Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: SkTEusGGGeEU6bjYaPtKzSbisj24hC0slIU76IKpfdE=
Subject key identifier: 01:CF:89:6B:6D:2F:3C:A0:BB:EF:0C:0A:DF:84:B8:5C:03:72:EE:5C
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 019A23650EADF4DB2589809771135849D87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 16F0
Signing time: Mon 27 Oct 2025 02:00:16 +0000
Manifest this update: Mon 27 Oct 2025 02:00:16 +0000
Manifest next update: Tue 28 Oct 2025 02:00:16 +0000
Files and hashes: 1: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: 72PWjDtLz26zevhAPM3ZBNT2PznkCfrPW9JZtG+zguU=)
2: k9ESiOC05FAL5OZXSx8n68sQwKU.roa (hash: x3z9I2/sycjs0uOQJeLYl+8lQLkZ9uNIg5/ImA60dEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:0e:ad:f4:db:25:89:80:97:71:13:58:49:d8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Oct 27 02:00:16 2025 GMT
Not After : Oct 28 02:00:16 2025 GMT
Subject: CN=01cf896b6d2f3ca0bbef0c0adf84b85c0372ee5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:df:3b:8c:c1:37:d7:76:7d:35:f2:17:cd:
33:57:2c:79:96:61:c1:84:78:54:ff:bd:a7:0a:56:
bc:87:81:4a:be:89:f1:25:e0:64:af:64:41:90:a8:
d8:90:1e:fb:cb:18:cb:d2:bb:64:d2:16:80:26:b6:
ae:ce:80:ed:a4:0e:bf:45:db:e4:32:74:8f:3f:a6:
fd:75:44:34:72:8d:74:48:a2:8e:4c:1d:e6:cb:c6:
e8:4a:ad:a9:b3:c2:91:10:5b:d4:e3:bf:ca:ca:bd:
39:0d:c8:dd:2d:5d:3d:7a:34:ac:d9:80:52:c5:85:
aa:fc:dc:2f:74:87:9b:17:f8:6f:89:08:c8:8e:5a:
12:4b:21:91:5c:32:d6:8d:38:be:2b:bb:fe:b1:18:
fe:c3:21:0c:67:af:be:f2:ae:a3:b7:d4:ce:53:66:
5a:0e:1b:7d:27:1e:f3:4e:86:78:52:8a:ec:9d:5d:
ac:17:32:29:70:0b:48:24:f4:cc:1c:34:c7:03:7d:
b6:17:1a:13:1d:48:bd:62:b6:8d:d7:9f:d7:bf:dd:
ea:ec:4b:44:fb:f8:8d:6f:dd:85:bb:5a:64:da:01:
c0:d3:61:f2:07:ab:ea:b1:68:06:27:4a:61:e3:bf:
17:83:b7:ee:07:9d:61:89:e0:dd:e9:55:93:0d:d5:
72:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CF:89:6B:6D:2F:3C:A0:BB:EF:0C:0A:DF:84:B8:5C:03:72:EE:5C
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e2:1e:27:d7:dd:76:70:4b:29:b4:51:a2:eb:62:41:b6:02:
e1:b3:ff:4f:3b:ae:e1:61:23:13:16:6f:ca:16:6a:25:cd:5a:
66:13:e4:c1:58:23:d1:89:fc:da:3b:7f:46:58:c7:c9:05:99:
bb:45:fd:ab:ed:ba:dd:cc:6a:a0:dd:81:3b:19:14:b6:74:e9:
54:e9:1d:5b:ce:1d:87:88:b5:9a:47:c5:86:18:c8:24:42:fa:
1e:76:fd:3b:32:ad:42:c4:9d:98:d7:23:fd:74:88:e0:4d:9d:
60:b9:fc:6d:02:71:7a:2e:c1:aa:28:b5:7c:d3:8c:8c:11:df:
b6:45:5d:52:1c:cc:37:b2:f7:70:46:aa:aa:cb:c3:d8:ab:01:
11:5d:16:d2:87:4e:32:2d:dd:8c:23:8f:2f:3e:fb:df:28:ae:
b3:dd:e9:0f:76:14:a1:a2:77:2c:c1:27:27:8d:90:59:9c:b7:
1b:06:8a:7f:22:22:d9:78:31:62:6c:46:2e:05:ba:ac:df:9c:
32:6c:a2:07:d8:9e:11:14:12:70:f4:9a:fa:c5:b7:69:62:0f:
59:76:64:dd:13:92:6e:65:17:30:67:1e:1b:f7:11:18:2e:59:
cb:82:6a:3e:9d:bc:2d:e3:b8:13:c7:72:a4:9f:b2:21:2c:0d:
c7:4d:db:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:10:54 2025 by rpki-client