Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier: +jOz2PWFXiu2JcU3F6p5d9VwuO/nSqwxUq0NIi6Mg14=
Subject key identifier: 40:DD:EE:29:4C:91:DE:59:42:90:7B:33:5B:78:FB:68:9C:98:96:2F
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial: 019A51BEA4653A37F657CFA34707533E4288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 02:00:39 +0000
Manifest this update: Wed 05 Nov 2025 02:00:39 +0000
Manifest next update: Thu 06 Nov 2025 02:00:39 +0000
Files and hashes: 1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=)
2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: B5B8JmVw9DGBR6SX9G+Q3eERdXwoC0wkZUqylafGi9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:a4:65:3a:37:f6:57:cf:a3:47:07:53:3e:42:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Validity
Not Before: Nov 5 02:00:39 2025 GMT
Not After : Nov 6 02:00:39 2025 GMT
Subject: CN=40ddee294c91de5942907b335b78fb689c98962f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a5:58:86:13:55:c2:91:ce:34:db:1c:9a:e9:
09:45:ca:61:76:c6:77:e4:f5:3f:c0:ba:80:c5:9c:
39:7e:26:60:fe:9d:ab:c1:15:1e:f3:4a:13:8a:09:
97:b7:69:3c:0b:1f:c7:98:56:95:63:e5:1e:91:36:
c3:09:fb:d9:30:c9:97:e1:30:5b:f5:0e:9a:46:b4:
6c:6c:59:d2:eb:22:fc:8d:ad:37:4d:e0:c8:25:f4:
6a:86:ec:4a:52:3b:1c:79:62:8b:e5:97:47:c6:a3:
d3:04:47:0d:64:75:6e:29:02:1e:77:b4:75:16:5e:
7f:55:5c:f9:29:0a:50:cd:bc:c3:45:a9:00:60:ab:
a8:e2:57:49:fc:0c:83:4a:3d:f8:37:78:73:f8:1b:
32:e4:e2:28:1c:4e:9e:59:3e:09:8f:af:2e:22:f2:
3d:15:be:ff:88:4e:31:04:6f:74:77:b5:72:d4:11:
34:d4:fb:64:3b:c6:1e:fc:bf:c2:e0:cd:c3:4c:a6:
4d:b6:4d:d7:e5:58:ff:c9:ed:3a:fb:8f:5f:cc:41:
58:4c:8c:42:d2:91:a3:7b:00:50:7c:b9:47:fb:7d:
c3:e8:24:83:23:6c:28:0f:31:83:70:62:57:e2:fe:
eb:c6:fa:1f:5d:5e:60:84:0a:5a:51:91:65:1a:65:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DD:EE:29:4C:91:DE:59:42:90:7B:33:5B:78:FB:68:9C:98:96:2F
X509v3 Authority Key Identifier:
keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0c:e0:77:57:72:10:67:35:1c:e2:66:b1:7b:5a:5f:14:f7:
1b:8a:00:8c:0a:54:f1:3c:75:1e:c3:bf:47:39:2e:28:5f:cb:
f6:9a:26:88:1f:94:2a:31:e7:6e:5a:d9:6b:11:d5:02:f7:62:
f1:a5:80:b8:31:61:99:01:db:5c:13:1b:e2:27:89:ef:f6:97:
bc:a7:d6:31:9b:f9:ad:0d:de:73:6e:41:37:02:59:69:ac:8b:
1b:83:3d:23:2b:e8:a7:7b:e8:21:76:7b:dc:27:c3:28:25:70:
27:7c:d9:49:0f:5f:62:fb:72:be:ff:d7:04:82:4a:52:1b:68:
18:33:58:48:27:37:cb:de:f7:fb:1c:a0:59:71:e6:2a:3c:13:
1c:2d:8e:94:da:98:de:ed:bb:c6:3e:24:03:8e:32:e5:a7:62:
ab:3d:ad:36:47:ca:7c:43:ab:f1:25:36:07:15:6a:55:73:32:
20:fb:ba:52:72:4f:73:ee:ee:54:80:73:28:6f:8a:41:64:1c:
e0:18:39:7a:43:8a:4a:39:a2:e3:ea:40:db:0e:b9:f1:11:7a:
43:41:fe:fe:0d:0a:ec:d8:09:07:41:71:35:0f:20:16:00:ce:
4a:11:40:6e:12:5a:5a:40:1e:40:ec:57:20:2d:1f:89:5e:d7:
a8:28:67:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:30 2025 by rpki-client