Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier: mUo1qxjkCDAY5TD97DwQkJOlsyNIk7z+TUCesMUvy38=
Subject key identifier: A1:23:CC:17:4D:4D:4B:CB:A7:75:94:6A:04:56:69:45:3F:AA:17:FD
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial: 0199FCC67F7555E9FE6716FAC5990F5E49DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:31 +0000
Manifest this update: Sun 19 Oct 2025 14:01:31 +0000
Manifest next update: Mon 20 Oct 2025 14:01:31 +0000
Files and hashes: 1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=)
2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: DtaIcdUdXRRv6dBp0cbMQRY/ly711JHe4Yct3jXVyBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7f:75:55:e9:fe:67:16:fa:c5:99:0f:5e:49:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Validity
Not Before: Oct 19 14:01:31 2025 GMT
Not After : Oct 20 14:01:31 2025 GMT
Subject: CN=a123cc174d4d4bcba775946a045669453faa17fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ef:03:3b:8b:2e:a9:47:4c:e0:76:6f:ce:4d:
ab:5f:0d:c3:02:64:2c:e5:78:48:e2:f4:af:82:ab:
10:8e:4a:c2:fd:68:9a:c9:77:4a:3c:50:b6:76:14:
cf:d0:05:6d:8d:91:6b:cf:9b:b7:8c:9a:85:ae:bb:
b2:7c:8c:95:52:61:e3:da:eb:bd:fd:e5:96:48:16:
13:26:29:83:76:fb:24:93:72:17:5f:6b:d3:13:08:
42:c3:ce:94:e8:98:5b:4a:28:f9:f1:4a:4a:8a:34:
99:9e:67:a0:eb:a9:8b:a0:01:c2:7b:25:48:9c:00:
fb:5b:8a:31:36:fe:a3:fc:32:3f:3d:3a:29:1b:39:
a5:7b:8c:37:be:8a:61:0c:df:a1:f8:12:d2:69:cb:
33:67:29:88:f7:da:d0:08:57:f2:7d:c7:58:76:17:
95:91:ea:64:d3:45:4b:bb:be:2e:10:32:72:90:11:
b1:db:0c:41:43:97:2b:b0:43:20:77:84:49:97:a5:
9d:f8:83:ea:2c:8c:5d:eb:44:85:cd:34:a6:0c:5e:
4d:c6:9a:c8:5a:2c:c7:0b:7a:6c:e7:a5:37:ca:7a:
71:26:e3:cb:e8:3c:8c:29:b1:74:d6:34:b4:d3:88:
e7:4b:96:7d:25:0c:b1:a0:a0:e2:b7:56:a6:92:be:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:23:CC:17:4D:4D:4B:CB:A7:75:94:6A:04:56:69:45:3F:AA:17:FD
X509v3 Authority Key Identifier:
keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4c:ec:d0:73:3a:dc:36:ba:8d:72:5b:d9:26:d2:c1:73:50:
2c:8d:de:03:9c:c3:5d:2f:2c:69:94:05:42:5f:82:47:41:65:
10:17:d2:fe:24:ef:b2:de:ba:29:f6:89:90:18:59:3a:d0:10:
c4:f3:03:c4:38:93:a5:4b:50:f9:98:a4:95:7f:1b:56:1c:03:
16:5f:7d:77:40:d2:6d:94:eb:8f:70:17:00:88:0d:8c:4c:f4:
e9:35:82:7a:9f:c6:fb:cb:31:94:5c:a9:a9:9e:be:f0:8f:1b:
f2:d9:9a:fa:91:fa:fd:3f:71:33:8f:ab:b9:3c:a2:36:19:a8:
b8:0c:e9:bd:94:4a:ee:e4:ac:e1:3e:2d:13:a4:d6:bc:2e:d1:
a1:79:6c:99:e7:fd:29:e1:f0:e1:0d:95:08:c8:34:6e:b7:2a:
7f:cf:60:3a:12:3c:e5:16:98:74:fe:36:05:69:09:d6:49:0e:
b7:93:c4:20:8a:bd:f0:3e:7b:a8:09:1a:f2:c5:19:ed:12:59:
47:5f:7e:79:30:cc:97:9b:80:b9:22:cb:3f:ad:96:20:c0:e3:
50:27:c2:70:ea:39:5c:c1:04:37:6a:72:b9:9d:2a:8c:bc:3e:
24:ed:76:da:a2:9a:b2:84:6c:c8:4f:5b:b6:86:aa:be:7a:7a:
2f:8d:63:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:11 2025 by rpki-client