
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
File: lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft (raw, json)
Hash identifier: gtNbaIBhleTWRqVHMalI2coqreE0zZA8cbr3PU1D2sU=
Subject key identifier: 78:27:09:51:77:4B:B1:F5:6F:B2:4E:8A:DC:37:D1:38:F3:06:A5:DB
Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Certificate serial: 0197CE03CD2BC391BFE47214CD7838D01FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
Manifest number: 15C2
Signing time: Thu 03 Jul 2025 02:00:44 +0000
Manifest this update: Thu 03 Jul 2025 02:00:44 +0000
Manifest next update: Fri 04 Jul 2025 02:00:44 +0000
Files and hashes: 1: 6ApC-jHQIcJABZYGTnaj4cDWTZ0.roa (hash: mW6j44egYeyH1Rdwi9kE+w3aUg6boclFfelfnL+ZOCc=)
2: gnEe3OeabPYnBDM3IzIwqcZpMW8.roa (hash: VzRNxcBeLn35opHADGeiMTKNeQ/005lIREbbg/TGf9U=)
3: lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl (hash: mp2Q0NJ9T0H+eMAijmdLFBX9WW4OVxGF5ASZxFR7/zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:03:cd:2b:c3:91:bf:e4:72:14:cd:78:38:d0:1f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Validity
Not Before: Jul 3 02:00:44 2025 GMT
Not After : Jul 4 02:00:44 2025 GMT
Subject: CN=78270951774bb1f56fb24e8adc37d138f306a5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:c4:05:9b:ce:1a:37:10:40:33:27:b9:41:
26:6d:7a:8f:a5:57:22:8a:d7:c4:5f:da:b9:45:a5:
2e:75:8a:36:d4:a3:a4:0a:0c:00:b4:f2:47:5c:a7:
f6:32:39:ba:e6:1f:a9:56:73:62:44:b0:8c:07:df:
34:96:d9:b3:9c:b4:1a:60:69:85:58:be:db:3f:51:
1e:0f:9c:e3:6c:67:05:93:3f:17:e1:5e:ef:14:ba:
6f:aa:40:61:8b:c1:27:25:0d:a1:67:fa:30:5e:1e:
d9:c6:31:4c:ae:77:fd:86:cb:09:57:22:02:2d:a5:
f6:1b:08:bc:81:bf:e2:17:b6:14:c8:fa:9f:a7:b1:
7e:f5:ce:11:3a:ac:f3:d8:a7:ac:cb:df:09:95:6b:
85:0b:02:d9:48:fd:c0:6b:7b:27:08:48:3f:92:d7:
ca:b3:db:4f:db:5d:31:6c:8f:6b:a0:9a:e2:2c:b1:
35:28:70:67:48:42:87:a6:c1:ee:62:29:8d:3d:4d:
d0:0e:3f:50:ed:c8:60:d3:31:4e:37:a9:00:77:b5:
a7:dd:8d:b0:32:eb:90:96:48:43:54:79:37:b5:cb:
f2:8c:57:fc:1a:db:26:df:cf:18:d3:95:0f:9c:19:
15:31:13:77:80:2e:4b:d9:c4:31:c4:6a:05:84:49:
15:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:27:09:51:77:4B:B1:F5:6F:B2:4E:8A:DC:37:D1:38:F3:06:A5:DB
X509v3 Authority Key Identifier:
keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:5c:0d:b5:08:b7:34:dc:bb:6d:f3:94:6f:77:d0:a4:e2:a5:
