Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
File: lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft (raw, json)
Hash identifier: +XqEkXbK/xw9W5T24V+jcn6nnPldApEZ0s54xqTNvNI=
Subject key identifier: F4:87:B9:51:31:5B:18:90:AF:35:C0:FA:BB:0E:27:65:F6:77:68:8F
Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Certificate serial: 019921E7ACE88B877BB7059428F40D13B123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 02:00:55 +0000
Manifest this update: Sun 07 Sep 2025 02:00:55 +0000
Manifest next update: Mon 08 Sep 2025 02:00:55 +0000
Files and hashes: 1: 6ApC-jHQIcJABZYGTnaj4cDWTZ0.roa (hash: mW6j44egYeyH1Rdwi9kE+w3aUg6boclFfelfnL+ZOCc=)
2: gnEe3OeabPYnBDM3IzIwqcZpMW8.roa (hash: VzRNxcBeLn35opHADGeiMTKNeQ/005lIREbbg/TGf9U=)
3: lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl (hash: BbnKggQgRd+FCcyc55sUmGYqThj1/8uxGKalS2llbA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:ac:e8:8b:87:7b:b7:05:94:28:f4:0d:13:b1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Validity
Not Before: Sep 7 02:00:55 2025 GMT
Not After : Sep 8 02:00:55 2025 GMT
Subject: CN=f487b951315b1890af35c0fabb0e2765f677688f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:2f:3e:a9:87:38:12:9a:2e:85:b2:4c:a8:
82:e2:97:83:37:aa:4a:36:a7:2a:f9:60:dc:32:f9:
7e:30:7b:fb:18:c8:a4:2f:cf:2f:54:53:3c:da:b5:
3c:d7:b3:ed:94:8c:bb:bf:9b:c0:1e:a0:74:1d:e6:
cf:df:35:b7:ef:6c:94:30:5b:f5:85:94:1c:3a:49:
2d:75:97:a8:ab:2a:23:b8:9f:7c:32:8b:f8:ad:47:
5b:7c:c9:bf:44:b5:47:b0:34:74:f5:df:0b:4c:b9:
f6:52:5f:23:dd:b2:c0:71:44:5f:cf:84:53:9f:52:
f5:39:2f:91:98:03:be:ef:b8:36:34:60:12:5e:0e:
cd:e5:9f:db:2d:6f:59:96:66:04:9c:bb:d8:82:af:
0c:07:91:93:f5:ab:2b:28:f0:29:30:ce:58:42:e7:
88:ab:88:07:56:89:ed:33:92:ba:2c:95:03:75:ec:
b7:ef:40:9b:ea:5c:73:86:bc:f3:74:f6:41:0b:b2:
48:e0:24:3a:b0:e6:3f:f7:92:28:19:7d:b6:fd:ff:
1b:f6:01:9f:6a:dd:d7:a1:9b:0b:9f:11:4a:01:28:
07:24:c5:c7:a4:fa:13:16:bc:a6:e0:b9:26:f0:64:
b3:9f:63:31:e7:89:b5:5b:c6:4c:4d:ab:90:e4:6b:
6d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:87:B9:51:31:5B:18:90:AF:35:C0:FA:BB:0E:27:65:F6:77:68:8F
X509v3 Authority Key Identifier:
keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:2e:39:e9:ee:70:86:26:69:f2:9a:a3:26:3d:48:7a:39:14:
48:3d:24:7d:8d:4e:40:c0:10:95:63:3c:44:71:40:85:23:22:
38:9a:8b:c3:37:03:41:a8:fc:27:08:68:79:73:7c:f4:57:0c:
d6:77:22:31:d5:7a:cc:d3:f1:e7:3e:9e:61:df:c5:0b:f6:bc:
64:7f:4c:2f:3a:ce:cc:7b:cb:44:21:bb:fb:cd:0c:32:42:0a:
66:3f:61:ba:49:19:bd:86:12:08:9e:a0:33:16:72:8f:50:91:
4b:c4:30:a4:cc:90:16:f2:aa:51:52:b8:f2:17:7d:fb:35:c2:
27:bc:79:1d:d0:2b:eb:18:4d:fc:75:40:70:90:a1:e3:5d:e8:
21:00:1c:ba:95:b3:e6:06:d8:42:e4:0b:3a:02:db:d4:c3:d1:
10:73:5a:e3:13:c2:9b:bf:77:39:e9:dd:de:8a:16:fc:d3:12:
4a:93:f9:84:9c:9b:7a:d3:2c:85:a7:cf:95:3a:a7:5f:73:cb:
39:fa:8b:1c:57:02:57:17:bd:79:a0:68:64:d0:2e:2f:3a:c0:
7d:85:4a:d5:e5:89:6a:c5:a5:5d:71:bd:6e:a7:50:7f:43:11:
28:56:0c:ab:75:85:ba:be:9e:32:16:5b:63:49:0f:2b:56:13:
25:f0:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:03:58 2025 by rpki-client