Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json)
Hash identifier: lQn4nUjbHaAZtWO0sxzVHlhN3r78LJ/1FC+TZw4kiQU=
Subject key identifier: 56:C4:9F:E4:30:03:D8:64:4A:18:53:1C:8E:E2:17:5F:60:20:86:FC
Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab
Certificate serial: 019A0BCB2230BA3361489EF6A664B041DD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
Manifest number: 65
Signing time: Wed 22 Oct 2025 12:00:53 +0000
Manifest this update: Wed 22 Oct 2025 12:00:53 +0000
Manifest next update: Thu 23 Oct 2025 12:00:53 +0000
Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: waeWK9KEQzqprXw4jrhWJATX2D+hHWYbBJ28gnMcHGg=)
2: qZAKutQPBhqbC3w0uTfHNEl4Oes.roa (hash: WSklXQH6CKCwMHKCLxLhSKAUiLi3+4CRfzgpAwPPYgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:cb:22:30:ba:33:61:48:9e:f6:a6:64:b0:41:dd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab
Validity
Not Before: Oct 22 12:00:53 2025 GMT
Not After : Oct 23 12:00:53 2025 GMT
Subject: CN=56c49fe43003d8644a18531c8ee2175f602086fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:09:39:18:5e:9a:da:cd:42:58:31:ad:72:
04:51:c4:43:07:d8:2f:38:27:69:9c:4d:f2:44:1f:
91:ac:a5:8a:d1:37:a9:94:f3:ca:47:55:de:44:08:
f0:e1:3b:92:5e:ef:47:7e:81:5f:60:c6:d2:57:a4:
6c:8b:2a:c6:30:79:7e:70:6a:ef:5f:2a:c9:bf:60:
b5:c9:15:8e:a1:b2:3f:d0:65:e3:1b:93:82:39:f2:
8e:7c:33:b7:aa:aa:38:04:b8:37:d4:c5:39:76:4e:
b8:f2:10:1d:cd:81:1a:52:f1:6a:94:b4:54:48:06:
1e:e0:fe:c7:da:ba:8f:12:7e:5e:ac:ce:bb:91:7b:
b4:b5:3d:7f:b6:97:14:52:98:b2:7a:e9:da:99:3b:
73:85:a6:8b:90:c1:de:37:98:76:d8:d7:75:a3:02:
52:75:30:46:20:dc:39:a8:fa:ba:d8:97:b7:8f:85:
ba:d3:f3:45:d3:5c:5f:c7:ab:cf:24:aa:b2:fe:13:
fe:80:c8:df:88:15:43:a4:ed:70:1d:16:59:29:75:
a0:3b:66:ea:d5:ad:b5:cd:88:7b:27:23:38:46:16:
3a:01:62:79:91:bb:a1:2c:78:1a:c7:42:86:3d:8b:
ee:cb:4d:46:91:a6:ed:74:1e:87:fd:8e:94:51:7d:
3a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C4:9F:E4:30:03:D8:64:4A:18:53:1C:8E:E2:17:5F:60:20:86:FC
X509v3 Authority Key Identifier:
keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:64:d2:3d:56:b9:6f:67:a8:af:4c:20:eb:26:ac:48:be:f9:
e5:d0:fc:89:35:35:d4:a5:43:20:8e:63:5d:f6:2f:1d:75:65:
1b:04:42:63:27:b8:6c:b2:fd:14:b0:d8:86:30:19:7f:da:6e:
f8:03:3f:19:b9:34:b3:c4:83:db:50:dd:fe:61:79:56:b9:fe:
db:a6:69:7a:c4:3f:ab:b3:50:ab:14:6d:51:cc:e8:ce:09:12:
7b:bc:f0:87:e2:2c:99:ab:0f:5b:60:c2:28:80:f7:ea:3f:07:
76:8e:be:49:c0:75:c0:07:bd:47:5e:80:26:ba:61:d7:7c:85:
62:f8:0e:bb:12:7d:48:f0:7e:83:b4:ef:ed:89:14:cd:cf:d3:
a4:66:d5:23:fa:3a:6c:97:27:05:ce:dd:38:e0:10:10:42:05:
8f:fb:00:db:fd:83:bf:bc:3a:31:32:28:02:e7:78:82:71:d3:
16:2c:65:90:fd:de:b4:28:8a:e7:eb:20:6f:86:fb:40:62:fc:
a2:da:4f:8b:86:8f:0d:03:95:48:c1:c0:75:e6:0c:a0:c3:2f:
40:0a:41:b2:b1:c5:d8:8b:14:c3:10:8e:36:31:b4:b2:c6:81:
1d:5c:6f:bf:ab:b1:8d:a3:c0:6d:2d:81:8b:da:bf:1f:90:41:
38:58:72:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:18:06 2025 by rpki-client