Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
File: lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft (raw, json)
Hash identifier: 2D6agupk9Nr3T+vd2kX5ZzBN+jrTg/uZFiTvqmM7Gic=
Subject key identifier: 9A:8A:6B:31:34:92:41:CB:EC:98:7C:1E:E2:D1:3B:81:06:E7:83:63
Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Certificate serial: 01978C5A597DAADE3061FAAAECE4853B0F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
Manifest number: 15A0
Signing time: Fri 20 Jun 2025 08:00:20 +0000
Manifest this update: Fri 20 Jun 2025 08:00:20 +0000
Manifest next update: Sat 21 Jun 2025 08:00:20 +0000
Files and hashes: 1: 6ApC-jHQIcJABZYGTnaj4cDWTZ0.roa (hash: mW6j44egYeyH1Rdwi9kE+w3aUg6boclFfelfnL+ZOCc=)
2: gnEe3OeabPYnBDM3IzIwqcZpMW8.roa (hash: VzRNxcBeLn35opHADGeiMTKNeQ/005lIREbbg/TGf9U=)
3: lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl (hash: 6CVWPVgDTFbl4Zo1iFBZ3STv7yfbpg5e3hwipUoxXFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:5a:59:7d:aa:de:30:61:fa:aa:ec:e4:85:3b:0f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Validity
Not Before: Jun 20 08:00:20 2025 GMT
Not After : Jun 21 08:00:20 2025 GMT
Subject: CN=9a8a6b31349241cbec987c1ee2d13b8106e78363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:48:21:da:05:f4:af:af:5c:3a:4b:fa:d9:
cf:72:a1:b9:75:d6:46:d3:c7:dd:40:97:5d:50:d6:
82:9b:b2:bf:5c:07:4b:27:6f:75:18:5e:30:15:fd:
fa:84:66:56:f4:32:e5:d6:06:73:c2:18:e7:01:a7:
5d:88:c7:c5:92:7f:be:00:cd:4a:27:f0:75:d0:b2:
01:b4:60:c5:66:99:22:45:d1:78:41:5b:28:48:c6:
11:51:a1:0e:cc:6f:65:0b:45:2e:cd:87:c6:ee:7c:
30:83:1a:bc:da:4b:81:03:fd:73:c4:7a:1a:19:a8:
e5:f2:48:f1:ce:f6:5c:58:5a:37:94:e6:f2:9b:f6:
30:49:a0:51:e0:18:5d:d0:eb:91:b1:b3:7e:46:ee:
55:3a:e7:f0:ee:c4:6b:20:85:37:3f:bf:85:f1:3f:
b0:73:3c:f6:38:d2:26:6e:19:06:39:fc:0b:c4:5d:
be:d4:11:5f:66:cc:ae:be:3e:40:72:58:5d:4e:5c:
34:cf:f1:58:93:2f:58:94:ca:01:16:e1:39:4f:49:
cd:38:79:6d:47:99:12:bb:85:ed:d1:e9:3b:0c:8e:
0e:6b:87:95:c3:68:81:c2:c6:92:8b:6a:a4:48:ff:
fe:37:00:0d:78:4f:26:a5:ae:54:f9:34:93:c2:b8:
66:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8A:6B:31:34:92:41:CB:EC:98:7C:1E:E2:D1:3B:81:06:E7:83:63
X509v3 Authority Key Identifier:
keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:9e:98:3b:ee:9d:1b:fc:a9:ab:03:f2:74:4b:73:76:cc:45:
0c:30:9d:08:b1:50:5e:c8:7b:56:53:82:53:75:39:4d:27:62:
0f:da:db:f1:5c:e1:45:17:1c:f3:49:93:95:08:22:f2:30:67:
b0:35:bb:3b:41:72:21:af:2f:09:3c:fe:08:67:2f:25:60:74:
59:37:10:8c:a0:c4:5d:3f:7e:e8:79:67:ec:f2:26:53:4e:51:
46:c1:94:f9:6c:92:18:f3:0d:f7:a1:4b:cf:f1:3c:e5:7b:73:
50:ee:75:2f:23:14:0e:44:5b:c6:fa:6f:89:e6:2c:f4:e2:bc:
30:91:6a:8f:87:68:43:7e:94:f2:0c:c3:c3:23:46:d1:78:bd:
36:a1:fc:bd:a8:64:19:d1:aa:70:f4:4e:21:ac:60:32:36:46:
51:cc:cb:7b:1e:5d:c3:3c:e2:89:9a:1c:e9:db:98:41:95:90:
e0:eb:a8:36:bc:e4:58:04:16:4b:f0:ae:b8:f3:d8:10:51:15:
e7:1c:23:e1:f2:0c:d3:a6:26:04:48:be:40:50:3d:d3:55:cf:
dc:07:21:82:95:f9:78:4c:d5:c3:ba:ba:f2:0e:dc:fa:1c:ab:
8c:c7:ac:d3:cf:66:d7:f3:9b:24:c7:64:1c:95:49:de:fd:95:
3a:28:41:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 18:02:48 2025 by rpki-client