Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: hVGp8Wx03CC/xdeXKnopgflXUbGYKT411NQK3+Vq2uM=
Subject key identifier: 74:53:D7:CA:CA:42:29:E1:9D:DB:62:D7:F2:4A:BD:2C:6C:66:CC:01
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 019935DBED8A98805CDEF955D204AEAEE8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 1675
Signing time: Wed 10 Sep 2025 23:00:29 +0000
Manifest this update: Wed 10 Sep 2025 23:00:29 +0000
Manifest next update: Thu 11 Sep 2025 23:00:29 +0000
Files and hashes: 1: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: 4JGyUl5TG210TC2FQzBgybFXnDujBfPhZ8hMSeCO+DA=)
2: k9ESiOC05FAL5OZXSx8n68sQwKU.roa (hash: x3z9I2/sycjs0uOQJeLYl+8lQLkZ9uNIg5/ImA60dEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:db:ed:8a:98:80:5c:de:f9:55:d2:04:ae:ae:e8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Sep 10 23:00:29 2025 GMT
Not After : Sep 11 23:00:29 2025 GMT
Subject: CN=7453d7caca4229e19ddb62d7f24abd2c6c66cc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:4f:39:23:e1:c9:ee:b8:08:26:d1:c1:8c:
e5:39:e9:94:00:97:a1:55:b9:f9:fd:0f:2a:ce:56:
e5:53:3e:da:89:2c:62:ea:ac:33:ee:56:1c:c4:45:
9f:41:3c:d2:f2:51:47:23:8e:85:9d:3a:b3:64:49:
75:e8:0e:93:ed:c4:2a:e0:68:fc:67:1e:ee:23:59:
8e:cf:5e:9a:78:23:0d:1f:a8:00:2c:be:cd:f5:6a:
27:ca:d4:9e:6b:13:c2:3f:22:bc:7e:a9:4c:68:dc:
96:d3:bf:ff:67:90:ac:4e:9a:de:23:8b:7e:88:44:
d0:60:ea:44:25:93:47:0c:33:9e:c1:44:d1:fa:18:
aa:9b:55:40:ac:20:3c:bf:18:1b:b7:59:02:e0:97:
df:a0:71:a6:17:94:36:1b:c3:60:7d:65:03:98:7c:
ba:93:1a:fb:4b:fc:92:2e:48:e1:58:ea:1e:b1:16:
cb:ab:15:67:6b:fa:be:d1:32:f7:db:a8:a0:7b:00:
02:dc:ff:d8:43:f4:c0:3c:42:71:5b:96:bc:3d:b4:
93:a9:46:7c:e5:98:b5:18:38:43:d5:ea:45:88:55:
95:2a:30:c3:33:46:25:d3:03:16:fa:2b:28:07:0a:
4f:c4:ce:99:d9:29:5d:c6:30:9b:1f:e4:3c:b5:ca:
e3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:53:D7:CA:CA:42:29:E1:9D:DB:62:D7:F2:4A:BD:2C:6C:66:CC:01
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:67:8f:11:f1:a9:4c:c2:6a:01:23:dc:52:c1:e8:c0:9f:ef:
41:91:b8:17:6a:fc:72:70:2d:01:22:71:39:27:fe:20:34:f1:
d0:f8:19:7e:e5:58:ec:98:67:32:48:af:02:b2:ba:fb:6d:7d:
9a:f3:de:83:0f:f7:b0:03:84:77:e8:7d:32:29:36:70:30:f6:
b9:55:95:f6:33:8b:5d:5f:89:22:67:51:7e:0b:34:ff:ee:73:
ec:8c:99:45:6f:44:ad:d9:a4:90:a9:1d:1b:54:e9:02:54:a2:
ac:9e:1a:35:93:c1:3c:66:9f:76:47:f3:dc:6b:58:0e:13:f0:
0a:db:7f:8c:ff:67:da:ff:88:6f:62:58:18:72:e0:75:d8:f5:
77:06:99:1d:5a:ce:81:2f:f8:ef:a6:1c:47:10:cf:a8:c9:ab:
bd:c7:d0:32:ff:6a:ff:44:0b:6a:d5:78:e4:04:f0:ab:4f:f4:
11:96:ca:57:a6:83:77:e8:8c:3d:a2:26:d8:ac:9f:05:5a:60:
cb:30:73:a9:f7:83:ad:42:07:c8:6c:13:ee:05:29:b4:70:86:
0d:3e:d9:21:19:68:8a:1b:fb:c5:fa:42:8d:0b:43:0f:13:4f:
73:e9:74:7f:4f:b2:4e:20:75:70:e2:c4:cc:de:73:d2:8b:79:
23:6c:5e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:27:21 2025 by rpki-client