Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
File: lnL-hxW2OhIO19Bn61Jf5LbekPc.mft (raw, json)
Hash identifier: 99iPDRIqWYcCMVL1upYo3cO1q1jPfJetLx8aDRjH33c=
Subject key identifier: 3A:03:95:2F:E2:28:97:39:57:90:90:3E:0A:63:1A:F4:FB:A1:A8:46
Authority key identifier: 96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7
Certificate issuer: /CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
Certificate serial: 0199FE7DC36C55B668F3C2F529BA9D3DED59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
Manifest number: 169E
Signing time: Sun 19 Oct 2025 22:01:18 +0000
Manifest this update: Sun 19 Oct 2025 22:01:18 +0000
Manifest next update: Mon 20 Oct 2025 22:01:18 +0000
Files and hashes: 1: DBxzAZVNSJPu_D0QGXT-19vacIM.roa (hash: bIWX7NiEWiqzGP0lZHaLTFhN+7dD70TkNkDzreVHTKQ=)
2: lnL-hxW2OhIO19Bn61Jf5LbekPc.crl (hash: Ps29LtgcCXpxlT0truBoDpzyR0cqA+syPFnnjyRUSi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:c3:6c:55:b6:68:f3:c2:f5:29:ba:9d:3d:ed:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
Validity
Not Before: Oct 19 22:01:18 2025 GMT
Not After : Oct 20 22:01:18 2025 GMT
Subject: CN=3a03952fe22897395790903e0a631af4fba1a846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:6e:c3:2a:ad:e1:cf:e4:7b:60:c8:9c:38:
15:b5:97:4a:3f:a8:46:a1:a1:11:c1:c5:88:7a:6b:
d9:b6:e2:13:50:5a:dd:49:7d:05:a2:a4:f9:9b:1f:
0b:67:a5:af:4f:ad:a2:72:58:60:c8:9d:1f:97:2e:
87:58:4e:81:f7:46:09:83:fd:34:e4:15:05:c0:47:
7f:97:05:70:6d:f1:93:48:88:19:38:f8:61:24:61:
fd:99:c2:1a:80:73:da:1a:83:58:55:ae:38:09:ee:
c7:8b:a2:01:1f:37:be:21:71:41:2d:98:cb:f0:17:
72:3d:80:5c:60:c0:71:a1:5c:27:6e:0c:85:24:64:
f4:96:75:d3:21:31:5b:26:12:d7:15:77:d2:33:ee:
82:b2:1c:0d:9a:91:e1:4a:78:1d:c6:59:cd:28:c1:
c7:6d:ab:87:8b:68:cd:e5:cf:98:18:68:07:e2:c7:
d1:02:8c:c6:ff:8a:6a:a4:2a:1b:78:00:3f:2c:b2:
4c:c3:87:a6:d5:cf:c7:5d:eb:63:93:ba:52:90:43:
7c:cd:51:d5:cf:55:23:c8:f2:21:d2:59:47:f1:25:
c1:f2:18:03:ea:ab:f7:27:77:5a:3c:22:fc:6c:4c:
4f:12:6b:84:cf:ce:69:4e:68:48:95:5b:5a:e3:52:
75:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:03:95:2F:E2:28:97:39:57:90:90:3E:0A:63:1A:F4:FB:A1:A8:46
X509v3 Authority Key Identifier:
keyid:96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:15:37:54:00:7d:2b:eb:b1:72:a7:77:f8:f0:75:e1:4e:76:
73:c1:e2:fb:d1:e1:47:5d:55:62:a8:50:87:23:60:37:7f:06:
ac:92:a9:be:ab:e6:42:fe:82:a0:2f:7e:f6:a7:e4:83:09:c4:
90:b0:b2:7d:4d:40:32:dd:54:a2:29:d6:ba:dd:61:10:a2:a3:
c0:41:c5:75:c4:0e:ac:78:df:d5:9a:22:8c:5b:55:43:c8:dc:
22:0d:a2:38:11:df:0a:02:8a:04:ba:3a:58:8c:03:76:22:8d:
9d:90:f2:34:38:6a:c3:b5:47:8f:d3:56:21:0a:cf:ba:e0:bf:
63:fe:af:45:7b:38:80:12:b6:8c:50:f1:a0:53:e9:c9:ef:1a:
0d:10:d0:33:01:08:01:80:02:b6:ee:d6:ad:4b:1b:19:64:be:
5a:e8:91:9c:e0:b8:0d:21:29:70:af:95:a7:a5:9c:c4:1c:d6:
59:d3:47:53:e3:83:d8:0d:3f:47:db:78:7f:4c:7a:28:43:e3:
1a:de:e2:dd:e0:51:d8:1e:20:24:c4:b5:40:d3:36:a2:0b:65:
28:d1:84:37:e8:9e:b5:b9:07:cf:ca:e5:3c:51:23:d9:bb:28:
2c:af:90:d9:35:33:ac:d5:a6:0c:29:20:0e:be:58:13:6a:8b:
70:78:f9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:30 2025 by rpki-client