Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
File: LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft (raw, json)
Hash identifier: F/yjhuYNVS4f8fZ0jpLVepwhXKKE3u9HRGYiX/oVyeE=
Subject key identifier: CF:54:D5:AC:13:7F:91:22:BA:A5:F6:C9:8E:7B:24:A8:51:B2:8D:77
Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
Certificate issuer: /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Certificate serial: 0199FBEAE0B5CA1420F32A1CF5A4F33C7551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:38 +0000
Manifest this update: Sun 19 Oct 2025 10:01:38 +0000
Manifest next update: Mon 20 Oct 2025 10:01:38 +0000
Files and hashes: 1: Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa (hash: hCl5v0Z86Jy7+0GlCW+6oKfv2bUVufzYinCdryb0Gzo=)
2: LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl (hash: KC73KYdMNwGaoT/f/oJqFEP0zSkNIIK4GGKV7FJJW9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e0:b5:ca:14:20:f3:2a:1c:f5:a4:f3:3c:75:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Validity
Not Before: Oct 19 10:01:38 2025 GMT
Not After : Oct 20 10:01:38 2025 GMT
Subject: CN=cf54d5ac137f9122baa5f6c98e7b24a851b28d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:5c:7c:d3:b7:0a:13:bf:7e:cd:97:a8:c3:
7b:cc:d3:fe:10:f8:2f:bb:5e:c3:72:2b:e8:d3:b2:
f6:87:d1:a4:cb:06:b2:ef:c2:8c:cc:2e:93:cf:c0:
ee:1d:d0:7f:99:18:78:91:22:04:b9:f2:84:8d:01:
1a:6a:5e:ed:25:e3:33:ea:73:63:10:b3:20:60:66:
d4:e8:61:ca:06:1f:ef:5c:b1:79:93:92:4b:ab:ad:
ef:16:84:46:17:a2:f3:c4:0d:29:3f:18:f6:9f:c2:
82:df:9a:24:a4:7b:2c:d4:c0:2e:21:fc:93:18:15:
8a:58:9e:cf:c9:f0:2f:19:a6:0e:ad:63:92:f8:7b:
f1:5b:43:bf:04:7d:20:3c:02:41:ac:bf:5e:83:7f:
d6:ba:85:b0:18:47:78:e8:5e:77:be:7e:05:36:20:
83:39:07:9f:eb:f6:78:80:01:d0:a7:94:97:10:b0:
39:98:3b:c9:7f:eb:2d:13:a4:39:e8:66:93:81:8a:
04:81:e5:0e:38:7e:98:3a:28:c0:b5:cc:b5:77:3f:
55:96:e1:3f:41:a0:77:1e:8d:f3:5d:ad:2c:7c:a7:
7f:c2:25:84:21:cd:fa:3f:92:73:f9:5b:5e:cc:64:
6f:a9:54:87:84:1a:7c:9c:0b:a5:eb:32:86:e8:21:
3a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:54:D5:AC:13:7F:91:22:BA:A5:F6:C9:8E:7B:24:A8:51:B2:8D:77
X509v3 Authority Key Identifier:
keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5f:68:bd:66:8f:a7:15:db:e0:47:7f:15:16:af:a2:74:e9:
64:5f:a7:8a:50:c2:e9:d8:24:25:df:75:8a:ca:63:1f:6e:95:
07:83:15:34:3d:63:71:53:e4:4a:11:88:98:ba:45:8c:a1:0f:
a8:20:c4:9b:e6:76:c5:25:2c:96:4b:b1:38:e3:dc:e8:16:61:
a1:7f:76:f8:d1:c8:44:8b:85:dd:50:a3:83:24:cb:17:c2:02:
61:b5:2a:3c:60:a6:6a:d4:39:74:fe:ae:9b:40:6b:6c:ba:95:
39:00:15:b6:ae:9c:07:1b:fb:66:2c:e1:75:75:29:35:92:ab:
8f:63:25:0f:4f:4c:05:25:94:84:b4:69:2f:da:19:f2:d8:3e:
3b:7b:d0:ca:74:c1:16:4e:9e:56:61:79:15:25:5f:4b:4f:70:
0c:25:c6:1a:20:dc:ec:a5:e6:15:c0:81:7f:0a:48:b1:d2:29:
ba:b7:11:62:7c:eb:74:0b:35:0f:24:e0:6c:e0:93:81:3f:04:
13:76:eb:0d:f3:76:ea:37:2b:54:f9:e6:04:b4:82:71:0f:5c:
5e:4a:55:d3:c2:0c:d3:4e:46:86:5a:6f:e4:33:29:8f:ce:b0:
58:a1:a5:15:fc:e7:d7:e7:76:bf:1d:5c:54:fd:c6:fe:b5:aa:
21:d6:0d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:52 2025 by rpki-client