Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
File: LNH_SXJfYzHmO47XZEjXJd16hN4.mft (raw, json)
Hash identifier: 2cMI6IMRf8M0oxof/nwcStu/kYpapQ3mAjGvgclJ9IQ=
Subject key identifier: 3F:D1:EC:B4:41:52:47:58:21:AD:78:BA:C9:3C:4C:14:38:CC:A6:AA
Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
Certificate issuer: /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Certificate serial: 019A725C748C36546B832FD8A99FAA9DAF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 10:00:53 +0000
Manifest this update: Tue 11 Nov 2025 10:00:53 +0000
Manifest next update: Wed 12 Nov 2025 10:00:53 +0000
Files and hashes: 1: LNH_SXJfYzHmO47XZEjXJd16hN4.crl (hash: aVlXS896eak9v0RxDJWxKjTkanbBtM4b0d8qF4hX0dc=)
2: Upzwlv30c7TC3O9gxJ1kAAgNiDA.roa (hash: yTJNjXZ4BZhaMYBc9uxx4ckW86PF2pvOMSFidtmg0eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:74:8c:36:54:6b:83:2f:d8:a9:9f:aa:9d:af:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Validity
Not Before: Nov 11 10:00:53 2025 GMT
Not After : Nov 12 10:00:53 2025 GMT
Subject: CN=3fd1ecb44152475821ad78bac93c4c1438cca6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:8c:49:6b:f2:90:8c:a6:58:74:ff:4e:d0:
8d:31:6e:55:43:47:92:96:f5:59:12:bc:53:4e:67:
54:5c:02:59:ba:c9:7a:ff:8f:9a:2d:82:05:34:ff:
65:8f:77:ef:a1:05:fc:59:bc:3b:be:2b:43:8a:d6:
b6:9a:e5:cf:93:1c:4a:da:39:b2:63:09:40:69:40:
8f:eb:6d:4e:c7:43:b5:84:b3:64:43:dd:56:22:9e:
90:9f:6e:0d:f4:5d:b8:2b:de:bb:45:a2:55:7a:e5:
11:38:75:f4:5d:12:eb:2b:90:2b:af:ae:76:9d:86:
5b:82:03:2f:74:06:e4:79:a7:c2:fb:a7:3a:6f:7b:
c3:5f:61:28:5c:8a:17:5f:8c:0b:4f:cc:28:7c:2d:
02:3b:a5:66:89:6e:c3:b2:45:99:5a:98:89:f1:2a:
7d:3c:b6:b9:5b:50:aa:ce:ce:99:6c:50:68:33:a3:
df:4d:5a:23:f1:c3:1c:a2:cc:9f:2b:c3:ab:e6:77:
5e:df:b8:76:e2:8e:22:a1:cf:28:37:00:99:48:df:
d7:bb:5e:76:79:8d:90:78:b7:b1:ac:c3:ab:bf:f2:
18:e0:df:60:49:65:40:13:8f:94:ad:7d:47:d8:47:
65:4f:54:60:30:1c:a4:b1:ce:d7:43:38:7d:b8:87:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D1:EC:B4:41:52:47:58:21:AD:78:BA:C9:3C:4C:14:38:CC:A6:AA
X509v3 Authority Key Identifier:
keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e0:9f:88:8f:fa:10:5a:6c:d4:6f:25:b9:f6:77:7f:33:ce:
c3:18:bb:f8:b6:02:07:87:e6:a5:72:fb:ae:ce:64:12:07:6a:
c4:83:6f:6b:31:fc:3a:ae:80:7b:5c:ef:82:bc:cb:f3:23:82:
b0:f9:a4:4c:02:83:ef:ba:a3:20:06:17:ba:45:e5:f7:e8:48:
84:dc:d9:83:13:f0:55:b9:ee:e9:d7:e7:dd:af:9d:d4:15:32:
6e:cc:67:aa:50:6b:9d:25:ef:91:f6:8f:ae:9c:4c:ca:79:e4:
f2:8b:37:3b:4b:48:a6:ee:f7:04:ba:ce:73:46:d2:c2:fb:5e:
dc:bf:86:44:46:85:49:43:1e:91:6b:39:be:d7:33:6d:8c:ba:
41:ea:82:31:cc:22:37:be:26:53:25:81:cd:91:1d:fb:58:d3:
ae:ed:99:56:ba:92:c9:c1:96:09:bb:9e:c3:81:d4:24:5f:2e:
59:64:a7:e6:4f:03:57:c0:04:40:cd:83:a2:42:47:c4:ab:ba:
65:cb:d6:ca:6f:bd:60:27:f5:0b:44:6b:77:8d:cc:01:25:5d:
3e:a5:ab:b7:ee:30:08:a4:67:e8:b0:9e:e1:7c:9a:91:c5:cb:
40:3e:3d:9a:95:68:52:50:81:a3:67:f2:b4:4c:c2:d1:ab:3f:
0b:71:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:36 2025 by rpki-client