Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier: NPGEtypYG7PnTQS1Ad91oTGdIDFJiarjjd+KO2IcD4s=
Subject key identifier: E1:1E:AB:9C:EB:65:14:31:E1:16:0E:52:B3:42:60:0B:B9:F8:28:2E
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial: 019A53AD4EC071F563F98D8F09FE7BC6B3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number: 0985
Signing time: Wed 05 Nov 2025 11:00:58 +0000
Manifest this update: Wed 05 Nov 2025 11:00:58 +0000
Manifest next update: Thu 06 Nov 2025 11:00:58 +0000
Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: TizoVq83YcZMUzDCSw7BJ3dByKVdGtm185+zQ28cXXg=)
2: yyEfKYzfWifnZltk7ctCY5A-44M.roa (hash: Bx/CCORj4vVt+Qie6xpQv8J6eghjTLCeuziTvvg5CUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:4e:c0:71:f5:63:f9:8d:8f:09:fe:7b:c6:b3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Validity
Not Before: Nov 5 11:00:58 2025 GMT
Not After : Nov 6 11:00:58 2025 GMT
Subject: CN=e11eab9ceb651431e1160e52b342600bb9f8282e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:17:f7:39:6d:8c:b2:87:16:f1:7d:41:0e:
61:7c:97:be:ba:aa:d3:bd:44:d2:48:3a:1a:06:14:
5a:05:c4:0a:43:07:b5:25:58:16:d8:6e:5c:ba:34:
d3:be:a7:24:03:5d:f1:1c:e9:ef:cf:31:02:cb:d7:
73:00:68:5b:1a:a0:f6:5b:ad:20:d0:93:22:8a:8f:
34:57:c4:3f:76:dc:37:82:58:ff:3c:1f:10:43:2a:
74:d0:ce:d8:d6:b0:b3:2b:08:b7:d5:a9:cd:49:fe:
73:f1:15:a7:a2:26:a0:e8:e1:50:eb:d2:3b:2b:f9:
77:86:3d:84:c7:b4:ab:6c:83:bd:33:36:11:d0:23:
3c:a4:7c:e7:49:af:d2:5f:05:e7:cd:68:b7:db:15:
87:d8:08:70:17:90:62:88:f5:a8:8a:24:55:1c:77:
ad:7c:44:e7:73:d4:1a:ac:a1:ca:56:e3:07:53:71:
75:c0:c8:b5:ae:3a:75:42:15:61:7b:60:4e:81:34:
3b:c8:23:d3:a7:f1:52:db:74:c5:65:f3:59:92:7e:
44:9a:11:c9:c6:03:b1:14:62:06:b1:c1:14:4a:9b:
da:dc:83:0e:c3:95:9c:68:e1:95:ee:0e:9b:58:40:
15:6c:e8:ad:c0:da:91:a3:d8:74:35:10:68:19:70:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1E:AB:9C:EB:65:14:31:E1:16:0E:52:B3:42:60:0B:B9:F8:28:2E
X509v3 Authority Key Identifier:
keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ed:81:74:70:16:31:9d:48:a9:eb:7e:b7:f6:e5:7d:54:cb:
6a:48:87:3a:fa:32:aa:af:86:d5:61:ec:af:16:28:14:ca:9d:
f5:03:e8:be:7c:53:85:4c:7c:61:6a:95:be:a6:30:78:5c:98:
21:13:ce:57:a9:a8:d0:a5:8a:c6:80:10:b0:28:59:d8:a7:ab:
46:be:d3:0a:96:aa:04:a3:cc:3e:9a:0a:71:db:cc:72:5b:d1:
99:b4:22:a7:5e:a5:12:4c:8c:e3:55:49:e8:bc:1b:97:7b:07:
d1:40:91:4a:3b:4f:3e:1a:33:2e:b8:b5:56:aa:b5:90:43:d9:
db:f7:21:6f:3c:a8:14:6d:2b:f7:fe:1e:e3:c1:45:69:a3:63:
f0:31:8c:78:e3:93:70:22:ca:8a:d2:34:b1:8f:3c:19:0c:59:
b4:0e:2b:b1:46:91:61:58:b7:00:1b:3a:35:4a:86:d6:7a:d2:
eb:af:a3:18:e1:93:16:f4:06:25:3c:45:26:c9:11:f4:df:d0:
52:28:ff:e8:05:79:b8:4b:aa:32:ad:9f:6a:7a:76:44:d6:61:
79:dd:64:0a:2a:55:8f:4c:65:12:9d:14:e9:6d:4c:7d:6c:fa:
3e:94:e1:bc:cb:ca:ae:15:a2:c4:3f:37:5e:57:93:9e:e3:ae:
0a:69:85:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:03:47 2025 by rpki-client