5e:2d:cb:5e:7e:40:e9:de:6f:05:36:9f:8f:fd:a9:4b:04:22:
3d:15:a4:14:17:f1:c2:39:37:94:5b:a7:81:1e:78:d5:c4:15:
07:9a:49:38:75:7d:d2:4b:07:a8:c8:31:78:9c:a8:53:8c:a7:
a9:c9:2f:2b:31:5d:fc:f9:48:1c:33:66:54:9f:1c:c0:02:b0:
0f:f7:94:7c:40:4a:4b:82:6d:eb:da:22:91:2c:69:fe:50:37:
96:7c:9a:54:2f:a3:7d:26:01:1e:91:ce:2c:9b:39:bb:26:c1:
2f:29:9c:6c:71:aa:0b:25:ff:24:20:38:9c:98:4d:01:7f:6a:
8d:e0:75:a3:d0:d6:0a:3c:05:06:0d:d4:62:4f:1c:52:ec:4e:
2e:0c:4a:79:54:99:e6:b0:06:19:cd:08:cc:fd:db:3e:4f:87:
54:bd:15:e3:f3:65:e3:10:0b:40:bf:ec:83:61:df:c1:70:47:
72:06:9a:89:59:52:01:42:2b:36:ba:d2:37:0d:10:77:19:59:
20:c4:99:11:0d:c6:87:3a:21:54:e1:b9:cc:49:d2:8a:b8:6c:
67:d4:1c:c8:2e:ff:77:11:d7:81:7f:f0:04:3f:9a:79:c6:3e:
95:f3:c3:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfOA80rw5G/5HIUzXg40B/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NzczZTljYzk3NDMwMWE3OGI3ZWU2ZDk5NDUyOGYxZjg4
MmU0NmYwHhcNMjUwNzAzMDIwMDQ0WhcNMjUwNzA0MDIwMDQ0WjAzMTEwLwYDVQQD
Eyg3ODI3MDk1MTc3NGJiMWY1NmZiMjRlOGFkYzM3ZDEzOGYzMDZhNWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthHEBZvOGjcQQDMnuUEmbXqPpVci
itfEX9q5RaUudYo21KOkCgwAtPJHXKf2Mjm65h+pVnNiRLCMB980ltmznLQaYGmF
WL7bP1EeD5zjbGcFkz8X4V7vFLpvqkBhi8EnJQ2hZ/owXh7ZxjFMrnf9hssJVyIC
LaX2Gwi8gb/iF7YUyPqfp7F+9c4ROqzz2Kesy98JlWuFCwLZSP3Aa3snCEg/ktfK
s9tP210xbI9roJriLLE1KHBnSEKHpsHuYimNPU3QDj9Q7chg0zFON6kAd7Wn3Y2w
MuuQlkhDVHk3tcvyjFf8Gtsm388Y05UPnBkVMRN3gC5L2cQxxGoFhEkVSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgnCVF3S7H1b7JOitw30TjzBqXbMB8GA1UdIwQY
MBaAFJZ3PpzJdDAaeLfubZlFKPH4guRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85MTIwY2ItMGIwNi00ODYxLWI2NTct
NzU3ODM4NjcwOTQ4LzEvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS85MTIwY2ItMGIwNi00ODYxLWI2NTctNzU3ODM4NjcwOTQ4
LzEvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx1wNtQi3
NNy7bfOUb3fQpOKlXi3LXn5A6d5vBTafj/2pSwQiPRWkFBfxwjk3lFungR541cQV
B5pJOHV90ksHqMgxeJyoU4ynqckvKzFd/PlIHDNmVJ8cwAKwD/eUfEBKS4Jt69oi
kSxp/lA3lnyaVC+jfSYBHpHOLJs5uybBLymcbHGqCyX/JCA4nJhNAX9qjeB1o9DW
CjwFBg3UYk8cUuxOLgxKeVSZ5rAGGc0IzP3bPk+HVL0V4/Nl4xALQL/sg2HfwXBH
cgaaiVlSAUIrNrrSNw0QdxlZIMSZEQ3GhzohVOG5zEnSirhsZ9QcyC7/dxHXgX/w
BD+aecY+lfPD0A==
-----END CERTIFICATE-----
Generated at Thu Jul 3 11:24:30 2025 by rpki-client