Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
File: LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft (raw, json)
Hash identifier: o3Nr2jWletR/+zWtplz4JcV/ighHYtcyTx4oCcjn9EU=
Subject key identifier: F7:DB:49:10:E5:54:FE:81:A4:EF:72:54:02:30:DF:17:84:3F:E2:D3
Authority key identifier: 2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
Certificate issuer: /CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Certificate serial: 0199FD345447D0B38BB90375208801D35032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
Manifest number: 16A6
Signing time: Sun 19 Oct 2025 16:01:28 +0000
Manifest this update: Sun 19 Oct 2025 16:01:28 +0000
Manifest next update: Mon 20 Oct 2025 16:01:28 +0000
Files and hashes: 1: LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl (hash: 5gTmxGdY8XSNKss4P0NGvgjVjALAZDtql6+Su8zZKP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:54:47:d0:b3:8b:b9:03:75:20:88:01:d3:50:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Validity
Not Before: Oct 19 16:01:28 2025 GMT
Not After : Oct 20 16:01:28 2025 GMT
Subject: CN=f7db4910e554fe81a4ef72540230df17843fe2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:d1:d1:72:a0:59:50:bc:3b:d6:23:5a:db:
fb:56:bf:f5:2d:5c:15:f6:82:8e:ce:2f:2f:b8:c0:
5e:bb:eb:f7:72:8c:7f:45:95:fd:59:0e:47:c0:9c:
14:c4:51:9a:c3:e6:d4:c3:98:ca:d3:7f:23:33:44:
19:61:4d:66:f9:ab:5b:2c:ac:85:dc:b5:9a:39:97:
1b:95:6d:39:d1:40:c0:c7:69:21:52:cc:31:60:3d:
bc:9b:d7:cf:d6:1e:54:74:f3:3e:77:4f:93:98:5b:
af:8d:40:5c:ca:8a:31:57:89:19:9c:2f:86:e2:1b:
5b:b8:1e:d2:dc:26:43:73:77:ac:45:dc:2e:78:8a:
58:52:06:6e:6b:f4:2e:8b:a6:37:8f:a8:56:ee:d8:
bf:dd:c9:3b:31:f1:5e:eb:83:24:0e:e5:a6:b1:8b:
bc:50:7d:36:9b:c5:83:bc:1c:9a:bb:4f:0b:88:d4:
7c:1e:43:1c:c1:4a:27:c2:89:88:06:d7:fb:f4:26:
ad:46:37:11:6e:4b:03:96:dc:f0:4a:60:05:e5:40:
b3:3f:82:e6:5f:64:ce:84:4a:ca:cf:32:f3:dd:d6:
c7:62:ce:ca:b4:06:e8:53:64:eb:ea:e1:b9:6f:1d:
48:de:a8:cf:1f:b7:14:8f:c9:71:00:23:1a:18:48:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DB:49:10:E5:54:FE:81:A4:EF:72:54:02:30:DF:17:84:3F:E2:D3
X509v3 Authority Key Identifier:
keyid:2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9d:9b:1b:15:b7:27:b7:85:16:cb:3e:74:21:ff:f9:32:cb:
ed:71:34:45:7b:5c:c1:ff:c5:ab:ee:49:78:93:94:9f:65:cd:
0e:6a:11:52:e1:7d:d2:e0:11:5f:d7:76:62:83:38:29:1b:3c:
52:58:95:6c:6d:48:c1:96:53:54:5a:a4:e9:c9:20:f3:5e:c3:
b9:3b:89:0c:cb:6a:53:53:4f:79:c4:8f:15:61:96:6d:ca:0b:
8a:90:01:5d:21:f4:c4:49:6c:1a:7c:39:9d:d2:05:63:b6:a1:
df:bd:92:7d:2a:2e:eb:11:89:ed:64:86:9e:0a:d3:a3:59:e7:
2f:8d:8a:16:d5:4e:b8:34:8c:3c:24:f7:90:49:65:7f:12:18:
a4:a0:af:14:d4:04:67:2b:08:3a:8d:27:ce:b7:ed:d9:d6:95:
b8:e3:5f:b7:c4:1d:0a:18:bc:fd:0a:8b:43:65:bd:a9:ff:d6:
60:05:d2:e9:81:a0:b5:21:84:22:08:0d:d7:7c:2a:d6:de:bc:
bf:01:f7:6b:1a:3b:56:f9:6d:05:eb:a8:c9:3c:8a:75:65:16:
22:7e:81:51:e5:6b:47:54:3d:65:15:0d:b0:ae:a5:72:a6:ff:
25:12:d7:9f:54:0e:54:cc:29:fc:96:13:d6:a5:4c:ff:8f:bf:
25:96:a6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:35:07 2025 by rpki-client