Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
File: lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft (raw, json)
Hash identifier: BNwJAXGrKgKWGJdGQFh/YwKnyracXGzggHZ4GYiLXj4=
Subject key identifier: 55:4E:4E:8E:E8:06:B7:F9:AE:BF:36:6B:8D:81:77:E6:47:DA:EE:8E
Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Certificate serial: 019A71EEDFD56A9C3DBB6D669742AAB705DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:11 +0000
Manifest this update: Tue 11 Nov 2025 08:01:11 +0000
Manifest next update: Wed 12 Nov 2025 08:01:11 +0000
Files and hashes: 1: 6ApC-jHQIcJABZYGTnaj4cDWTZ0.roa (hash: mW6j44egYeyH1Rdwi9kE+w3aUg6boclFfelfnL+ZOCc=)
2: gnEe3OeabPYnBDM3IzIwqcZpMW8.roa (hash: VzRNxcBeLn35opHADGeiMTKNeQ/005lIREbbg/TGf9U=)
3: lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl (hash: VMSv6A9YtFBOtC64hOtlhUcTN+3IDpgnI65DxibdpI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:df:d5:6a:9c:3d:bb:6d:66:97:42:aa:b7:05:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Validity
Not Before: Nov 11 08:01:11 2025 GMT
Not After : Nov 12 08:01:11 2025 GMT
Subject: CN=554e4e8ee806b7f9aebf366b8d8177e647daee8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:f5:d9:04:06:db:e2:c2:8c:f2:11:86:68:
9d:5f:57:35:71:77:99:49:eb:39:f2:72:a6:09:2b:
70:2b:92:75:fa:34:f0:7f:b6:ae:49:79:54:49:9b:
08:16:c6:b6:6b:04:ae:0b:2a:22:44:95:de:26:3b:
96:ad:f5:9a:a2:17:63:ff:db:b5:0b:99:99:f8:bf:
4f:ea:0d:d4:4d:51:14:8b:a7:e2:ad:64:2b:31:c0:
db:7a:66:7b:03:a9:24:7a:a2:a6:ef:75:a9:60:8f:
66:6f:e3:86:b5:f3:39:98:df:a0:e7:8e:61:3e:0c:
79:ce:93:7d:d6:c8:48:81:57:5b:4a:77:7e:2f:d8:
2f:1a:57:58:31:e2:1c:0b:fa:19:aa:4f:fe:b0:e1:
b0:e4:01:d3:6d:44:70:8e:42:7e:4a:1a:9d:d1:9c:
db:94:30:9f:27:4f:61:f9:08:c4:7d:83:7c:3d:94:
52:53:5c:1c:ce:93:c6:c6:23:47:ce:7c:a9:f1:f4:
ff:08:36:7a:80:4a:94:6e:f4:35:f2:4d:8c:95:67:
58:ed:71:00:62:b4:14:ce:74:e7:14:41:ee:2a:b0:
b9:f1:12:8b:da:45:1f:86:2b:9c:25:d9:ca:bd:99:
e0:c1:40:43:47:a8:13:67:d5:d7:88:1f:3a:3b:e8:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4E:4E:8E:E8:06:B7:F9:AE:BF:36:6B:8D:81:77:E6:47:DA:EE:8E
X509v3 Authority Key Identifier:
keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d8:37:0a:24:4c:9a:cd:e8:d0:5d:2e:da:dd:f4:b2:b6:a7:
95:3b:bd:4b:a4:a5:8d:08:d9:07:0a:32:23:15:3f:c2:7b:04:
04:df:9e:69:17:53:ca:3b:99:12:31:d1:f6:88:0d:8f:b3:be:
b4:32:70:68:f5:08:ee:18:2e:bf:e3:97:6b:81:08:0c:cd:2d:
37:3d:32:e1:cb:44:ae:6f:bc:ba:7e:07:ec:8c:ea:6e:94:31:
20:83:06:cd:38:88:e1:3d:54:1d:1a:6d:df:f5:0c:18:56:ae:
27:d8:61:fb:e4:a3:c6:15:69:d1:b5:d6:fb:80:19:24:ae:cb:
ef:c6:80:cc:8a:55:ac:8e:b5:1b:fc:45:65:d0:33:41:b4:41:
01:90:ec:d2:a1:5b:8c:41:8e:25:2b:64:7f:f3:59:ee:99:3e:
fa:14:bc:da:ad:ed:ec:c2:e3:44:97:3c:f9:7a:62:92:12:0d:
9c:2c:e0:09:67:67:37:25:ce:83:12:5a:81:e3:5d:f5:a3:6a:
41:65:f3:57:8f:69:41:c6:22:2d:76:79:a3:ae:70:4f:20:5c:
0c:9b:8d:f2:bf:01:55:97:6c:6d:1b:4b:19:d5:d9:c7:6b:dd:
d7:33:a3:29:a5:2b:56:f6:87:be:a6:fa:0c:8f:57:ea:6f:e2:
13:a6:b3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:01 2025 by rpki-client