Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier: Ev6aPMAjIVHb5wIvrLwHYcFjOxlhSKYz1xIOu05N0SA=
Subject key identifier: 76:2D:B6:2F:73:96:F2:E7:43:F2:16:6A:1F:A1:7C:1A:A8:71:D2:77
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 019A51BE9D1AC4C52D9DE62E5FF7E6223CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number: 1433
Signing time: Wed 05 Nov 2025 02:00:37 +0000
Manifest this update: Wed 05 Nov 2025 02:00:37 +0000
Manifest next update: Thu 06 Nov 2025 02:00:37 +0000
Files and hashes: 1: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: wQeOq3UxSOyDpsyZvTT4UlTKLNey5QsiInvkfTMy0xQ=)
2: _bmYfKJFyK9blFnDt5sQ68mX470.roa (hash: /IaqLo5gnKUuY45J9bE0d2C3v3+D2fXVryN2uunSGag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:9d:1a:c4:c5:2d:9d:e6:2e:5f:f7:e6:22:3c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Nov 5 02:00:37 2025 GMT
Not After : Nov 6 02:00:37 2025 GMT
Subject: CN=762db62f7396f2e743f2166a1fa17c1aa871d277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:b1:cb:c3:4e:4a:25:38:e5:1e:1e:2b:cd:
71:63:23:71:78:d4:ab:bd:5f:91:94:ab:7e:20:f1:
09:99:73:82:1e:e8:90:c0:56:3d:16:a9:7d:3c:8c:
0e:9e:f5:c4:48:51:a2:c2:7c:07:f2:41:a3:f5:f8:
63:99:54:9f:db:0c:8d:09:8f:35:0e:3e:67:05:23:
c8:ca:32:dc:77:da:2e:93:f1:55:5e:96:b4:ef:84:
2e:08:ff:1c:76:ea:b3:1b:39:ec:b3:ac:b1:9c:0f:
53:36:c6:70:63:f7:22:f7:98:ff:eb:b3:ff:82:f5:
f0:84:b4:59:a7:73:0d:e5:9d:76:75:3d:ce:aa:d7:
b1:7d:68:03:db:ea:8e:5a:65:2b:04:6a:50:5d:f9:
c7:f5:41:63:9c:a1:91:43:51:9c:55:77:27:f4:0b:
b3:82:04:60:c1:83:ce:75:67:f1:a9:7b:e5:e6:f8:
b8:e1:ee:8d:ad:90:93:70:2c:7e:83:99:88:65:47:
4e:e1:fc:71:df:91:93:10:b0:1b:ee:af:a2:d5:61:
4a:d7:53:14:42:c3:6b:9b:13:e3:18:8c:23:5d:96:
ae:a3:97:73:ff:d2:eb:dd:e6:e1:f7:3d:08:30:34:
c2:ea:49:6f:a8:2a:82:de:8c:64:ba:09:0a:79:b2:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2D:B6:2F:73:96:F2:E7:43:F2:16:6A:1F:A1:7C:1A:A8:71:D2:77
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ac:5c:be:4d:ac:55:33:49:b7:a4:8d:5c:6d:d8:6c:da:b4:
11:d3:83:80:c8:45:3b:96:05:b5:71:a2:3b:ea:9f:b6:61:1a:
ff:3f:b8:de:1c:c7:f1:60:fd:a6:57:40:1e:40:96:7c:7f:20:
91:c3:ab:0b:73:ec:ec:66:44:34:0b:06:2e:84:ec:dd:fe:8b:
8b:f9:f7:b1:9e:e2:8e:5a:07:80:25:d2:80:7b:79:4b:59:fe:
32:85:50:fc:ed:62:d8:66:16:e0:5b:84:6f:9a:ba:aa:7b:8b:
64:a8:98:27:88:90:a1:3b:c2:06:a7:c7:e7:cc:0f:64:fd:ae:
78:b7:f7:c0:72:68:59:de:22:21:bb:c4:9b:05:52:55:ee:53:
ee:59:2c:d3:e3:3c:a8:8b:c8:ca:0c:70:71:89:d1:0e:9f:6b:
3c:60:2f:da:5f:9c:c9:44:53:0c:c5:9d:26:5e:6e:00:f3:76:
6c:19:37:a5:e2:11:a3:75:c0:cb:26:f5:aa:7d:07:90:65:c6:
94:71:85:62:46:84:ac:72:aa:bd:01:86:f7:0f:6f:b6:e5:4d:
8b:de:ec:ac:0e:27:e5:ba:22:b7:4d:fa:a3:d7:2e:a2:9b:51:
63:8c:1e:82:50:ba:50:fe:b0:53:01:45:d3:fb:b6:06:f8:b0:
2c:ee:ec:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:24 2025 by rpki-client