:23:c5:5b:80:50:67:7e:82:b4:33:5b:e3:
a9:92:88:ba:b0:5e:73:f2:de:e7:da:c7:d3:ba:e1:45:2f:2d:
c6:fe:a2:b0:3e:af:53:dd:c1:2f:a0:6f:19:25:df:ab:11:c7:
08:08:e3:1b:d2:e2:61:e5:98:3f:50:2d:fd:c6:4c:0a:e3:73:
10:50:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:33 2025 by rpki-client