Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier: sjVZ9HFNJvUM/pROzPvZM5BKB/PAEv3Xd/Buoi/8PEw=
Subject key identifier: 32:71:CB:32:C4:9D:28:43:B6:06:72:69:26:7E:FD:7E:45:3B:7E:38
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 0198838C2CB69F7FE17776E73215B53CD0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number: 11B8
Signing time: Thu 07 Aug 2025 08:00:58 +0000
Manifest this update: Thu 07 Aug 2025 08:00:58 +0000
Manifest next update: Fri 08 Aug 2025 08:00:58 +0000
Files and hashes: 1: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: G432m6yxY2cVnOaKRbcnEYOGnFYLKoxVHCYoy41+CZw=)
2: pvaPM5j3-BPWJpSuaWFE01jgVBg.roa (hash: vcFvxHEzp1YnutqV+Bq+p/f/FPwpa1xjzTG6Rie7rFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:2c:b6:9f:7f:e1:77:76:e7:32:15:b5:3c:d0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: Aug 7 08:00:58 2025 GMT
Not After : Aug 8 08:00:58 2025 GMT
Subject: CN=3271cb32c49d2843b6067269267efd7e453b7e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:62:ef:c7:02:a2:e3:5e:b7:d2:9e:43:a5:
25:ce:bf:4e:94:b6:c5:14:f5:e6:f0:b1:9a:94:1d:
a5:76:62:f8:db:02:2c:66:8c:83:a8:57:2f:6a:2e:
bd:87:6a:7c:32:da:1b:48:f4:c8:57:79:6e:3b:2f:
e0:f2:15:a6:8f:8a:36:b1:88:cb:65:ec:79:31:de:
0d:79:ad:ac:bb:d6:c8:28:bd:09:4c:b3:9b:2e:d7:
3a:77:9b:63:76:d5:3c:fa:53:65:b5:93:57:bd:7c:
a0:64:d7:07:dd:05:fd:01:df:f1:7a:09:61:4c:51:
fc:7e:73:c7:f0:46:1c:10:94:85:f5:b2:eb:5e:c8:
43:e8:6d:07:22:71:0a:31:a8:20:57:fe:46:3e:ee:
5a:a3:17:a7:ba:b4:19:69:5f:84:b8:9e:83:b9:2a:
4c:ea:0f:4a:a0:04:aa:05:3f:a7:58:be:7d:14:65:
4c:b9:d5:8c:b3:73:35:79:0b:5f:6e:cb:ce:32:c5:
2f:50:2f:7d:57:2b:51:f2:0a:d8:aa:32:8b:91:67:
28:8b:9e:05:91:4e:e8:3f:d3:24:05:8d:86:fb:43:
82:44:19:80:83:6f:32:3c:59:3f:f4:9e:be:97:00:
6a:4f:0d:45:88:5b:5f:43:a0:41:e2:e4:a2:16:70:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:71:CB:32:C4:9D:28:43:B6:06:72:69:26:7E:FD:7E:45:3B:7E:38
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3f:1f:89:3d:c5:53:39:66:30:70:a4:21:17:ff:18:a1:8d:
db:e5:17:43:1a:b6:6e:ac:06:a2:8e:bd:c5:a6:60:2e:db:bc:
93:36:ab:39:9b:ad:5e:ae:27:ad:94:91:d8:ac:52:50:6e:5b:
ba:c9:1e:cc:63:7a:85:52:17:d3:51:e4:5a:3c:0b:ac:12:e3:
1c:94:cf:39:05:d8:58:d8:73:a9:c9:30:8c:49:ea:b0:90:f7:
09:50:7b:11:8b:7d:46:52:96:e4:bc:fb:f9:3a:5b:a0:88:3d:
5e:91:ca:2a:19:ee:8e:0e:c5:6d:30:77:4b:73:c9:ec:ea:c3:
31:0d:fd:f7:fe:91:28:65:45:4e:85:a4:99:50:9d:b7:6a:b0:
3c:6e:79:f1:ef:ed:45:78:59:85:4c:65:6a:9c:f1:81:6b:30:
1e:bf:39:cf:00:39:a6:ac:48:98:3e:4e:a5:b6:ce:69:98:f8:
12:4f:77:d5:45:e1:a0:20:11:b1:82:1a:be:69:3c:f2:11:63:
98:de:0e:a4:e6:b8:9b:0f:6a:1c:1a:df:8c:ac:ce:0f:97:8d:
b7:02:a7:f0:56:5f:bb:46:9b:e0:d4:b6:20:0f:85:44:bc:2a:
a1:0b:43:45:1c:81:70:7e:b0:9c:f3:87:d8:f0:c9:ca:28:6d:
3b:72:7e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:16:31 2025 by rpki-client