Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
File: LNH_SXJfYzHmO47XZEjXJd16hN4.mft (raw, json)
Hash identifier: nHm8GORjx6p1HShEuM0Rns6iEZru+TnwfrOWLAIvcxc=
Subject key identifier: C7:DC:87:4A:4D:C3:3B:19:A0:4E:62:94:A4:CF:E9:87:95:C6:B2:5D
Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
Certificate issuer: /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Certificate serial: 0199FC8F4B98600A667284742B20DAA6FC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 13:01:13 +0000
Manifest this update: Sun 19 Oct 2025 13:01:13 +0000
Manifest next update: Mon 20 Oct 2025 13:01:13 +0000
Files and hashes: 1: LNH_SXJfYzHmO47XZEjXJd16hN4.crl (hash: uduVyzEqr4AV93BvOLoFkGBUT1zYspbPVmwmCmrbz90=)
2: Upzwlv30c7TC3O9gxJ1kAAgNiDA.roa (hash: yTJNjXZ4BZhaMYBc9uxx4ckW86PF2pvOMSFidtmg0eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4b:98:60:0a:66:72:84:74:2b:20:da:a6:fc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Validity
Not Before: Oct 19 13:01:13 2025 GMT
Not After : Oct 20 13:01:13 2025 GMT
Subject: CN=c7dc874a4dc33b19a04e6294a4cfe98795c6b25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:85:fc:37:db:9e:d9:39:2e:b2:d3:c3:e9:
dc:db:05:b6:67:84:4c:b1:ba:c3:f3:7f:18:46:4a:
63:15:5d:8d:57:e5:c8:0e:ba:ae:89:53:d2:c4:f4:
a1:ce:55:15:5c:ce:5d:c0:06:b4:13:5d:49:e8:a9:
bd:e9:7b:de:89:f4:5a:95:2d:aa:61:38:b1:02:e8:
a5:13:b3:c0:6b:3d:ba:c5:64:ac:87:54:03:1a:6f:
ef:21:12:09:55:9b:15:39:95:6a:b1:30:27:dd:14:
70:0b:e3:59:57:1e:e6:ea:bd:9a:fb:a6:93:28:6f:
b7:35:3e:b4:0f:c8:15:04:dd:92:ae:e0:ba:c2:81:
88:35:a4:6b:e7:d9:c8:97:2f:6c:ad:cd:1a:a4:6c:
63:42:11:7d:81:75:28:04:38:73:db:ee:4f:ff:48:
f4:04:63:1a:f9:a5:f9:eb:6f:63:f5:57:92:d5:aa:
92:5b:8f:c1:95:3f:90:37:71:e3:60:c9:23:c7:a2:
19:1d:53:2e:51:ac:64:05:7e:de:16:72:51:ba:54:
0e:1a:f6:97:1a:cf:68:db:29:83:c5:44:f8:b2:3c:
f5:2c:37:b7:18:34:95:13:71:6a:d4:2a:d3:cb:f3:
15:f8:15:dc:33:f0:c9:a5:e3:06:29:ab:d3:71:17:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DC:87:4A:4D:C3:3B:19:A0:4E:62:94:A4:CF:E9:87:95:C6:B2:5D
X509v3 Authority Key Identifier:
keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:18:49:6f:e1:03:95:96:d8:c0:2d:67:7c:1d:e9:5f:30:79:
c7:8b:de:bc:9a:d8:a2:db:1b:ce:b9:0c:1c:62:5e:35:92:2e:
f9:fd:c6:81:30:39:3f:bc:0c:3d:c3:6f:98:32:fc:31:18:39:
f2:3a:25:4d:5e:54:b6:1a:bf:28:89:c0:2f:8b:78:fa:89:8e:
8b:97:c6:9e:7b:eb:64:c9:52:5e:1d:2b:cc:95:88:0d:69:3c:
9c:75:73:92:bf:b6:de:b8:6e:c0:a3:af:16:d6:5d:bb:a6:38:
21:bf:31:80:6f:3e:db:63:73:40:27:48:20:19:47:7a:f8:97:
dd:f7:12:d7:39:ad:d9:40:dc:eb:03:0c:ea:5b:14:c1:d5:b0:
5c:10:f9:fa:c5:24:29:6c:54:d2:b4:44:84:a9:1f:a8:a9:63:
9a:ca:e4:a6:5b:dd:9e:96:66:06:4b:dd:06:26:ef:e9:24:53:
86:4e:c8:c6:84:df:19:e2:c6:d3:d5:3e:b1:be:29:d3:f4:86:
0a:d3:d3:6c:e8:d7:f4:56:f9:04:d9:0c:02:ea:67:b3:00:38:
12:4a:fb:11:c5:0f:84:f4:3a:1b:57:9b:f8:69:be:35:a2:69:
ad:ff:56:c7:3d:33:f3:08:31:53:ba:ab:b9:40:1d:55:0b:95:
71:1d:ff:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j0uYYApmcoR0KyDapvxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZDFmZjQ5NzI1ZjYzMzFlNjNiOGVkNzY0NDhkNzI1ZGQ3
YTg0ZGUwHhcNMjUxMDE5MTMwMTEzWhcNMjUxMDIwMTMwMTEzWjAzMTEwLwYDVQQD
EyhjN2RjODc0YTRkYzMzYjE5YTA0ZTYyOTRhNGNmZTk4Nzk1YzZiMjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMyF/Dfbntk5LrLTw+nc2wW2Z4RM
sbrD838YRkpjFV2NV+XIDrquiVPSxPShzlUVXM5dwAa0E11J6Km96XveifRalS2q
YTixAuilE7PAaz26xWSsh1QDGm/vIRIJVZsVOZVqsTAn3RRwC+NZVx7m6r2a+6aT
KG+3NT60D8gVBN2SruC6woGINaRr59nIly9src0apGxjQhF9gXUoBDhz2+5P/0j0
BGMa+aX5629j9VeS1aqSW4/BlT+QN3HjYMkjx6IZHVMuUaxkBX7eFnJRulQOGvaX
Gs9o2ymDxUT4sjz1LDe3GDSVE3Fq1CrTy/MV+BXcM/DJpeMGKavTcRd4ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfch0pNwzsZoE5ilKTP6YeVxrJdMB8GA1UdIwQY
MBaAFCzR/0lyX2Mx5juO12RI1yXdeoTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDct
Nzc4OGFlZTEyMTVmLzEvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDctNzc4OGFlZTEyMTVm
LzEvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5BhJb+ED
lZbYwC1nfB3pXzB5x4vevJrYotsbzrkMHGJeNZIu+f3GgTA5P7wMPcNvmDL8MRg5
8jolTV5Uthq/KInAL4t4+omOi5fGnnvrZMlSXh0rzJWIDWk8nHVzkr+23rhuwKOv
FtZdu6Y4Ib8xgG8+22NzQCdIIBlHeviX3fcS1zmt2UDc6wMM6lsUwdWwXBD5+sUk
KWxU0rREhKkfqKljmsrkplvdnpZmBkvdBibv6SRThk7IxoTfGeLG09U+sb4p0/SG
CtPTbOjX9Fb5BNkMAupnswA4Ekr7EcUPhPQ6G1eb+Gm+NaJprf9Wxz0z8wgxU7qr
uUAdVQuVcR3/dg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:20 2025 by rpki-client