Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
File: LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft (raw, json)
Hash identifier: xCUn4iUzy61q6gAA6b/xAkVw3w6ROeAkd1NE1yORGE8=
Subject key identifier: C8:66:A5:A9:38:B7:47:A5:6C:4C:BC:D2:E0:00:16:F3:0C:CF:03:F6
Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
Certificate issuer: /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Certificate serial: 019A71B7C8D9304FBABBBBE2A6D332CBA2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:01 +0000
Manifest this update: Tue 11 Nov 2025 07:01:01 +0000
Manifest next update: Wed 12 Nov 2025 07:01:01 +0000
Files and hashes: 1: Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa (hash: hCl5v0Z86Jy7+0GlCW+6oKfv2bUVufzYinCdryb0Gzo=)
2: LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl (hash: QWtuQCoT7FuVeBDVXR3KaAGEM88c6rtLtS3DYGz+Xu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c8:d9:30:4f:ba:bb:bb:e2:a6:d3:32:cb:a2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Validity
Not Before: Nov 11 07:01:01 2025 GMT
Not After : Nov 12 07:01:01 2025 GMT
Subject: CN=c866a5a938b747a56c4cbcd2e00016f30ccf03f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:85:d5:7e:8f:2b:0e:22:8c:0e:7a:5f:c5:4f:
a1:2a:62:d7:6b:c0:d1:cc:0e:af:15:3b:0b:f9:27:
11:83:99:1e:7a:32:07:52:ee:10:c5:7e:75:80:61:
19:79:62:5c:96:fb:1e:d6:8e:2d:1b:bb:31:dd:3d:
76:df:c3:d6:3c:15:de:4e:cd:7a:b4:24:8e:2b:31:
65:d6:63:55:23:cd:97:54:80:0e:ef:d7:6f:72:e0:
36:36:a2:02:f4:26:1a:d9:0f:aa:7c:ba:69:50:69:
05:54:d1:c1:96:c5:52:98:4f:d2:39:d9:29:c1:0f:
a2:db:7e:ba:5d:f8:5d:8c:9a:09:db:53:08:cc:3c:
9c:49:9f:25:95:c5:fe:ee:34:72:73:bd:6d:fe:7d:
e0:c4:1c:6c:f6:93:b8:fc:50:9d:31:f4:3c:4e:20:
bf:0d:65:b8:51:1b:ae:66:0a:31:50:b4:eb:ce:39:
c5:25:1a:e2:da:9b:83:c6:54:5c:1a:da:7c:5f:51:
16:16:fe:3a:73:f4:fc:38:c9:2d:8f:9f:ac:04:3b:
03:d9:db:94:8b:6a:5d:d8:6a:f9:f0:16:ee:bc:ec:
23:cb:31:32:d8:80:49:02:ca:fb:b0:92:aa:c7:e6:
c2:3e:b6:ba:72:53:d8:16:80:1a:b6:5f:a6:41:60:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:66:A5:A9:38:B7:47:A5:6C:4C:BC:D2:E0:00:16:F3:0C:CF:03:F6
X509v3 Authority Key Identifier:
keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6c:97:9b:01:2b:87:e0:f2:6f:08:ca:ea:05:d9:7a:cf:55:
55:eb:b2:0d:f7:d3:f6:4e:bd:77:05:2d:6b:8f:32:fd:6d:83:
02:ee:e3:e1:59:f7:d7:27:5f:58:6f:69:3a:4a:40:9e:0b:27:
61:39:04:b9:99:27:f3:cf:a1:c9:84:23:a2:38:20:c5:1f:59:
b5:f5:49:01:4f:d7:62:d3:f3:31:45:fd:f6:bd:71:84:1b:3b:
59:04:f6:2c:d7:a9:14:48:83:b4:7e:ac:82:9f:09:3c:96:f5:
02:81:fc:7f:c1:fb:e9:69:84:cf:ab:1d:50:dc:e8:14:8a:a8:
6c:0e:76:b8:1d:24:dd:60:7a:ff:86:65:15:ec:bf:1c:5d:d8:
24:36:75:9b:6c:f2:34:2a:77:1e:2e:a5:57:0b:99:3a:37:6c:
64:0e:03:3c:5f:7a:4a:1f:ed:a1:56:67:48:cb:8e:4f:e8:77:
fe:c5:24:5e:d2:cc:23:57:7e:1a:29:89:bc:8b:2b:dc:a4:ca:
80:de:97:ce:e3:dc:ca:99:5d:74:94:70:eb:f8:75:f4:94:b1:
cb:48:0c:4a:07:ba:8f:73:10:90:c3:bb:92:28:29:10:25:24:
e8:9d:96:a8:6c:f8:18:cf:f7:c9:73:55:f5:b0:23:81:f3:a6:
fe:e4:6d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:14 2025 by rpki-client