Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: FoWSLMoomunnN33CygGq2+72Z/+XNRUr8GI98bwpbZ4=
Subject key identifier: F4:93:45:0D:E4:3D:AA:E1:BD:A2:DA:B7:C7:37:45:C6:C5:65:39:D3
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 019A54F699EAEA2711F7BF0DDD624F9ABA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 0568
Signing time: Wed 05 Nov 2025 17:00:38 +0000
Manifest this update: Wed 05 Nov 2025 17:00:38 +0000
Manifest next update: Thu 06 Nov 2025 17:00:38 +0000
Files and hashes: 1: A3mZEclriGszqRGoUvbHgF-KInU.roa (hash: i8Kmi4yyeQAKrcdjfPdTmfjuSQ/uP2lhkQpuex0W13Y=)
2: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: CkTLW6eJMd65rx3CK2jughexQ1iW0kYGVPMrRilUQW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:99:ea:ea:27:11:f7:bf:0d:dd:62:4f:9a:ba:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Nov 5 17:00:38 2025 GMT
Not After : Nov 6 17:00:38 2025 GMT
Subject: CN=f493450de43daae1bda2dab7c73745c6c56539d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b8:3a:b0:b6:63:6b:95:02:6d:ea:9d:50:bf:
90:1e:c0:fb:d1:6f:76:f3:5c:0d:ef:c9:a2:78:12:
9b:9a:9c:b4:cd:8a:0c:70:ee:81:5c:e3:4f:da:57:
2f:86:39:22:c3:cc:66:7e:a5:36:91:7a:e3:18:61:
e9:3a:b3:09:68:88:b1:48:28:2e:a0:5f:a2:84:50:
9f:a1:79:4a:63:7d:14:da:e2:c4:9a:75:26:46:c8:
f0:db:f0:d1:f2:13:f5:25:6a:07:c8:da:cf:31:7f:
db:cb:a0:fe:43:4d:36:44:85:ad:10:26:0d:90:cf:
83:cd:6b:cc:4d:8e:94:7d:6e:b2:de:ce:29:4c:dd:
45:be:2e:7a:dd:98:c7:c3:45:d1:25:05:0e:44:79:
99:fc:71:e9:d7:e9:86:a3:ee:d7:52:96:a4:5a:c2:
41:42:2d:f8:17:76:a5:d8:18:39:5c:ec:54:b4:38:
00:08:5a:41:d5:35:68:16:aa:1a:f7:2e:76:33:fa:
70:f2:c4:a5:01:7d:b8:44:a6:c1:58:9e:53:04:9b:
43:a6:55:df:9f:f4:ba:ed:b5:b2:8c:58:f5:c9:92:
d0:91:ad:de:92:d6:c3:12:e6:31:46:90:23:fa:2c:
63:46:32:df:b7:4e:f7:5b:1c:66:d4:c9:c0:88:07:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:93:45:0D:E4:3D:AA:E1:BD:A2:DA:B7:C7:37:45:C6:C5:65:39:D3
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f0:c2:81:bd:8f:77:c9:df:74:b2:be:e7:d0:15:59:7b:3f:
fd:ea:f6:85:11:44:d1:1b:05:04:25:da:5f:41:1b:e1:b4:8e:
a5:43:0f:a4:23:b2:ca:53:8b:b1:e5:86:94:04:4d:3d:e5:ef:
2f:74:6c:80:93:c1:8d:93:70:f6:b4:cb:d7:72:11:4f:49:78:
ad:98:10:19:18:7f:9f:ee:57:09:41:46:c5:51:24:6f:c4:12:
d0:e7:8a:ef:83:d3:a8:cb:e9:82:17:07:f0:df:e3:a3:36:89:
01:f0:99:f9:d6:0f:12:fb:30:08:87:87:0e:b1:74:74:52:1d:
e4:24:17:45:39:eb:83:1f:02:03:94:45:89:27:24:b6:d0:58:
b3:0a:19:4e:54:8d:a6:67:fa:ca:9b:f1:8f:cb:64:f1:3b:26:
0d:c4:d4:e0:7a:43:73:f6:91:73:10:cb:f4:f8:d3:5e:ca:e2:
ac:41:a5:1e:d2:25:ed:1c:d7:bb:5d:0f:e0:4e:ac:2f:41:95:
8e:a2:86:7d:83:73:4b:12:3e:37:b4:f8:12:24:df:f8:7a:d4:
68:72:b3:6f:f9:4a:97:7d:e2:e4:76:b2:94:d0:d0:ce:6c:62:
6c:69:e9:11:5b:62:5f:e2:62:c0:80:41:1e:92:e0:22:32:ac:
f5:64:5f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:46:33 2025 by rpki-client