Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier: RBdj23H9FQSe+5I14hXte1DFOIP652/mttBGyiaG7Yo=
Subject key identifier: 16:3B:40:AE:89:34:F6:1D:43:B6:BA:C3:B7:1F:54:74:24:ED:89:62
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial: 019A2553A0D33EB84A96297917CAA4A22C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 11:00:28 +0000
Manifest this update: Mon 27 Oct 2025 11:00:28 +0000
Manifest next update: Tue 28 Oct 2025 11:00:28 +0000
Files and hashes: 1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=)
2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: gwU4YwHseU+dAW7lSl6VBrVEgogrwllwNGsoJWkAun4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:a0:d3:3e:b8:4a:96:29:79:17:ca:a4:a2:2c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Validity
Not Before: Oct 27 11:00:28 2025 GMT
Not After : Oct 28 11:00:28 2025 GMT
Subject: CN=163b40ae8934f61d43b6bac3b71f547424ed8962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ac:1d:fe:b8:2a:97:c4:01:ce:cf:e6:19:7e:
13:5e:31:6b:59:5a:aa:78:18:b1:2e:d5:b6:40:a3:
5a:21:a5:88:17:fc:46:41:17:fb:b8:b6:22:29:9d:
d0:68:d5:75:b5:f3:a7:3b:91:2d:70:29:e5:8a:13:
b5:f6:1a:5d:f2:64:db:e3:b6:cb:d6:93:ed:9a:3c:
90:75:7c:ca:d7:5d:3a:ea:44:83:8b:73:00:e7:62:
16:2e:b8:70:42:fe:22:99:09:7b:42:ed:f6:12:51:
29:97:f8:29:e2:0b:fc:79:b9:f3:53:31:2b:e3:d7:
6e:55:77:b7:a0:72:28:a5:90:a8:67:8d:71:59:e9:
e6:18:02:6b:ee:67:6a:41:df:da:9d:db:84:86:2b:
2f:a4:77:8c:4f:b3:d2:62:fc:60:06:df:7e:f7:fd:
c8:57:cc:45:b6:a2:8c:91:cd:eb:d3:78:1d:a8:2d:
06:df:7c:6a:22:2a:38:b0:70:40:54:2b:25:03:78:
fe:1c:cd:87:11:12:ff:c5:35:73:a4:ab:05:a4:42:
c6:7b:c4:6e:69:46:22:41:08:8f:7f:91:2f:8a:7c:
29:39:fb:fb:d7:f1:3c:4f:ab:e8:94:92:23:ce:3d:
94:a1:01:f0:57:d2:f2:97:65:24:10:ef:cc:88:9b:
87:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3B:40:AE:89:34:F6:1D:43:B6:BA:C3:B7:1F:54:74:24:ED:89:62
X509v3 Authority Key Identifier:
keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:24:77:e4:5e:76:c2:67:33:7f:64:9f:96:c2:b3:21:15:09:
c5:00:f9:30:b6:d9:14:17:09:d7:93:cb:fb:48:c7:ca:25:79:
01:01:51:4d:62:50:10:01:93:35:25:29:f2:61:f7:fc:1f:be:
ff:32:2f:d2:40:26:43:cb:af:67:1b:95:23:ec:88:81:12:a5:
d5:0f:8f:50:e8:37:65:9b:78:fa:df:3b:b6:19:8f:03:54:97:
ed:e8:7f:a6:bb:be:c8:61:3b:66:8e:7c:b1:75:f8:fb:2e:dd:
4e:98:0d:81:98:8b:73:9a:f7:19:30:21:c6:78:1f:93:a1:c6:
e7:db:5f:82:80:8b:ca:61:d9:92:5a:20:e7:bd:85:1b:ee:4d:
10:78:db:79:1c:9c:95:33:1a:6a:34:60:e5:56:3d:cc:2e:b7:
ed:45:1f:4a:12:6f:2e:c5:7a:c7:da:79:40:60:c0:df:43:5c:
b9:42:9a:0c:7e:6a:1f:7a:25:15:ef:8b:1b:c7:17:9c:07:4a:
a4:e0:4d:76:0c:ce:29:1b:56:a8:d2:f0:0e:ee:11:f9:a4:8f:
c2:87:0b:a1:db:07:ca:08:9f:ee:4f:a8:8e:fe:51:63:e0:0c:
79:1c:50:36:76:4d:9a:6c:8f:f1:35:df:6f:78:2f:14:e5:9d:
bd:1c:4a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:25:27 2025 by rpki-client