Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier: 8bSSAqR0OiStUc+w2VGteFxLSFEuNLVSgZnKNGZhko4=
Subject key identifier: 6B:2A:EF:51:15:A4:96:B4:DC:87:C5:A9:1A:8D:D2:EF:3E:9A:BE:5A
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial: 019A5074805B6724B5234DB438E12E5964C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number: 1140
Signing time: Tue 04 Nov 2025 20:00:03 +0000
Manifest this update: Tue 04 Nov 2025 20:00:03 +0000
Manifest next update: Wed 05 Nov 2025 20:00:03 +0000
Files and hashes: 1: Glr6u_s5CXtQU33JFdKRNodC1Uw.roa (hash: xJAriWKl+PmbnYJ4BpPrX2q/YRb7AyfnBhDH2V2YYdU=)
2: UpeD63AhvaLPHL7cT3GFojz3Ckk.roa (hash: mEkJtV27z/pufpdRebXs4QzlDSFPeuvtLb6yKnLyJS8=)
3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: /Ei4jE2M3mf7aS7gkphzGoGb0JF+yCDLGdHASkx7RLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:80:5b:67:24:b5:23:4d:b4:38:e1:2e:59:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Validity
Not Before: Nov 4 20:00:03 2025 GMT
Not After : Nov 5 20:00:03 2025 GMT
Subject: CN=6b2aef5115a496b4dc87c5a91a8dd2ef3e9abe5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:15:f4:9e:07:78:a8:de:25:5f:94:c3:9d:
30:31:1b:dc:d3:fe:f3:65:62:76:13:90:a2:0a:07:
f4:f0:3c:d1:f6:c2:70:84:2f:54:7f:dd:cb:2a:bb:
d5:82:c2:44:1d:fb:5d:21:43:e9:e6:47:73:48:e6:
42:92:29:80:9c:42:56:dc:29:9e:33:89:c4:50:94:
c2:c8:7b:0b:ed:ad:af:9e:d9:39:75:4d:bc:c2:ce:
21:31:d3:fb:a1:6e:39:9c:65:a1:4e:ea:a9:7a:6d:
0e:79:b9:c6:fb:36:24:fd:e5:34:c3:fb:a1:cd:6c:
ab:bf:cd:ad:6b:72:9e:2c:18:8d:05:cb:c8:f6:d5:
19:09:50:96:94:5d:a8:8c:8c:e9:d5:c2:cd:ce:97:
6c:a2:f3:19:39:0f:dc:92:62:71:e5:25:da:06:ed:
ac:41:c2:d0:e7:68:a1:94:86:97:c1:c1:b6:23:11:
44:52:21:bf:8c:b1:58:56:0a:ba:86:08:0e:ea:90:
74:24:b6:a8:b7:1f:99:58:9f:3f:69:44:b4:9c:9b:
43:33:99:0a:98:81:ce:5d:e3:63:c8:ff:5f:fa:93:
bd:22:e0:d5:6d:90:66:2d:76:a9:26:5e:fd:1f:07:
1f:ae:16:23:91:7a:1f:d4:2a:d1:0a:ed:79:ec:0f:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2A:EF:51:15:A4:96:B4:DC:87:C5:A9:1A:8D:D2:EF:3E:9A:BE:5A
X509v3 Authority Key Identifier:
keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:08:a1:07:09:a6:6b:bf:67:46:bb:3d:c7:b3:3c:2c:8a:36:
d0:06:57:e4:9c:f2:bb:4d:9a:22:2b:de:55:97:3c:7a:63:a8:
f0:bb:07:69:30:9a:c9:51:c6:3e:20:a3:5e:a0:82:a7:48:ec:
fa:b9:69:09:d5:d4:95:c5:27:0c:28:0b:77:a1:51:0c:de:3f:
6d:68:e5:57:84:56:b2:75:08:12:94:75:67:fe:bf:26:5c:91:
9c:9b:92:1f:85:18:d8:f6:bc:97:b1:dc:0d:8f:28:51:df:36:
c1:6d:6f:a1:6b:6e:24:70:35:b7:e1:58:f4:32:fa:72:16:77:
8e:ed:c9:8c:50:dc:6a:29:ca:5f:99:72:38:82:18:7e:63:d1:
f8:9e:94:40:e3:3f:7b:bf:5a:a1:ae:b7:f1:8e:b0:e8:b4:df:
6c:62:21:81:b0:ca:ae:a3:bf:76:0c:d5:3b:c5:f3:45:84:dd:
5d:e1:e9:88:eb:a0:98:f0:50:b4:79:cd:43:7d:84:1b:77:11:
3a:ef:c6:f6:8f:f2:2d:2f:ad:be:9c:42:29:3a:ad:b4:3b:fd:
27:e1:8f:50:f7:05:a7:8e:94:fd:08:c9:d1:e3:c6:af:4b:ee:
43:f6:a0:79:dc:e1:3d:96:9e:9e:2b:41:74:9b:96:1c:b6:8b:
28:c3:9a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:38 2025 by rpki-client