Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
File: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft (raw, json)
Hash identifier: yBusd95VndFGyZ7Rp1AmOEv30TDAJXXSgB+MeX6nnbU=
Subject key identifier: EB:F6:30:B2:A4:A2:D4:93:BF:DB:D2:AF:75:8D:93:2E:7B:9B:AA:63
Authority key identifier: 2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
Certificate issuer: /CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Certificate serial: 019A50074F823AF704A426B77389ADC9E718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
Manifest number: 0643
Signing time: Tue 04 Nov 2025 18:00:47 +0000
Manifest this update: Tue 04 Nov 2025 18:00:47 +0000
Manifest next update: Wed 05 Nov 2025 18:00:47 +0000
Files and hashes: 1: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl (hash: +wiuTZyOQAnh4yl+HoJAMsL++Ta+n0bMuB70uvsNO68=)
2: sL3129FsiQ9EOiD-6Y-oRWZ0HUI.roa (hash: OeP8VcF7txOpzsrTuc07O34NirN/Zqlu2vZ40ZPG7ls=)
3: vnYIdpkDdS6bRMveVXglLZHbY50.roa (hash: RbsMHBbR5PlZx+oytvnpiwybpf9Mt1fYmOVDql1MbsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:4f:82:3a:f7:04:a4:26:b7:73:89:ad:c9:e7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Validity
Not Before: Nov 4 18:00:47 2025 GMT
Not After : Nov 5 18:00:47 2025 GMT
Subject: CN=ebf630b2a4a2d493bfdbd2af758d932e7b9baa63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3f:8c:b1:57:2a:7c:8e:c9:c9:4a:60:dc:1e:
56:af:9a:af:55:6e:8f:c3:da:bf:d1:f7:da:f5:72:
66:bd:2a:ba:c3:c7:42:26:e0:2f:ea:0c:81:c8:98:
17:fb:61:62:de:b4:14:46:62:eb:84:52:03:1d:7f:
66:1d:3b:55:99:b9:20:24:dc:17:44:e6:66:25:85:
e6:b9:f5:6c:92:d2:bf:bb:7f:7d:11:e9:09:d6:52:
c8:8a:9f:30:18:f5:91:75:44:7a:2b:79:3b:d5:66:
a6:c6:1d:b2:d8:da:0d:37:37:6f:90:78:2e:9f:5b:
97:b7:6a:be:13:0f:9c:d7:5a:5b:65:9d:fa:44:31:
6f:a0:14:ca:60:00:b3:f8:03:43:28:66:00:e1:00:
5b:c2:bd:e0:c7:3f:88:3e:23:70:fb:28:c0:b4:41:
e5:fa:00:da:a2:95:5a:46:82:3b:a2:18:26:34:36:
25:7c:b9:d1:20:27:e0:97:59:bb:a5:d1:32:b5:2e:
8a:c5:41:57:e3:95:5f:2a:fd:bb:97:fa:6d:52:5b:
06:0e:65:65:e4:59:7d:2e:6a:77:95:37:0f:b7:d8:
3a:62:d2:a9:46:91:ef:40:bc:0b:3b:a4:96:79:3c:
8a:5a:d2:40:ba:54:61:4c:0c:76:36:d1:77:11:48:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F6:30:B2:A4:A2:D4:93:BF:DB:D2:AF:75:8D:93:2E:7B:9B:AA:63
X509v3 Authority Key Identifier:
keyid:2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:25:f7:e5:14:06:67:0f:55:bb:f9:bd:27:81:22:f2:b9:a9:
dc:ff:35:eb:60:e7:8f:05:f2:84:56:8b:e3:3e:b4:ec:90:52:
b7:f2:89:37:5a:38:14:01:6f:74:c9:0a:42:8e:20:c1:f3:0d:
52:78:99:25:b1:b0:d0:d0:74:dc:18:d5:82:7d:e4:7c:9f:15:
ee:d0:80:11:ba:68:d6:f3:e2:e7:90:80:7a:7c:cc:9d:db:b8:
de:be:e1:0c:84:59:15:64:6b:6f:40:88:ff:f6:c8:b7:65:52:
fe:1d:19:2c:10:70:94:21:bb:5e:f0:5a:74:06:87:8b:d4:9d:
91:1d:fb:9e:9e:6e:c6:3d:21:92:c1:e4:d4:f7:c5:45:37:cb:
8e:6e:23:20:bc:6b:57:d2:90:bd:f1:3d:01:54:4d:71:b2:84:
2b:c7:52:30:f2:26:b7:f2:44:85:f4:13:2f:92:91:d8:ff:90:
e4:b6:c8:ee:c9:80:a2:3e:21:66:de:fd:52:2a:aa:35:43:82:
c9:1a:ca:72:8b:11:cf:c8:8c:f7:0f:be:b8:60:46:1e:26:b6:
1a:23:5a:5c:29:e6:d3:06:29:e9:6a:18:3d:37:74:54:10:dd:
96:bc:f0:72:a3:25:31:e7:32:00:69:ee:4d:54:52:00:8b:05:
10:6c:0d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:25 2025 by rpki-client