Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json)
Hash identifier: dvM2FfcfTQBFtlYq8n6fJ0JrU7o+Na3HAiB5+Z064pE=
Subject key identifier: A4:EE:51:3B:99:F5:43:F6:46:7D:22:4B:46:45:64:3C:87:FE:E4:5F
Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab
Certificate serial: 019A51504D8C9CCF9EDA06D88B50060979AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
Manifest number: 89
Signing time: Wed 05 Nov 2025 00:00:08 +0000
Manifest this update: Wed 05 Nov 2025 00:00:08 +0000
Manifest next update: Thu 06 Nov 2025 00:00:08 +0000
Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: NyULCF4J4Uf413vQWqOsrKG1uKLUi8KcILs0SL6Nzdg=)
2: qZAKutQPBhqbC3w0uTfHNEl4Oes.roa (hash: WSklXQH6CKCwMHKCLxLhSKAUiLi3+4CRfzgpAwPPYgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:4d:8c:9c:cf:9e:da:06:d8:8b:50:06:09:79:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab
Validity
Not Before: Nov 5 00:00:08 2025 GMT
Not After : Nov 6 00:00:08 2025 GMT
Subject: CN=a4ee513b99f543f6467d224b4645643c87fee45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:39:21:2c:06:35:8f:db:6f:55:0c:f3:ab:
5a:23:4e:ae:f9:ea:a9:5a:c6:8d:93:7f:da:0e:d1:
91:80:01:db:fe:fc:73:1b:52:46:3a:a7:4c:ec:09:
fa:2a:f0:ef:30:80:78:b1:e7:96:69:e2:ab:40:94:
0c:0a:86:aa:d1:5c:61:53:71:c1:d0:56:6c:c0:e5:
f2:1e:5a:ec:ee:02:ab:51:bf:e9:1c:8e:87:dd:c5:
58:32:9b:5d:42:e1:6c:17:7a:dc:60:4f:29:ff:3d:
a4:b0:e4:74:1a:53:dd:aa:28:cc:ad:57:09:fd:ea:
5e:0c:88:56:6a:51:e1:ba:d4:1e:84:7b:e6:eb:03:
1a:76:1f:91:22:d2:de:43:fa:69:4b:27:9c:3f:7b:
49:b3:63:10:9c:54:cc:cf:ce:cd:35:79:ee:1f:41:
80:ff:af:c4:30:13:72:8f:4d:67:93:af:8b:9c:bd:
47:2c:f3:29:51:03:14:94:7b:91:f0:6c:e6:a8:59:
5d:f3:76:be:0d:a7:79:cd:5b:3f:35:fd:eb:de:94:
bb:11:5d:69:b5:79:16:f8:d6:ad:e1:33:a3:c1:53:
87:02:03:ff:69:37:cd:48:f0:f7:cd:be:70:e2:19:
5f:d5:16:19:49:d3:92:e8:83:07:22:2a:d0:0d:bd:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EE:51:3B:99:F5:43:F6:46:7D:22:4B:46:45:64:3C:87:FE:E4:5F
X509v3 Authority Key Identifier:
keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:69:c0:70:98:97:00:fd:d0:9d:25:86:9f:cd:e0:91:ef:27:
0c:c0:60:cb:2a:81:9c:d4:8f:62:69:79:f5:42:29:24:4d:b0:
f6:a4:bb:48:7e:e3:11:01:01:01:ac:6e:e1:ca:5a:de:71:84:
b2:c3:25:82:26:03:a3:3d:6f:fb:90:57:53:e1:3b:59:93:42:
0c:d6:43:d0:f4:de:87:de:6d:af:83:7d:05:6d:3c:e6:d2:b1:
10:a7:c3:c4:8f:bf:c8:b7:cb:c0:aa:13:c8:9f:4e:d3:ec:55:
0c:83:5c:3c:16:30:d0:70:78:86:01:d7:9d:38:01:4f:06:e5:
1c:14:12:8e:8a:c1:fb:02:46:83:9e:1d:99:3e:e7:96:27:c7:
87:f6:53:93:9f:b3:d5:37:75:d8:82:11:a5:63:df:56:47:8a:
87:56:a5:70:68:c2:4d:a5:70:f3:6e:ef:a1:27:31:0b:ce:c6:
38:bd:6c:f0:70:b7:45:69:55:22:ac:b8:53:8f:92:07:bf:05:
19:2e:1a:56:c3:4d:4a:c7:47:95:00:47:23:b2:31:89:7f:75:
95:7d:38:97:5f:bc:62:e9:8c:d9:c2:1f:a1:af:7a:65:4b:9e:
cd:cc:ea:b3:57:d4:90:cf:00:d0:f0:df:f7:fa:c7:b3:9f:70:
53:89:75:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:57:43 2025 by rpki-client