Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
File: LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json)
Hash identifier: sVBmBIDVlCnEFR+6aqZCxjGMgtsX0EAHhX48BP+we7I=
Subject key identifier: 6C:17:F6:64:74:E7:24:3F:9D:C9:C4:EC:1B:9E:37:10:8B:76:FE:EA
Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
Certificate issuer: /CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Certificate serial: 019A71B915ED828D586AB00801F78A469817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
Manifest number: 16AE
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: lSnn49wtEdiRWmvcHDCIgKOUh/BsGjLCkKWuRUW3a2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:15:ed:82:8d:58:6a:b0:08:01:f7:8a:46:98:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=6c17f66474e7243f9dc9c4ec1b9e37108b76feea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:67:6f:1c:3e:cd:c9:95:9b:0b:23:8d:05:
94:61:75:26:53:3d:80:f5:9c:d7:17:e5:a5:68:7a:
07:5c:85:42:7d:2a:11:dc:5a:6d:dd:5e:ca:98:08:
df:e7:24:50:25:7c:13:02:43:49:93:0a:df:b5:dd:
ca:c7:fa:37:9f:24:f6:87:02:24:dc:95:a3:d8:30:
12:91:87:a0:c6:99:41:de:90:a6:91:27:28:8e:d9:
58:e5:1a:04:2a:8a:c6:2f:d5:4a:27:17:eb:6a:09:
2f:a5:13:b1:93:4a:00:4c:7c:5f:b4:86:9a:3b:75:
8c:43:f2:19:59:18:54:4e:bc:6f:ce:d0:44:56:e3:
e4:24:7f:e8:7a:ec:89:e1:7d:16:91:cd:54:08:61:
e9:d3:52:c7:84:5c:4f:72:e7:0f:87:17:27:e4:f4:
79:a0:b1:18:66:57:77:8c:75:fe:5b:42:bf:12:2f:
2a:81:d1:ed:8c:01:05:91:d6:e6:04:bd:2b:ac:87:
da:e6:c4:d6:6b:6a:9c:9c:32:b9:5c:7d:3c:fd:be:
f5:be:4d:5b:53:4a:37:4d:b0:a3:6f:09:4c:02:af:
79:29:1c:69:ca:2e:87:c0:79:87:51:2a:4b:af:e9:
4d:20:c9:65:3e:90:56:a3:18:fc:be:98:37:dc:b5:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:17:F6:64:74:E7:24:3F:9D:C9:C4:EC:1B:9E:37:10:8B:76:FE:EA
X509v3 Authority Key Identifier:
keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:72:6b:66:b6:ed:9c:be:1b:42:21:58:88:a4:78:df:75:5a:
96:d2:5b:b0:57:c3:f0:bc:33:fc:2f:03:f8:98:17:d0:aa:ce:
18:a9:63:54:8c:9d:45:7c:5e:91:31:59:ff:57:3e:bc:bc:61:
01:26:6b:77:12:67:cc:56:78:b5:e9:87:3a:53:ea:9c:e9:d5:
da:23:01:01:34:41:48:15:ac:9e:1b:41:55:a1:6e:cf:4d:a5:
ad:36:66:61:5b:aa:d1:11:04:33:f4:d9:bd:fd:0d:24:a2:3b:
d4:ad:b3:8c:6d:60:da:1c:00:14:db:69:2f:26:61:d0:18:76:
05:9d:e4:f7:51:90:f0:a4:07:e0:37:7d:c9:10:99:ab:80:09:
de:6f:9e:00:c4:10:3f:0c:6f:0d:fa:d3:f5:62:9c:a2:b3:b7:
3e:a0:09:5c:4b:70:aa:c4:8e:17:68:94:4b:ff:95:ed:d7:66:
1c:a5:ba:98:dd:a3:b7:94:7d:e4:6a:46:1f:b3:e0:0b:a5:9d:
be:aa:4b:7c:69:64:28:4d:b0:62:5e:d6:c7:25:4b:e9:ab:ec:
eb:6f:2b:2f:74:e7:cf:5f:0d:5a:9f:6e:c9:7d:d2:f2:0d:e3:
70:43:28:71:39:d3:f8:d7:9a:08:cb:f5:5b:bb:a9:e2:99:55:
ec:e1:94:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:08 2025 by rpki-client