Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
File: lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft (raw, json)
Hash identifier: WI6IWJNjHbwu/dZY6a+I+wdUZZeEN1klsQxilUiUDjM=
Subject key identifier: F6:34:AC:31:E2:64:C4:67:E7:14:84:74:14:97:91:74:9E:F7:DE:98
Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Certificate serial: 0199FC219394211B5E3559058444B2F8892F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: 6ApC-jHQIcJABZYGTnaj4cDWTZ0.roa (hash: mW6j44egYeyH1Rdwi9kE+w3aUg6boclFfelfnL+ZOCc=)
2: gnEe3OeabPYnBDM3IzIwqcZpMW8.roa (hash: VzRNxcBeLn35opHADGeiMTKNeQ/005lIREbbg/TGf9U=)
3: lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl (hash: OAOvd3DlZ5FD8IfzwIAVXY1XKpAwwuedyH1JBllOJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:93:94:21:1b:5e:35:59:05:84:44:b2:f8:89:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=f634ac31e264c467e7148474149791749ef7de98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:c6:09:3f:ab:0d:4f:1d:2e:9d:70:08:8f:
36:ad:53:66:4b:ed:0e:7d:d4:b7:fb:38:ae:31:7d:
d4:12:d9:a1:c6:43:60:40:4e:ef:ea:82:e9:30:bf:
c3:d3:c8:00:6e:1e:5d:c5:84:6f:4d:85:63:14:05:
89:74:20:93:43:7b:77:20:f4:23:13:e9:3c:d2:89:
94:00:c3:2c:e6:d3:c6:df:43:58:3c:49:5d:77:cb:
53:a5:d0:87:f6:c8:20:23:14:3d:9d:9f:94:17:38:
55:a6:59:47:bb:0c:4a:04:d3:90:21:7b:1c:ff:dd:
75:a2:45:97:f5:ba:b0:ae:2f:2c:fe:90:33:6c:75:
97:7a:93:72:71:f7:07:6c:c5:01:e8:6c:41:ab:a3:
c0:a2:70:ed:ec:78:53:9e:71:1f:57:a8:94:0b:42:
14:6e:da:09:fb:46:6c:16:91:00:7b:63:2c:5e:dc:
51:05:b4:60:a2:20:b2:f4:7e:cb:18:63:48:bb:67:
f5:98:1d:e3:28:eb:a1:76:a3:88:cb:bc:eb:d3:88:
58:6a:6f:a4:23:0e:64:e7:91:45:e1:bc:33:3b:24:
52:53:35:06:84:a6:58:f6:70:2e:18:e8:6e:3c:4d:
34:90:42:4f:17:74:2c:dd:28:26:1e:ca:9a:2c:e0:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:34:AC:31:E2:64:C4:67:E7:14:84:74:14:97:91:74:9E:F7:DE:98
X509v3 Authority Key Identifier:
keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:14:09:8f:f1:84:ed:90:dc:cb:11:b3:ad:4c:0f:37:1e:a7:
95:bb:f7:a1:2f:d1:93:30:7d:b2:11:37:e0:36:34:4e:61:ff:
c5:5b:11:35:0d:bc:ab:54:07:d9:e5:3f:fe:3d:08:e4:3d:4a:
4e:38:a2:6b:a1:f3:8a:b6:1c:b9:94:ac:9d:d3:e1:db:e5:d2:
2c:ca:11:46:d3:b5:d5:75:04:47:61:02:62:7b:cc:5a:c1:d6:
0a:c7:e7:ab:68:d9:88:d4:c8:45:ce:51:98:ab:fa:4a:8f:44:
a4:fd:ee:8d:20:4f:25:a4:c5:fe:84:1b:16:5e:e4:76:90:fd:
84:20:fa:b8:78:d6:54:29:6b:26:2c:ea:0d:ce:84:75:52:57:
8f:33:ae:da:3f:cf:47:ae:0f:a9:64:28:9b:4d:9b:4a:92:3b:
27:30:eb:95:87:95:32:6d:94:bb:6d:db:58:36:60:2d:fb:df:
df:b3:d5:7e:e2:b6:df:98:d3:8b:19:a2:c9:d5:e5:f6:d3:ef:
13:47:e5:a4:a7:e6:4e:de:76:46:2f:a6:ea:61:95:d9:af:6a:
27:45:97:c3:a7:be:cb:fb:77:bb:67:8f:6a:df:37:eb:5a:f9:
c7:84:85:81:e2:91:dc:e5:13:da:1d:db:6e:f6:b5:73:0e:a9:
8e:38:51:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:50 2025 by rpki-client