Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: aZAbPpzqSbx8FuOR34ENnNAvPRtBfw/t4PJWO/5DTO4=
Subject key identifier: 7F:B2:25:B7:24:B3:03:60:52:21:F8:26:11:1B:96:D1:CD:32:35:18
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 0199FCC6B4C153BFF28272EFA4DAA07CA5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 16DC
Signing time: Sun 19 Oct 2025 14:01:44 +0000
Manifest this update: Sun 19 Oct 2025 14:01:44 +0000
Manifest next update: Mon 20 Oct 2025 14:01:44 +0000
Files and hashes: 1: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: /DVEGeFxs0S91NMWq+f/fjqt/BERLhQr5Y7trgaG6A8=)
2: k9ESiOC05FAL5OZXSx8n68sQwKU.roa (hash: x3z9I2/sycjs0uOQJeLYl+8lQLkZ9uNIg5/ImA60dEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b4:c1:53:bf:f2:82:72:ef:a4:da:a0:7c:a5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Oct 19 14:01:44 2025 GMT
Not After : Oct 20 14:01:44 2025 GMT
Subject: CN=7fb225b724b303605221f826111b96d1cd323518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:25:4c:55:69:af:90:a2:9b:97:f8:4d:cd:68:
b7:13:2c:65:df:e5:4c:61:34:7c:78:69:4c:60:77:
19:d4:49:b6:56:09:30:d3:1e:a9:79:69:28:8a:9c:
4f:fa:62:2a:3f:0b:f6:14:fc:13:b9:07:5c:36:13:
3a:d0:90:9d:a3:02:5b:a7:d2:44:d5:5f:28:f5:04:
37:20:90:aa:5e:f9:9f:5a:a0:88:0b:17:b2:c2:ac:
a9:2f:b0:a0:ea:c7:cf:6d:d0:e3:1f:b5:b2:c3:86:
ba:96:be:e3:c5:7a:4d:92:88:fa:7a:4f:77:6d:1e:
a2:92:14:b2:54:1d:e0:44:39:e8:d9:80:03:08:4f:
80:88:e5:31:36:c2:54:76:4a:95:5c:ac:a0:16:8a:
48:75:e3:83:08:1c:8e:f6:c6:e6:a0:13:7d:2b:ad:
9a:46:f3:fd:ab:fb:54:d2:51:74:a1:33:48:3d:23:
21:ad:e4:7a:a4:2e:96:49:29:23:35:ca:7f:63:87:
a9:05:f0:c2:83:0c:49:5e:51:2a:14:4e:0b:0f:79:
5a:1a:e7:a5:bf:6b:51:c5:7c:9d:69:42:25:91:2d:
e1:1a:07:b5:14:2e:41:26:47:2a:88:e7:e7:a9:0a:
26:63:64:63:59:19:e4:cb:ec:45:43:f3:cf:ef:79:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B2:25:B7:24:B3:03:60:52:21:F8:26:11:1B:96:D1:CD:32:35:18
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ce:98:c1:01:cd:9e:c9:77:1e:9a:10:74:d4:d6:03:80:c1:
c7:e0:4a:22:3e:c1:b2:e4:ac:1c:e3:f1:d7:ee:e9:a7:88:96:
97:d2:9c:cb:2b:9e:e2:d7:2b:49:a9:0c:64:c3:72:33:63:cf:
e3:77:31:8c:82:07:4d:26:8a:a7:3a:de:df:29:3a:11:65:02:
a8:1e:5c:c5:a1:d3:15:c2:f3:3f:4d:3e:c4:4b:49:99:6d:4f:
cb:63:2e:06:86:99:f0:24:8d:67:32:58:f8:fe:8e:44:61:a6:
88:00:07:9d:52:20:5e:be:05:0d:2b:51:77:35:39:87:16:61:
4c:d0:47:d6:ad:8a:6a:c5:b4:2e:de:7f:73:07:62:86:2e:9c:
10:86:6f:fe:ae:87:2b:86:e7:49:d6:9b:37:eb:41:66:ed:55:
35:96:85:5e:8c:b0:c2:2e:76:0f:cd:73:55:22:5f:09:c9:c0:
c6:e8:4f:88:2c:5f:49:d6:22:fd:26:ed:5b:4a:7d:87:2d:52:
51:ea:53:7f:b0:b8:e4:92:fc:5d:13:c3:c5:90:14:9d:f4:46:
38:6e:db:82:e9:54:28:3b:b8:6e:94:92:c0:1f:50:68:c9:ed:
b1:b0:88:66:8f:6a:78:4c:1b:05:45:5e:e5:7b:0e:24:4d:13:
21:28:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:05 2025 by rpki-client