
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier: 8LAPk5Jg1wsZX/JaCeRoa19Az/f6Gc5YhBTAusTUoSI=
Subject key identifier: 38:BB:71:8D:C2:AA:5D:4C:3D:8B:C3:0E:7C:1D:54:86:FE:FE:DF:F3
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial: 019872CFCB20A2560F9D14B5BB9E6AAB82C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 02:01:17 +0000
Manifest this update: Mon 04 Aug 2025 02:01:17 +0000
Manifest next update: Tue 05 Aug 2025 02:01:17 +0000
Files and hashes: 1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=)
2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: gIERdiK6u+xscjKgdw+3U9LqC7cFdCsGHfq7O7MJ7c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:cb:20:a2:56:0f:9d:14:b5:bb:9e:6a:ab:82:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Validity
Not Before: Aug 4 02:01:17 2025 GMT
Not After : Aug 5 02:01:17 2025 GMT
Subject: CN=38bb718dc2aa5d4c3d8bc30e7c1d5486fefedff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:65:0a:9b:dd:75:49:40:84:27:44:8f:49:
92:3a:65:07:66:d1:5b:bd:20:18:36:de:ac:8d:44:
7d:86:97:fb:d6:40:a4:25:2a:75:bd:26:53:c5:f0:
2b:93:5e:36:45:a5:5e:97:fc:57:bf:99:34:0a:26:
bd:c7:16:dd:26:5c:f5:3b:5b:73:9e:6d:10:fa:b1:
47:23:7f:e5:53:4d:cb:9a:77:8a:2b:fc:2c:1b:31:
a2:66:bc:ab:be:87:be:4e:0c:63:24:99:d2:f7:56:
4c:d7:c3:d9:98:19:57:6a:3d:a0:d2:51:75:d0:96:
54:e0:66:d9:c9:e6:66:a5:fe:f8:2f:cd:ec:97:66:
fb:c2:ee:7e:36:cc:e5:08:60:a3:0d:7a:ea:d0:e1:
6a:5e:c6:28:f7:fd:45:5b:0e:23:1b:47:cb:fb:6d:
b8:c8:d3:e5:c7:a4:5f:f4:23:5a:02:0b:a5:f6:32:
e2:78:d8:bd:84:1a:35:24:7c:ca:7a:c5:21:c6:da:
f2:1e:a2:f1:9a:45:39:f2:bb:61:67:e2:10:14:0d:
30:2d:a2:6a:06:b0:90:09:04:e2:6b:1c:f7:5a:4d:
95:f7:4b:9d:ac:5a:0b:cc:c6:37:4a:0e:ad:07:9a:
28:7b:c9:21:5c:19:44:03:b5:b0:42:ab:5a:5d:3d:
7b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BB:71:8D:C2:AA:5D:4C:3D:8B:C3:0E:7C:1D:54:86:FE:FE:DF:F3
X509v3 Authority Key Identifier:
keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:17:6d:74:98:60:89:30:b1:df:01:a7:70:ed:8c:9a:d3:0d:
28:0f:70:90:08:f1:80:04:38:f7:f5:d0:72:b4:62:44:b4:0a:
ba:01:6f:fc:03:02:39:77:7e:02:7a:dc:0c:62:f5:d8:6f:ae:
c6:f2:eb:f0:1a:76:6f:87:c3:54:49:dd:f8:03:e0:17:51:39:
e9:4a:db:70:be:c3:78:24:81:12:bf:70:17:3b:75:7b:0b:67:
e6:e3:73:4b:7b:60:7e:4f:c3:5c:eb:a6:6f:45:b3:81:db:a7:
b4:40:de:a4:2e:a1:d4:99:b7:27:3b:05:0c:5f:2d:eb:54:c8:
f8:2e:e7:1f:00:f7:cd:23:ad:8e:e9:e5:07:68:d8:64:4b:1f:
70:ef:05:11:84:6e:f3:c9:20:c2:6a:94:8c:7d:6a:0c:34:63:
16:44:5f:58:bf:9a:ce:18:ab:50:7e:d6:3c:a8:79:34:f1:fa:
e8:98:c5:c4:02:c0:bc:24:be:3a:56:40:c1:fe:2d:c6:9e:50:
ef:fd:ef:cd:05:6d:00:7d:b1:86:37:28:51:e1:f9:d6:8b:1b:
5d:27:d9:35:f8:90:5a:d8:61:1a:c3:02:14:5f:47:16:8a:c1:
89:a9:0e:c1:11:ba:5c:98:99:57:03:a2:76:37:ff:7d:e9:fa:
e8:8f:68:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:48 2025 by rpki-client