Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
File: LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft (raw, json)
Hash identifier: zVI+tiBcgOrUtoPWIpySs3dvtefRA9bGL6I0uXaY1xE=
Subject key identifier: 81:13:74:26:BE:59:F6:2A:E7:8B:DD:7A:C1:44:80:81:B6:6D:FF:8C
Authority key identifier: 2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
Certificate issuer: /CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Certificate serial: 019A7112F32A0F9BC28A27A0211330430FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
Manifest number: 16E2
Signing time: Tue 11 Nov 2025 04:00:58 +0000
Manifest this update: Tue 11 Nov 2025 04:00:58 +0000
Manifest next update: Wed 12 Nov 2025 04:00:58 +0000
Files and hashes: 1: LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl (hash: MOV5tWVW3WlfG2vWiKsx8cF4gjrEoIGNM7DRsX7DNDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f3:2a:0f:9b:c2:8a:27:a0:21:13:30:43:0f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Validity
Not Before: Nov 11 04:00:58 2025 GMT
Not After : Nov 12 04:00:58 2025 GMT
Subject: CN=81137426be59f62ae78bdd7ac1448081b66dff8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:6a:c0:ba:e2:e6:f0:36:c6:e8:0d:76:ce:
cd:e2:6b:92:7c:ff:6b:21:fe:e0:d5:74:28:ec:9b:
a8:4b:2b:c4:ac:c9:b1:20:10:35:07:06:c6:d6:15:
97:72:c0:bd:75:b6:e7:05:7c:20:32:68:2c:1c:30:
af:15:0b:26:e5:b9:a1:ff:3e:09:91:30:43:5b:bf:
bb:53:a5:c2:e3:ee:5f:78:de:6c:fe:d2:75:02:64:
3c:69:f6:e0:4d:bc:b5:a9:02:6f:f0:bd:8c:2a:ba:
70:ef:47:0e:71:59:34:dd:9e:c1:65:ee:7a:4a:88:
15:68:72:79:1f:66:f6:ec:79:d6:49:fb:49:eb:0b:
eb:09:a3:9e:f5:35:1c:87:69:21:99:29:4b:d7:96:
46:2b:f5:c8:49:f9:27:97:e9:9f:24:56:29:0e:20:
04:17:02:d1:7e:f3:df:df:97:46:a0:1a:e3:69:fb:
1d:10:1d:95:29:c3:12:bf:82:4c:be:48:a1:3f:4b:
17:c1:97:62:ef:eb:b0:74:e4:7c:2f:49:f7:3e:bd:
23:f9:ed:94:2c:68:c2:07:8d:15:a6:a2:f2:e6:69:
80:ca:66:8b:04:74:28:6f:67:48:08:93:95:26:9a:
2f:97:9a:6d:f0:6f:6a:5d:4e:d3:02:5a:6f:49:0d:
f9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:13:74:26:BE:59:F6:2A:E7:8B:DD:7A:C1:44:80:81:B6:6D:FF:8C
X509v3 Authority Key Identifier:
keyid:2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d5:f6:61:83:08:12:00:e4:b3:db:19:73:b4:50:ea:a5:ac:
43:d8:09:4c:b4:82:51:dc:7e:89:f8:39:24:f0:d7:69:33:e8:
cf:bd:85:f2:a9:c1:92:6e:46:63:49:ea:d0:22:58:21:7c:e9:
50:24:8d:b8:3b:d8:f8:1a:f4:be:2d:f2:8a:4c:6d:d8:fa:0d:
b1:25:74:26:8b:2f:d6:55:05:af:46:ab:7c:d1:c3:72:42:45:
3c:e1:db:e2:59:ad:11:b3:11:15:83:1a:f4:fa:54:fe:a4:ad:
5c:aa:91:9f:71:ef:7f:c3:04:b9:bf:c7:fe:24:6e:26:34:8d:
5c:0d:89:ec:00:b8:5d:32:c8:f5:35:c5:88:7e:29:0e:59:8c:
4c:96:8b:18:b0:3d:09:93:ae:d6:e0:21:b8:f6:1b:af:3e:27:
52:72:2c:cb:a5:a3:f5:c6:0d:ea:1e:9e:f0:fd:7b:08:b9:39:
93:05:49:55:01:8e:ab:46:5a:fa:76:0d:cd:8d:b4:9c:2e:0a:
2e:86:8a:bf:09:7a:fd:af:de:bf:91:5f:63:eb:28:a7:e5:3b:
65:9a:47:57:e0:94:04:bd:a0:3f:67:f7:a5:9d:74:c9:d6:a7:
c3:61:e7:71:57:15:8f:d1:9d:5c:3a:20:77:d1:4b:dd:f6:33:
ae:02:d8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:12 2025 by rpki-client