Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
File: LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft (raw, json)
Hash identifier: z14WN6sYLHMqz2kttRxzsMaS6h0cUN0nodJV2byFLo4=
Subject key identifier: F7:D7:C9:B5:EF:F0:02:FF:6C:69:7C:49:B9:6D:DB:7C:87:E6:AB:1D
Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
Certificate issuer: /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Certificate serial: 019A4EF4F723BABA5DADA81853D1CD06D08D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:08 +0000
Manifest this update: Tue 04 Nov 2025 13:01:08 +0000
Manifest next update: Wed 05 Nov 2025 13:01:08 +0000
Files and hashes: 1: Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa (hash: hCl5v0Z86Jy7+0GlCW+6oKfv2bUVufzYinCdryb0Gzo=)
2: LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl (hash: GYYrZL401jCUaYZiwhNDq5HaGlaeZOeVmLcrCcLBIig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f7:23:ba:ba:5d:ad:a8:18:53:d1:cd:06:d0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Validity
Not Before: Nov 4 13:01:08 2025 GMT
Not After : Nov 5 13:01:08 2025 GMT
Subject: CN=f7d7c9b5eff002ff6c697c49b96ddb7c87e6ab1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:5a:f8:b8:53:fd:06:59:e7:c4:2c:bb:e6:
8c:54:15:f2:93:b9:09:a4:91:88:c3:14:95:14:c0:
87:30:cb:d7:23:01:7e:0d:ea:0f:2d:b3:f7:23:5b:
81:4c:bb:da:f9:93:68:0e:c5:8e:55:4f:aa:a2:9f:
db:87:14:ca:5b:0a:fe:c8:e7:43:b5:b4:6e:78:fa:
31:f3:b8:f2:8a:6d:bd:40:2c:b3:17:e0:d4:57:6a:
7e:12:76:ab:eb:9d:d7:2f:75:d0:10:56:a1:e2:93:
04:30:67:83:21:a0:49:14:c2:7a:dd:dd:50:0b:79:
14:91:af:51:0d:b1:a8:77:35:14:19:7f:3b:c0:39:
17:f2:24:85:18:79:17:c1:e1:c3:fb:60:cd:54:58:
75:54:6e:33:e5:08:55:a4:af:c1:a3:e4:f6:14:40:
26:13:ae:bf:1b:60:0a:f0:78:48:f9:71:63:db:c1:
40:f0:82:ca:55:eb:60:f0:16:90:97:ad:5b:6f:8b:
87:2c:a1:eb:8e:9d:1d:91:c0:f5:42:72:01:de:26:
bd:be:19:f4:5b:91:10:ba:60:0a:69:6a:78:0b:6c:
f0:95:cb:cd:77:6f:dd:72:dd:1f:dc:39:b3:83:9e:
42:2a:a5:6c:a4:07:d7:83:43:44:c3:f7:be:c5:16:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D7:C9:B5:EF:F0:02:FF:6C:69:7C:49:B9:6D:DB:7C:87:E6:AB:1D
X509v3 Authority Key Identifier:
keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:02:7f:c6:c3:e4:b1:bf:68:2f:24:2e:f5:0d:00:3a:61:fe:
b8:40:4c:74:7f:52:23:e2:d2:2e:35:04:40:d0:c8:16:1f:87:
77:81:5b:6f:ed:29:23:1d:d1:28:5b:f8:02:bb:b9:e3:3d:fc:
7f:5b:a2:56:7a:6f:ea:49:fe:81:95:3f:cf:a8:65:6a:c7:46:
52:0a:b8:bb:57:b9:33:f5:ff:86:8e:51:ee:3b:7b:16:a5:ba:
84:57:56:9f:a9:66:91:01:96:98:37:b8:d9:84:57:6a:9d:8c:
1b:11:f2:a3:df:5b:2a:c5:e6:e8:de:28:f3:57:5f:58:6d:5d:
9e:25:e2:8a:91:42:43:d3:12:a6:36:88:20:ce:35:06:52:e5:
4f:8a:59:6f:1e:dd:a3:f2:4b:dc:a4:7c:4a:f4:b8:ed:cd:5b:
33:e1:c4:bc:40:88:47:27:67:82:bb:2a:d7:4d:f8:08:98:9f:
1e:f8:05:76:77:df:02:4d:67:a1:69:1d:43:9d:e8:c8:07:08:
4b:5c:0c:d7:ac:02:e1:25:69:c8:40:a3:94:64:b9:7c:7a:84:
57:0e:be:1f:42:52:a3:10:eb:5d:a9:02:29:f8:24:20:7b:25:
d5:3e:8a:b0:df:36:21:87:ca:33:c0:85:ce:88:15:6b:08:27:
d7:b3:ca:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:44 2025 by rpki-client