Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: 5cQbvDnWifti9ZCMtbv21bBdEIKMWn1aUFBaGrWOdh4=
Subject key identifier: 54:29:8D:25:3E:D1:FF:AD:12:91:05:7D:DF:4D:2D:63:10:7C:9D:F8
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 019892FF250744EED5767417045885FD3204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 047F
Signing time: Sun 10 Aug 2025 08:00:51 +0000
Manifest this update: Sun 10 Aug 2025 08:00:51 +0000
Manifest next update: Mon 11 Aug 2025 08:00:51 +0000
Files and hashes: 1: A3mZEclriGszqRGoUvbHgF-KInU.roa (hash: i8Kmi4yyeQAKrcdjfPdTmfjuSQ/uP2lhkQpuex0W13Y=)
2: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: I6Tl1VzkK1FW36KPuRGMdsZsO8Vwq/9scOSP3hgtlc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:25:07:44:ee:d5:76:74:17:04:58:85:fd:32:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Aug 10 08:00:51 2025 GMT
Not After : Aug 11 08:00:51 2025 GMT
Subject: CN=54298d253ed1ffad1291057ddf4d2d63107c9df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:58:60:6d:3a:9a:f7:fa:6e:98:07:dc:af:
35:51:77:33:2a:24:5d:96:fc:ff:f6:e3:0e:55:ba:
a0:6e:b6:99:97:5b:62:57:2f:ac:81:fe:a7:69:67:
eb:89:c2:27:b8:ab:78:b6:8e:67:14:47:f1:21:ac:
a1:97:bd:7c:00:e1:b9:44:9b:8b:66:f3:60:cf:b0:
fb:44:0a:10:57:51:ef:db:69:cf:a7:48:0f:1f:ee:
ac:d5:d2:7c:94:d1:af:63:d6:a3:76:b6:9d:a3:08:
fb:fe:2c:11:27:95:81:0a:3f:5e:00:33:32:c1:4f:
df:f8:59:8e:44:fb:16:83:d0:5e:df:d5:ee:ab:08:
5a:04:ba:72:f5:14:8b:e4:f3:f1:fc:54:44:34:3a:
4c:29:dd:bf:0e:63:fe:17:51:84:91:79:57:d0:b3:
9a:85:4b:47:42:43:5d:a2:d5:22:a0:a2:d8:76:1f:
4c:d0:c5:60:86:91:2c:a2:85:75:6f:5d:ef:fa:30:
04:d9:5c:10:56:25:d5:ca:20:7b:c3:5a:9e:4e:bc:
14:16:70:51:96:69:b4:48:05:13:60:48:02:e3:e3:
00:3b:ae:b9:af:89:74:5e:c2:37:c8:e7:cf:c8:9d:
e0:94:60:b5:8b:da:66:07:2f:e6:5e:a5:fb:54:5f:
0a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:29:8D:25:3E:D1:FF:AD:12:91:05:7D:DF:4D:2D:63:10:7C:9D:F8
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:09:c5:e2:b2:87:bb:cf:c9:68:8d:90:e1:81:46:88:28:4f:
71:75:09:ae:04:61:70:fa:78:19:5c:28:e2:a0:74:b0:b7:d6:
91:52:42:a7:80:0a:76:94:1b:ca:0c:88:4e:af:ea:76:a2:9c:
67:44:34:c6:63:43:c5:69:19:c9:bd:8b:3b:dc:52:f5:27:cc:
95:1b:0a:77:67:67:53:fd:40:9f:11:33:a2:5d:5c:82:ad:9f:
01:26:1d:49:72:65:37:db:a8:31:dc:09:55:4d:69:70:eb:e6:
fe:ea:12:bd:f2:22:d8:f5:3e:35:89:e7:02:62:1d:d8:25:b5:
02:45:53:e3:ca:68:d9:09:be:fb:f6:ca:fc:aa:96:72:9d:79:
56:b3:55:7b:a7:3f:ac:31:28:3f:c9:c0:0a:8a:66:71:14:02:
e5:3a:b5:fd:e2:d1:0a:ba:95:d0:b9:10:30:6a:9f:e8:d2:21:
e8:78:eb:1c:75:8d:8e:0f:a0:30:90:20:82:22:01:fe:60:1a:
7b:4f:c0:4a:ce:78:45:3f:1f:94:10:ef:56:18:b2:88:9a:bb:
5e:7c:d4:57:40:c0:c7:30:39:5f:d1:08:47:c9:34:2e:10:7c:
f1:7e:ca:d1:b0:df:ca:94:5a:8a:3c:b3:0c:12:29:1a:2c:72:
44:c5:16:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:34 2025 by rpki-client