Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
File: LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft (raw, json)
Hash identifier: XxuKfFzyPH4BBVyS2K2VPfzMpbpEsCeaLxMzQhQhCuY=
Subject key identifier: 65:D1:5A:4B:C2:80:F5:48:04:64:E2:D2:62:D7:EA:1F:E0:68:0D:C0
Authority key identifier: 2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
Certificate issuer: /CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Certificate serial: 019A4E4F438A76641BBE91854C4EB1B2FD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
Manifest number: 16D0
Signing time: Tue 04 Nov 2025 10:00:08 +0000
Manifest this update: Tue 04 Nov 2025 10:00:08 +0000
Manifest next update: Wed 05 Nov 2025 10:00:08 +0000
Files and hashes: 1: LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl (hash: aLyuTbhhPWNCA00sn2JGuOB35oqaN9+DSGykMbTjWdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:43:8a:76:64:1b:be:91:85:4c:4e:b1:b2:fd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Validity
Not Before: Nov 4 10:00:08 2025 GMT
Not After : Nov 5 10:00:08 2025 GMT
Subject: CN=65d15a4bc280f5480464e2d262d7ea1fe0680dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:2a:7b:eb:ae:d0:b6:9a:1e:5c:85:db:a1:
5d:cf:10:32:73:80:34:ad:79:8b:6d:0f:52:7c:08:
f1:ff:b2:a8:ce:65:7e:47:50:85:be:67:f2:ab:50:
9f:88:12:a2:2e:30:3a:6b:b9:95:92:bb:34:42:64:
3b:f5:a0:a7:cf:3c:3e:ef:63:d4:29:6f:56:76:3e:
20:74:aa:aa:e2:6c:44:15:87:de:97:bd:8b:c9:c1:
4a:4f:f1:63:be:a7:3f:b6:fe:64:f4:f7:b8:4f:2e:
83:4a:86:a3:65:87:f5:f1:04:fe:1c:9e:c3:a8:79:
d7:4f:b7:a5:5f:ed:70:4b:20:c5:97:21:d7:41:e6:
ac:5a:41:21:d3:b8:cb:de:4c:9a:87:c8:f2:07:a2:
60:b1:75:24:2a:76:b7:d6:4d:2d:72:aa:be:ed:15:
79:6b:c2:26:cb:84:17:07:df:b5:20:27:e4:4c:34:
e1:3a:be:c5:f3:21:37:93:ff:67:1a:67:36:34:a7:
af:da:7b:31:78:93:3b:0c:84:0d:b5:8b:7b:6f:3d:
f3:99:cf:de:e5:0e:8e:b8:84:2d:21:46:73:f0:af:
c1:5d:43:e0:5d:4d:bf:fd:3a:84:2a:70:73:22:64:
12:2e:5e:df:25:f4:8c:d2:e9:23:e0:ec:54:3f:ec:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:5A:4B:C2:80:F5:48:04:64:E2:D2:62:D7:EA:1F:E0:68:0D:C0
X509v3 Authority Key Identifier:
keyid:2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:51:54:b1:52:1b:54:f3:35:8b:ff:c7:92:5d:a3:0a:99:64:
11:af:51:6d:5a:45:46:c7:56:1e:d7:7d:56:e9:3b:87:ce:ce:
79:a9:3e:38:93:7d:6b:31:e9:bb:36:66:d7:56:65:c7:ec:36:
aa:b1:48:fc:72:73:ec:98:a3:2b:b1:16:5f:6d:57:ad:be:1f:
c9:a7:22:b4:05:35:3c:e5:8e:8c:5a:6f:3a:e7:4b:db:89:a6:
44:a9:cc:fb:d1:e6:3d:ab:d7:aa:c0:2f:70:ec:33:0b:97:ef:
71:be:44:81:e6:e2:a5:aa:06:be:b0:95:72:a4:2f:5c:f4:12:
eb:b9:8f:4c:77:45:f3:85:ec:dd:17:44:d0:08:d2:ea:70:8f:
dc:57:ed:d4:52:ba:d5:86:ac:31:ac:0a:7d:e9:e8:14:9e:89:
04:1f:49:27:b8:7b:06:42:30:6b:11:3d:41:09:a0:c9:09:bf:
ae:03:2d:aa:50:3c:7c:d7:a9:f3:3f:ab:03:3c:28:ab:72:07:
9e:44:a7:f1:73:02:f0:52:ab:6a:03:eb:af:b5:b9:21:c1:b0:
c6:05:f5:92:3a:d7:36:f0:e0:3c:1e:67:1b:f6:46:2b:c7:c0:
8b:1b:97:8a:6b:e7:4a:c6:45:60:ba:0c:6f:b0:01:26:cb:52:
71:f2:b9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:54 2025 by rpki-client