
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
File: lvMFpB83TbAVgTN3CNHHnr6nlxw.mft (raw, json)
Hash identifier: UzYrhVfxMoV84sOz39OBsuqwkA0TkAYhO4zV1YD8wSI=
Subject key identifier: 9D:08:A9:5F:12:B7:B5:45:EE:90:B8:F4:79:5A:04:69:2E:A7:10:92
Authority key identifier: 96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C
Certificate issuer: /CN=96f305a41f374db01581337708d1c79ebea7971c
Certificate serial: 01987418EEB2C2753C744CDBDCFB5932F4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
Manifest number: 0499
Signing time: Mon 04 Aug 2025 08:00:47 +0000
Manifest this update: Mon 04 Aug 2025 08:00:47 +0000
Manifest next update: Tue 05 Aug 2025 08:00:47 +0000
Files and hashes: 1: lvMFpB83TbAVgTN3CNHHnr6nlxw.crl (hash: pLXZsTilSZI2qn05mGSdaWJW3P//eV5cSvTD7G9/V1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:ee:b2:c2:75:3c:74:4c:db:dc:fb:59:32:f4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f305a41f374db01581337708d1c79ebea7971c
Validity
Not Before: Aug 4 08:00:47 2025 GMT
Not After : Aug 5 08:00:47 2025 GMT
Subject: CN=9d08a95f12b7b545ee90b8f4795a04692ea71092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:b2:bf:cf:f9:00:3a:fe:78:7e:6a:77:6c:
33:b6:87:48:60:d2:65:44:7f:34:56:ad:b6:8a:73:
4c:0a:10:5f:d9:6c:0b:a6:9c:a6:39:21:2d:cd:ff:
c2:50:b6:bd:8d:9b:d7:59:b7:34:2b:77:a3:a2:b3:
39:3b:de:64:ba:9d:ca:b9:61:96:85:17:34:2a:3d:
52:58:66:c9:b9:5e:37:06:34:15:bd:46:c0:b5:7d:
a5:fc:c6:1d:d0:10:ec:79:53:27:e6:de:05:da:96:
fd:2e:17:ec:be:b5:28:bf:ea:e6:86:18:1c:8d:e6:
5f:4b:02:cc:55:44:48:3b:c8:ef:40:49:53:b6:5c:
8b:01:d2:f2:b4:d7:0d:45:ff:7e:8b:f3:93:5d:09:
e2:04:2e:d9:e8:45:ff:4e:b8:a2:78:f9:e6:13:41:
a9:c4:d7:5e:9e:39:01:f7:7e:fa:e3:d1:79:01:6b:
02:4c:2a:7e:1c:97:1f:ba:b0:6a:3e:17:9f:8c:4d:
b1:97:fb:ca:f7:d3:dc:1d:88:8f:4d:b9:45:b7:5a:
82:1a:bc:ec:38:55:12:73:53:7d:12:a8:36:5b:52:
62:5f:5b:cf:09:20:9c:70:65:67:d0:62:3d:01:5f:
8b:ab:8d:77:43:db:d0:f0:01:ef:a2:3d:c1:9b:1a:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:08:A9:5F:12:B7:B5:45:EE:90:B8:F4:79:5A:04:69:2E:A7:10:92
X509v3 Authority Key Identifier:
keyid:96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:db:11:81:5e:c9:bf:04:9b:5b:60:53:17:de:96:c5:f4:36:
63:d7:1b:7c:52:81:2d:5a:ac:b8:0d:45:ed:2a:03:5d:38:55:
86:75:3f:2e:5e:15:b8:a8:fa:84:0c:ee:d1:f5:65:24:ec:a9:
4b:55:df:cf:9b:e9:fa:4a:8a:d0:4c:3f:ae:9b:46:b4:8f:ca:
1e:ac:10:32:c2:3c:c4:ae:e5:eb:77:a5:3f:c9:fc:5c:68:f1:
88:e7:ab:a1:7d:75:81:45:62:9d:2e:29:55:05:6d:18:8e:3a:
1a:4f:8b:a8:96:4b:f2:16:1a:09:6c:83:49:96:a1:aa:1f:74:
2c:74:6c:42:1f:66:7b:ef:99:6f:ab:9c:cc:a0:ea:30:cb:72:
8f:35:fc:16:ff:7d:71:80:58:84:0e:e9:33:40:b8:d3:1a:21:
a4:94:6a:1c:62:d9:b4:0f:e5:a2:ab:d9:4c:fb:77:a1:ff:b2:
81:b1:10:87:85:0c:46:0a:44:83:15:97:64:c2:f9:ec:49:c6:
4c:d6:e7:3b:b8:7f:05:d2:fb:94:db:c2:39:bc:59:77:f5:ac:
3e:c1:ce:4b:c3:11:a7:b2:0b:14:aa:99:4b:36:d1:03:66:74:
51:00:06:17:2e:49:da:6d:d1:8d:aa:e2:23:cc:9f:70:04:ae:
25:16:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:49 2025 by rpki-client