Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier: Bee1Www9RI/IcWW9y6i7s27OEIHPociGCse0bS0L9JY=
Subject key identifier: AA:0F:9B:AA:B4:0A:93:26:54:19:00:3A:FB:64:94:EB:C4:78:36:F3
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial: 0198D73B623970D6767B1CFB96D6E0EBA32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 14:00:49 +0000
Manifest this update: Sat 23 Aug 2025 14:00:49 +0000
Manifest next update: Sun 24 Aug 2025 14:00:49 +0000
Files and hashes: 1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=)
2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: iCFoCSz29okMekcSyb5NzlpfYwY8NetPczc8fwoF/9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:62:39:70:d6:76:7b:1c:fb:96:d6:e0:eb:a3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Validity
Not Before: Aug 23 14:00:49 2025 GMT
Not After : Aug 24 14:00:49 2025 GMT
Subject: CN=aa0f9baab40a93265419003afb6494ebc47836f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:b2:f3:52:7e:18:f7:30:d3:2f:32:4c:fd:
89:af:90:0f:d8:09:ad:1f:e9:fe:e7:0e:29:7e:4b:
8b:79:3b:b0:0b:73:bd:e1:78:93:80:47:62:9e:31:
76:dd:4e:cd:0a:de:54:c4:91:a3:42:2c:ae:20:fe:
38:d2:4e:25:78:80:ef:09:c2:1a:d3:9e:72:fb:72:
51:75:8d:da:48:98:dd:cb:6f:71:0f:76:5b:f2:83:
1f:1e:0d:f0:ba:71:c1:70:e2:96:e3:4f:9c:72:90:
cf:d1:de:3c:b4:07:cd:ef:d7:8c:c6:d7:b7:c2:df:
c8:71:ae:76:f8:bc:59:08:69:44:30:10:c4:42:b6:
49:eb:79:92:7f:bb:cb:89:d4:5d:05:ec:8f:fc:3e:
80:e3:a5:8b:54:ca:86:78:75:f9:50:41:13:84:e6:
8c:84:0a:a7:00:eb:ac:a5:9e:db:6f:4e:33:3f:be:
1b:10:97:67:e4:5f:b9:39:2f:21:68:69:11:ec:b6:
84:dc:e1:dc:ba:ee:f3:e0:2b:9d:4d:f3:18:19:97:
11:b6:c1:fa:b5:8b:d2:92:6d:27:90:35:bd:a4:6e:
ba:1b:3d:26:d5:b3:0d:fe:90:f7:24:f7:64:39:4c:
7a:e5:75:7d:f9:10:3a:55:35:67:09:e5:6a:af:ae:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0F:9B:AA:B4:0A:93:26:54:19:00:3A:FB:64:94:EB:C4:78:36:F3
X509v3 Authority Key Identifier:
keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:3e:d9:e5:d2:d8:9a:85:f4:3b:77:9d:7a:30:c5:07:1f:aa:
64:a1:1f:88:7f:7b:79:07:b9:74:8b:d9:77:1c:9f:10:2e:e8:
69:f6:c8:48:19:93:71:20:41:bf:cd:12:69:2d:bc:66:a0:c8:
d8:2d:58:17:88:b6:a0:ad:81:3f:85:b1:eb:56:c8:2e:b1:56:
3e:39:fe:6d:d3:8e:6a:e5:5d:96:05:8b:90:b0:09:04:60:7c:
26:94:d5:e3:da:52:af:7c:91:b7:0b:cb:4a:98:1d:75:22:bf:
1e:98:ec:db:68:56:c2:cd:0b:aa:a1:37:f4:b4:fa:9d:4a:33:
30:98:a3:a7:33:97:0f:ef:b8:44:c7:20:32:d8:ea:ae:18:5d:
87:49:51:19:17:69:cc:93:c3:13:8b:45:7b:f5:63:8d:8b:0e:
21:46:01:8b:15:6c:45:98:8f:db:0c:a1:44:f2:e2:e5:53:34:
9b:5a:a8:f0:d9:9e:6b:38:4e:20:89:e9:3a:32:b1:49:91:74:
32:d3:8b:24:fa:92:31:84:75:79:72:6b:e0:37:75:38:4c:48:
4c:d1:cd:07:5c:12:c7:e9:1c:b6:91:3f:9a:8d:ef:45:c8:e0:
f3:64:3a:4d:72:26:75:7e:ae:c8:c3:5f:e2:66:9a:9a:72:26:
83:85:55:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:14 2025 by rpki-client