Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json)
Hash identifier: /m5GPl8gBiJ7JfXrAfyKx2MC4axNzkbMHuUKhWaR+/Q=
Subject key identifier: B7:88:4B:FD:C2:8E:81:EE:1C:7D:97:D6:B2:0B:37:1D:FB:8B:CE:F0
Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab
Certificate serial: 0199FA6A93FE2A5229B065FDFC0F36760EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
Manifest number: 5C
Signing time: Sun 19 Oct 2025 03:01:52 +0000
Manifest this update: Sun 19 Oct 2025 03:01:52 +0000
Manifest next update: Mon 20 Oct 2025 03:01:52 +0000
Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: RinUms8mk/fTcSsfhxU1Id7A5ofP53fY1/nfinZN9gQ=)
2: qZAKutQPBhqbC3w0uTfHNEl4Oes.roa (hash: WSklXQH6CKCwMHKCLxLhSKAUiLi3+4CRfzgpAwPPYgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:93:fe:2a:52:29:b0:65:fd:fc:0f:36:76:0e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab
Validity
Not Before: Oct 19 03:01:52 2025 GMT
Not After : Oct 20 03:01:52 2025 GMT
Subject: CN=b7884bfdc28e81ee1c7d97d6b20b371dfb8bcef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:d2:71:aa:58:2b:8c:65:62:54:d1:6d:0a:
dc:7d:c8:f9:59:f0:28:29:f5:2a:09:13:89:85:cd:
96:e5:28:84:36:18:8f:e0:73:84:96:58:7c:23:37:
1f:05:fd:7b:5a:b1:ee:62:61:9a:ec:02:31:07:58:
bb:2f:22:d7:a0:1f:11:14:c0:ed:04:a9:99:7d:cb:
b8:da:0b:4e:a0:b6:f8:6d:30:0d:8b:7f:1b:2a:3c:
23:0b:b1:60:40:24:82:ba:63:8c:ae:73:a1:c3:b0:
d6:4f:7d:cf:53:36:98:81:9c:7c:67:07:53:b7:d8:
0f:42:13:8f:60:d1:70:af:bd:df:d4:3a:f4:c1:0c:
7d:24:8d:bd:b8:e3:e9:9a:b3:fe:08:1d:ef:d3:95:
8a:2f:cf:71:78:59:3f:c0:64:71:08:a6:e9:8d:0a:
b2:4c:4a:e4:9b:31:32:7c:11:fa:ec:29:73:fa:63:
06:e0:22:a7:19:ee:8e:4b:58:94:fc:e6:7c:13:e8:
38:3d:c4:8b:ce:14:79:77:d9:70:ef:c5:4e:5f:2f:
97:22:47:e8:0d:26:37:31:0b:a4:7a:1f:63:5c:88:
5a:ae:92:61:30:67:1b:65:56:d4:87:a8:ef:a7:43:
07:f1:ae:06:45:49:f9:a0:2e:be:d8:bc:0e:1e:10:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:88:4B:FD:C2:8E:81:EE:1C:7D:97:D6:B2:0B:37:1D:FB:8B:CE:F0
X509v3 Authority Key Identifier:
keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:81:fe:53:b5:de:89:37:e3:88:62:f3:b7:00:42:9d:82:ea:
9b:72:c5:08:1d:9c:ff:96:30:03:77:75:f6:90:2b:a3:bb:57:
e5:bd:bd:3f:a1:86:2f:07:f7:a7:f9:d4:a3:b8:15:96:4f:44:
27:48:21:94:d2:32:e4:a3:5e:aa:32:b1:29:59:60:67:0b:8b:
b9:5c:ed:d4:0a:97:c4:3e:9d:a1:6b:6d:36:d3:6c:aa:2e:7e:
83:60:56:8b:5b:9a:db:6b:c2:0e:da:0a:b1:1e:93:23:5a:7c:
60:32:be:f9:f0:e7:b0:fc:05:1a:58:12:9b:7d:0a:8c:82:f5:
1b:b5:4f:be:1e:b1:5c:f9:73:a6:69:e3:32:c4:d6:24:8a:a7:
b5:fa:6c:0e:48:52:02:1b:9e:a6:0d:b2:49:6d:72:e7:19:c7:
07:f1:fa:77:0f:4e:e8:e5:e3:01:dd:d0:c0:e1:ba:70:12:ad:
eb:11:a8:20:da:4d:ec:ad:7f:e7:38:52:f3:64:47:eb:93:6d:
1c:fe:37:f9:2f:cc:d6:99:cd:70:c8:4b:66:df:f8:75:1d:35:
89:eb:24:66:30:29:b9:a6:96:75:ea:37:2e:2c:f2:f7:b1:60:
88:3a:fe:7a:fb:3a:66:a7:b8:a1:97:84:58:ee:d6:69:fd:15:
3b:21:59:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:25 2025 by rpki-client