Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
File: lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft (raw, json)
Hash identifier: IPmcWFzFrrvrHMddGx7KzqoCBiYTEk62NnSypx0fOJM=
Subject key identifier: 16:C8:1C:8A:6C:07:67:8F:B9:50:5C:CA:57:F0:FF:E7:6F:8D:14:CE
Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Certificate serial: 019896DC2E2CE1D272BA66A1CB864C352682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 02:01:08 +0000
Manifest this update: Mon 11 Aug 2025 02:01:08 +0000
Manifest next update: Tue 12 Aug 2025 02:01:08 +0000
Files and hashes: 1: 6ApC-jHQIcJABZYGTnaj4cDWTZ0.roa (hash: mW6j44egYeyH1Rdwi9kE+w3aUg6boclFfelfnL+ZOCc=)
2: gnEe3OeabPYnBDM3IzIwqcZpMW8.roa (hash: VzRNxcBeLn35opHADGeiMTKNeQ/005lIREbbg/TGf9U=)
3: lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl (hash: wAV/w95dyh/KpRAkOfW/0RtkK0m2ai8zsAn2+uXDq4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:2e:2c:e1:d2:72:ba:66:a1:cb:86:4c:35:26:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Validity
Not Before: Aug 11 02:01:08 2025 GMT
Not After : Aug 12 02:01:08 2025 GMT
Subject: CN=16c81c8a6c07678fb9505cca57f0ffe76f8d14ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:8e:c9:61:32:f5:22:3c:64:0c:05:6a:1e:
09:dc:b6:1b:09:eb:b2:fd:d4:04:2b:17:64:f3:cc:
3b:f5:83:68:0b:c7:4c:3d:0d:66:97:7d:fe:8a:51:
b5:ac:f4:69:db:94:ee:08:9c:71:df:f6:40:c7:d8:
3d:9c:2b:ea:2a:27:e8:dc:2d:bb:75:0a:16:9d:cb:
0a:77:31:40:c8:26:8e:03:67:82:75:39:37:27:0e:
e1:07:84:49:61:dd:3c:f4:a1:a4:e5:40:2e:cf:47:
b1:86:bc:3f:a0:ad:26:34:5d:88:34:f0:58:3a:7b:
7a:bf:d8:1c:26:44:ba:25:2e:df:c3:ce:1c:48:ec:
29:7a:b9:06:75:14:01:5c:d5:75:d3:4b:32:f2:b9:
42:35:06:d7:3a:8e:a0:54:c0:e3:b1:92:96:25:71:
3b:77:a7:1e:4e:5d:94:7f:82:ff:4c:66:1d:75:1e:
93:dd:9b:4b:98:77:58:81:ec:e1:6b:8d:a2:c0:bd:
e6:de:ba:d8:bc:70:5f:8e:fc:67:fd:56:0d:0c:e6:
90:17:bd:7c:56:0e:52:a4:43:b6:bd:69:c0:13:be:
7a:20:75:f1:68:50:6c:7e:bd:6c:3e:94:70:c9:47:
26:ea:a1:35:78:0d:70:00:fc:b1:82:69:d6:8d:d3:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C8:1C:8A:6C:07:67:8F:B9:50:5C:CA:57:F0:FF:E7:6F:8D:14:CE
X509v3 Authority Key Identifier:
keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c5:9c:6d:a8:0d:d5:b5:54:83:64:7e:23:d5:d0:1f:ab:5c:
c3:78:cb:11:19:34:e8:06:29:b5:92:d4:83:59:8e:95:4e:66:
aa:bd:07:46:9b:35:80:fc:a7:4c:f0:e4:d9:34:b2:36:ae:c5:
10:0e:51:27:81:39:a0:b0:f0:6f:a8:26:d5:7b:2b:20:09:97:
ea:c1:54:36:40:53:f6:51:43:21:aa:70:85:57:3e:c6:10:53:
9b:bc:a6:a5:ae:5d:0f:7d:09:0f:e6:76:07:5c:06:30:c5:8b:
96:11:13:66:5a:8b:4f:69:dd:72:89:8f:7b:89:34:ad:e3:cc:
ed:ad:aa:f2:97:74:6b:2f:0a:7f:a7:61:47:6f:e5:10:01:84:
88:7a:91:0b:13:6a:ef:dc:ce:35:08:2b:a8:ee:38:f9:b0:c2:
e3:a9:e1:58:aa:4b:bb:f9:37:7a:11:e4:89:07:39:a4:13:58:
85:aa:4c:9b:df:49:05:c6:43:53:88:41:0c:03:43:12:5c:12:
9a:59:24:77:92:1c:94:c8:17:b1:ee:10:63:df:17:8c:78:11:
e5:04:c5:17:00:52:17:87:4f:e9:f6:52:82:96:ba:ec:03:01:
bc:ef:ee:cb:2b:33:cf:f3:cc:2e:3a:a9:52:ab:18:76:b4:d6:
12:ac:9a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:31:08 2025 by rpki-client