Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier: RC1CNbepD1/EzxaSG+8UP2bhUHKp7zpb1sv7eH7jFFw=
Subject key identifier: 0D:30:AA:87:A3:F4:B8:4B:31:61:E2:E9:BD:63:12:A8:AB:01:FD:3B
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial: 0199228C773A25D97E45D6318046BFBB71F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:00:54 +0000
Manifest this update: Sun 07 Sep 2025 05:00:54 +0000
Manifest next update: Mon 08 Sep 2025 05:00:54 +0000
Files and hashes: 1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=)
2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: VuDt5KLM3xR4Gs6Cl5VBAJY9g+b03eZNNvzXG/OksSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:77:3a:25:d9:7e:45:d6:31:80:46:bf:bb:71:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Validity
Not Before: Sep 7 05:00:54 2025 GMT
Not After : Sep 8 05:00:54 2025 GMT
Subject: CN=0d30aa87a3f4b84b3161e2e9bd6312a8ab01fd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:75:ce:e4:de:0f:ff:f7:7f:f6:5f:31:c2:
40:07:0f:c9:18:41:9d:dc:b0:6a:12:97:9a:8d:aa:
7e:ee:6d:63:8f:7a:ed:e6:63:05:7a:07:84:14:eb:
af:0b:0e:30:45:4c:4f:fd:45:80:94:7f:ca:c4:78:
53:58:16:52:ae:ed:92:4c:2b:9f:bd:c0:11:4e:ec:
17:d5:ac:0c:0d:78:c5:32:2f:03:cf:76:b9:ea:c0:
5a:4f:92:fa:1a:5f:1a:44:1b:33:9a:19:e1:fb:d2:
5f:b3:6e:5d:64:62:44:b9:2f:e0:f5:c7:2a:07:9b:
ef:18:17:8c:14:17:35:27:57:28:d5:26:fe:9d:fb:
91:a7:f8:4c:95:a6:38:7a:4f:9b:55:5c:88:ea:e8:
26:15:fd:b4:f6:08:00:38:e6:b1:06:cf:06:7d:5f:
06:df:70:4a:41:95:35:07:a5:79:c9:fa:e5:1a:48:
3f:05:9a:b3:37:d9:7f:19:7b:52:bb:6d:40:5c:13:
3d:3e:99:5e:6a:ed:c6:92:f1:5a:e9:64:f2:3d:4c:
4a:1c:4c:a5:4b:06:18:ab:ee:ba:80:df:08:05:7e:
80:99:b9:b7:ed:a3:3d:62:f0:d3:97:dd:22:83:d8:
bf:41:0e:62:f2:c6:3f:c9:cf:9b:ce:db:86:fc:8e:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:30:AA:87:A3:F4:B8:4B:31:61:E2:E9:BD:63:12:A8:AB:01:FD:3B
X509v3 Authority Key Identifier:
keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:39:a9:34:4f:b3:0f:27:0e:61:e0:d2:93:9b:0a:0c:43:41:
6c:c5:6f:17:16:eb:29:a6:f1:48:ec:66:dc:7d:2d:3e:4a:c9:
38:25:d5:7f:fb:41:f0:89:cd:73:ae:1e:7b:a1:39:98:4c:08:
59:a1:f4:9d:91:7e:9d:c8:c7:01:4a:00:52:fd:ab:ac:9d:3e:
c0:79:14:cb:f0:ce:17:5c:a1:4f:da:0b:ef:5a:76:56:1c:d9:
47:98:0a:52:b6:dd:e5:04:66:df:8b:98:71:88:a2:9e:1a:87:
96:ef:ff:4e:d0:b6:1e:92:6f:ef:f5:43:fd:33:6f:12:99:91:
19:f5:8c:1e:91:aa:0d:cf:59:cb:60:85:de:75:14:f0:14:eb:
43:0e:dd:28:2c:2e:4a:5d:cf:c7:32:9e:52:5c:38:06:80:61:
e2:4e:fd:46:1b:a8:3d:14:33:e2:4e:0e:15:66:be:ed:7e:ba:
37:51:e2:46:50:0e:bf:ae:bc:d5:69:96:c4:84:88:32:7d:ed:
fa:9d:50:5b:c1:ef:3b:c3:e6:75:be:0d:f2:e2:ba:81:67:88:
c0:16:0f:bd:c3:5a:9e:46:ae:a1:03:d5:69:b6:67:2f:27:1f:
f8:1f:88:00:4b:fe:fe:3b:16:56:20:ea:65:88:9f:4d:40:b4:
d3:28:54:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:22 2025 by rpki-client