Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier: pkOCzSme20iMqt1sxKmwHXhN6JTPbcgEx2i4Q7vac40=
Subject key identifier: AD:5F:88:94:18:58:19:FF:A4:0E:1B:A1:35:59:E7:D7:50:28:E5:87
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 019A54F6903A8C7029464484745AA27A3E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number: 12A9
Signing time: Wed 05 Nov 2025 17:00:36 +0000
Manifest this update: Wed 05 Nov 2025 17:00:36 +0000
Manifest next update: Thu 06 Nov 2025 17:00:36 +0000
Files and hashes: 1: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: zC3qkWAHg9Lm1ssKraqET0KWR7mTE01NkSONVvRqMME=)
2: pvaPM5j3-BPWJpSuaWFE01jgVBg.roa (hash: vcFvxHEzp1YnutqV+Bq+p/f/FPwpa1xjzTG6Rie7rFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:90:3a:8c:70:29:46:44:84:74:5a:a2:7a:3e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: Nov 5 17:00:36 2025 GMT
Not After : Nov 6 17:00:36 2025 GMT
Subject: CN=ad5f8894185819ffa40e1ba13559e7d75028e587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:a1:f1:c9:62:d1:86:b8:60:55:f9:1b:48:
e0:81:01:f0:0e:f9:80:be:8e:5a:3e:10:66:6d:c0:
08:68:9b:9c:08:01:a1:77:87:a0:af:7b:c7:97:62:
67:5d:1d:45:74:2d:1b:4f:de:7d:95:7b:32:fd:4e:
ec:b4:db:dc:0f:70:a7:16:75:00:46:b1:21:d9:46:
09:81:52:90:00:cd:2c:51:69:96:d6:6b:51:d2:76:
24:a0:44:11:41:ba:26:75:12:40:15:c4:a7:8d:ce:
7c:14:1c:6d:a4:f3:b6:a7:38:c0:54:5e:32:29:db:
0d:44:58:d4:75:77:19:0f:9c:0c:ae:89:5f:dd:84:
14:2b:23:02:30:8c:33:0d:cf:ed:91:de:81:11:5e:
d3:d5:72:63:b2:b3:8c:91:38:51:27:1e:1b:c1:fc:
6a:55:b4:fc:6f:e7:3b:c1:40:34:87:85:ad:a3:2a:
1f:71:61:c9:34:8c:e4:f7:6e:51:08:d2:c9:eb:51:
91:ee:9b:de:c9:03:9a:b1:26:3b:a4:ee:97:91:72:
04:53:71:ef:06:99:ae:ed:75:c0:23:8c:60:48:2b:
21:23:42:d3:f7:77:14:7a:d2:12:14:5c:7b:c2:36:
75:b9:fe:4e:79:d1:1d:cf:6b:ac:e9:db:45:ff:88:
c7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5F:88:94:18:58:19:FF:A4:0E:1B:A1:35:59:E7:D7:50:28:E5:87
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:12:ee:86:30:8c:8d:00:8c:e4:63:81:fd:a7:ce:c7:7a:d6:
53:26:f4:9c:da:88:17:02:9c:4e:0e:6e:42:f5:00:0f:e3:5a:
8b:6c:0f:1d:e5:9d:e9:33:6c:bf:73:2d:12:20:65:66:54:86:
6e:87:f3:44:f1:bd:77:7b:b4:62:df:92:74:9a:09:6a:ef:0b:
bf:23:85:f2:16:fb:be:08:44:48:cc:b4:de:72:18:8a:44:c0:
97:9e:c8:ae:e3:a2:7d:a1:d5:eb:74:3d:1d:44:66:fe:e7:7e:
39:bb:e3:42:c0:4b:e6:e6:84:96:a7:b8:a9:7f:8d:54:48:1c:
89:73:76:73:1c:3e:db:7d:27:86:f5:55:71:5c:c2:84:cd:c2:
8e:f2:ad:f7:5d:28:91:5f:b3:91:3d:a0:1a:96:2c:0a:cb:2e:
fe:16:1e:50:32:a7:16:15:31:88:ad:76:ce:69:31:46:41:56:
e2:9f:34:6a:aa:1b:47:09:76:e9:58:27:65:96:6a:8e:20:09:
fd:da:eb:93:86:9d:39:3a:88:9c:f3:81:a1:86:c8:a6:bf:72:
c9:1b:84:0d:e2:a2:3d:90:5d:21:f3:fb:57:7f:26:39:e9:0d:
b2:a1:71:af:fe:48:82:aa:a4:17:d9:5f:c8:4b:c1:0e:91:eb:
a4:9f:85:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:34:23 2025 by rpki-client