Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier: jSrTvg2c/qZk5Wi4/F3OO/XK3sFy3EtXTBVBE8Wdz/M=
Subject key identifier: A3:D5:4E:0A:EF:31:23:26:B6:99:F0:B6:38:D5:E8:8F:2D:89:F4:D0
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 019A4E4F3CDA51B54EA8787E7807FC8B65BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number: 1165
Signing time: Tue 04 Nov 2025 10:00:06 +0000
Manifest this update: Tue 04 Nov 2025 10:00:06 +0000
Manifest next update: Wed 05 Nov 2025 10:00:06 +0000
Files and hashes: 1: 00zUmefDnJyqqgzSdsn0MV9Tkqo.roa (hash: huADW82oDJAq5twpGQcGLwROZsWOsqN3XkZE8P766lk=)
2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: Y3wwxyb+O3yIp1xskGI8dh+O36eBWz5Yi/kip+teJf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:3c:da:51:b5:4e:a8:78:7e:78:07:fc:8b:65:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Nov 4 10:00:06 2025 GMT
Not After : Nov 5 10:00:06 2025 GMT
Subject: CN=a3d54e0aef312326b699f0b638d5e88f2d89f4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:c3:2d:d3:5a:5e:bb:f8:6f:e6:ea:c3:54:
ff:a5:0f:76:d7:7f:cd:90:26:bc:9a:28:cd:15:27:
f4:25:9d:f8:3d:b6:c5:3f:50:18:c7:bf:d4:88:80:
9f:4b:17:75:e2:38:2a:06:c0:36:bf:86:81:37:fc:
17:f3:23:6c:78:0e:60:4a:7a:a8:df:48:23:1b:16:
9c:d0:d3:1b:d9:ba:f0:41:c2:23:f9:41:4b:57:e1:
7f:ed:93:da:e7:04:c2:b2:56:1d:87:dc:d9:5c:dc:
82:66:a1:8d:da:62:76:1d:9c:aa:e5:13:99:4e:79:
d4:01:38:5d:2c:0c:9f:06:61:db:a8:53:91:a2:63:
49:31:dc:96:79:91:b8:85:d4:ae:88:c2:a8:4b:1f:
22:c0:25:f9:95:89:2e:4a:b0:08:7f:55:0f:9b:26:
9f:9a:58:65:11:5d:0e:4d:a6:30:4e:85:05:7f:b3:
e9:05:3c:8b:78:05:2b:87:c9:5c:14:a6:1f:bb:3f:
8b:f3:ad:f4:6e:ce:c1:1d:d9:ea:98:57:ae:40:29:
26:35:64:0d:00:a0:e4:11:1f:c0:93:38:4d:3a:da:
54:a7:21:e4:7e:aa:48:cc:a9:36:43:65:04:17:34:
74:62:3a:2f:77:7a:10:70:70:14:b0:be:f3:cd:a1:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D5:4E:0A:EF:31:23:26:B6:99:F0:B6:38:D5:E8:8F:2D:89:F4:D0
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:23:76:70:3d:57:9f:87:96:85:02:05:97:c2:11:f3:e6:55:
5b:f8:94:32:e9:58:ae:bc:18:ca:55:1d:bd:82:3c:d6:7b:42:
0a:7f:f0:96:98:7e:9a:1f:87:ad:57:98:4b:6c:98:e2:c7:05:
4d:18:05:bb:7a:42:35:97:57:66:e3:d2:a1:41:fb:68:d9:d5:
c4:92:09:ee:1b:e1:70:0b:10:30:2b:0f:c7:a4:67:61:47:d7:
a3:40:e4:85:0f:c5:ac:08:93:e1:85:37:85:25:12:68:37:23:
a1:d9:7c:74:73:64:fa:32:d5:2c:0f:18:d0:a2:39:24:47:24:
80:bb:0a:8a:1d:19:85:7f:7c:cd:2f:11:1f:da:ff:d8:af:9f:
34:2e:af:3d:f7:fc:0a:f0:51:10:54:fd:99:5d:35:7b:63:35:
99:ff:18:c7:46:ea:13:96:6c:bb:c7:4b:99:db:86:48:c6:a7:
c8:10:c6:ea:1a:8d:ba:65:9e:10:67:f3:b7:96:c7:b7:ab:a2:
32:c2:cf:bf:33:54:4f:72:a6:48:1d:03:f6:a1:a3:57:90:dd:
ae:e3:47:f5:be:4d:54:89:3c:21:51:85:69:d0:fe:10:52:97:
c0:af:ad:00:14:48:12:b1:a6:1a:83:0c:6c:83:80:27:20:41:
a2:45:b4:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOTzzaUbVOqHh+eAf8i2W9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNTVjNGRkN2YyMTJmYzQ4OTZiZDBjOTcxODYwYzA1YjMw
ZWViOGQwHhcNMjUxMTA0MTAwMDA2WhcNMjUxMTA1MTAwMDA2WjAzMTEwLwYDVQQD
EyhhM2Q1NGUwYWVmMzEyMzI2YjY5OWYwYjYzOGQ1ZTg4ZjJkODlmNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5/DLdNaXrv4b+bqw1T/pQ9213/N
kCa8mijNFSf0JZ34PbbFP1AYx7/UiICfSxd14jgqBsA2v4aBN/wX8yNseA5gSnqo
30gjGxac0NMb2brwQcIj+UFLV+F/7ZPa5wTCslYdh9zZXNyCZqGN2mJ2HZyq5ROZ
TnnUAThdLAyfBmHbqFORomNJMdyWeZG4hdSuiMKoSx8iwCX5lYkuSrAIf1UPmyaf
mlhlEV0OTaYwToUFf7PpBTyLeAUrh8lcFKYfuz+L8630bs7BHdnqmFeuQCkmNWQN
AKDkER/AkzhNOtpUpyHkfqpIzKk2Q2UEFzR0Yjovd3oQcHAUsL7zzaHoiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPVTgrvMSMmtpnwtjjV6I8tifTQMB8GA1UdIwQY
MBaAFC1VxN1/IS/EiWvQyXGGDAWzDuuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZYRTNYOGhMOFNKYTlESmNZWU1CYk1PNjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mYjgxNDUtZjZkOC00MmMzLWE5N2Qt
ODBkMzVlOWQzOWVhLzEvTFZYRTNYOGhMOFNKYTlESmNZWU1CYk1PNjQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mYjgxNDUtZjZkOC00MmMzLWE5N2QtODBkMzVlOWQzOWVh
LzEvTFZYRTNYOGhMOFNKYTlESmNZWU1CYk1PNjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCN2cD1X
n4eWhQIFl8IR8+ZVW/iUMulYrrwYylUdvYI81ntCCn/wlph+mh+HrVeYS2yY4scF
TRgFu3pCNZdXZuPSoUH7aNnVxJIJ7hvhcAsQMCsPx6RnYUfXo0DkhQ/FrAiT4YU3
hSUSaDcjodl8dHNk+jLVLA8Y0KI5JEckgLsKih0ZhX98zS8RH9r/2K+fNC6vPff8
CvBREFT9mV01e2M1mf8Yx0bqE5Zsu8dLmduGSManyBDG6hqNumWeEGfzt5bHt6ui
MsLPvzNUT3KmSB0D9qGjV5DdruNH9b5NVIk8IVGFadD+EFKXwK+tABRIErGmGoMM
bIOAJyBBokW0NA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:07 2025 by rpki-client