
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
File: lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft (raw, json)
Hash identifier: UpkC8kIYnI2fkUD1+EzH51bd/6Uwf8Z+NqHVk4EupbU=
Subject key identifier: 7A:7E:2E:FA:65:8D:E2:D7:12:EE:0A:5E:AC:84:53:F9:48:EA:1A:47
Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Certificate serial: 01969ED1069969B8F8DA3735A602E75B859A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 05:00:20 +0000
Manifest this update: Mon 05 May 2025 05:00:20 +0000
Manifest next update: Tue 06 May 2025 05:00:20 +0000
Files and hashes: 1: 6ApC-jHQIcJABZYGTnaj4cDWTZ0.roa (hash: mW6j44egYeyH1Rdwi9kE+w3aUg6boclFfelfnL+ZOCc=)
2: gnEe3OeabPYnBDM3IzIwqcZpMW8.roa (hash: VzRNxcBeLn35opHADGeiMTKNeQ/005lIREbbg/TGf9U=)
3: lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl (hash: dUobEXOPse2fimeklZf/o9tp+Kx5nZu9xnO1EmjIEAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:06:99:69:b8:f8:da:37:35:a6:02:e7:5b:85:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Validity
Not Before: May 5 05:00:20 2025 GMT
Not After : May 6 05:00:20 2025 GMT
Subject: CN=7a7e2efa658de2d712ee0a5eac8453f948ea1a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:db:66:57:37:13:e9:c8:3c:74:c3:8d:f2:
99:6f:14:11:bb:23:0b:1a:45:4a:59:8a:25:17:65:
b7:f5:db:ce:68:51:4c:46:64:96:8d:ff:ae:50:c1:
44:27:38:1b:3b:29:2d:68:87:f7:82:cd:a1:a4:3f:
2e:71:c6:bb:e4:75:31:e1:ee:7e:11:10:08:33:a5:
5a:da:48:a0:c3:1f:fd:d6:42:6c:81:3c:e0:f1:77:
79:71:41:21:70:bc:23:56:9c:af:b2:f7:51:69:90:
3f:14:02:28:2d:ef:3a:f2:49:e4:ce:16:49:5d:4a:
d2:4b:ec:9c:5d:f2:c3:f3:91:88:d5:e9:43:27:44:
8b:d3:42:6d:16:61:4f:05:9b:d8:d5:38:f9:d7:a5:
ed:bd:03:31:c8:60:87:ac:93:46:23:0f:33:39:cb:
49:e3:5e:bc:7d:5e:5c:ef:cd:95:5e:cb:b6:68:f2:
0a:8e:78:2e:02:15:44:e5:4d:78:98:ab:b3:25:bc:
95:44:3a:07:71:e5:99:85:40:24:3c:9b:f6:a7:6f:
46:98:a6:6a:8a:7b:44:06:28:99:8b:22:40:9b:2f:
3a:bc:72:98:e8:87:78:78:4f:4f:1f:08:67:84:4c:
86:2b:f1:d8:8d:a8:a8:d1:6a:e0:8d:a3:61:9e:01:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7E:2E:FA:65:8D:E2:D7:12:EE:0A:5E:AC:84:53:F9:48:EA:1A:47
X509v3 Authority Key Identifier:
keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8e:3b:1b:2e:1c:a3:07:c4:8f:eb:11:7a:36:31:a0:8b:9f:
da:39:1f:18:8f:17:2a:43:41:8e:88:0c:f6:b3:ae:55:06:8e:
a1:d1:d2:c2:50:38:cf:d0:79:e1:2f:17:89:f4:80:a5:b5:4e:
5a:67:e5:15:8d:fa:f4:dc:77:2c:36:9b:25:34:15:4c:a2:df:
0c:f9:74:d5:a2:23:8e:3e:59:42:39:38:3c:71:f7:29:0d:79:
b3:59:f8:39:f0:26:5b:87:d1:b6:a9:57:35:84:3c:04:33:0e:
98:db:4e:73:9d:2f:66:45:9b:75:9f:c0:33:35:cb:ac:10:1a:
4d:26:6f:38:99:47:9d:5e:5a:4e:b6:29:c8:59:77:cb:1e:87:
ba:1f:81:0c:fb:bf:87:78:de:ba:5e:97:9a:83:1d:28:d1:75:
06:37:f9:a0:00:da:4e:11:de:b5:ca:82:9b:ad:ad:ba:4f:4a:
e0:1d:90:71:a9:e0:3a:44:ff:38:25:0a:32:02:a7:0a:b3:77:
7c:8e:ad:a4:72:09:ee:01:59:49:40:68:5c:04:c4:f3:67:e8:
67:95:00:93:30:a9:8b:2d:f3:ae:fa:c5:9f:f3:37:b2:7f:3d:
dc:d0:23:1e:e4:8e:b5:1f:5f:0e:f6:ae:a6:b9:f5:ba:b6:f2:
94:4f:6f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:18:38 2025 by rpki-client