Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File: LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier: dSHG42e3NGFxXFGGHxAca6W/SHW7JnAbPXxKEIg6M+w=
Subject key identifier: 10:D1:C5:38:04:90:13:DF:85:6E:96:5F:AE:C1:A7:ED:33:A3:D6:D9
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 019884D57ADFA6505984F51215BA192E840A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number: 1623
Signing time: Thu 07 Aug 2025 14:00:39 +0000
Manifest this update: Thu 07 Aug 2025 14:00:39 +0000
Manifest next update: Fri 08 Aug 2025 14:00:39 +0000
Files and hashes: 1: 2aLxopPcHENcfLMPsouZcp1_F6M.roa (hash: h4R/reMNBt8uBqG3DatHK1fJyHrvX4LbUEuuPBCoJK8=)
2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: CI61hwoYR66+r9Fw4jZfxD7VAftkfWHek3gxN2FFyyQ=)
3: VUTE9O5_hq_bVZqW49cK8Uyj9bo.roa (hash: xI9AJIQruyMmhbpTp5z9YUSoSRn5ytxFSzSALijAUX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:d5:7a:df:a6:50:59:84:f5:12:15:ba:19:2e:84:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: Aug 7 14:00:39 2025 GMT
Not After : Aug 8 14:00:39 2025 GMT
Subject: CN=10d1c538049013df856e965faec1a7ed33a3d6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:72:c3:50:21:57:6c:d5:06:86:f0:3a:19:
31:95:23:f6:20:92:19:34:02:1c:1a:1b:df:c0:a0:
a2:cc:f7:6d:e6:a1:44:f8:f5:2d:33:0c:3e:5b:f6:
0e:5d:f5:4c:31:b1:90:9b:66:c5:8f:55:13:05:96:
bb:97:41:4b:51:f1:c1:85:56:c5:4a:a8:28:ff:42:
cc:6e:d3:e1:bc:e6:89:c0:2f:09:59:0f:08:b6:f6:
9d:35:2c:ca:f4:f8:94:a2:7d:e0:11:6b:63:5c:6a:
50:11:a0:26:16:1e:0b:01:91:7a:31:20:5e:49:67:
0e:ff:f1:dc:da:9a:55:35:37:9b:50:65:ea:0f:ef:
b8:76:e3:75:4f:4a:63:d0:21:eb:e8:8f:c0:7b:b0:
0e:19:e4:c3:35:65:e3:f8:8d:6c:dc:3e:64:41:7b:
59:bc:87:04:64:7a:24:5c:ff:5c:53:f3:b7:e2:68:
47:dd:1f:10:c5:bc:ef:51:9e:e4:e0:b7:7b:7e:10:
b6:72:c7:ac:bf:49:af:de:22:6e:7c:ff:5d:d8:f5:
7e:d6:03:e2:8d:b5:db:25:49:a3:f5:95:5c:ca:57:
b3:f3:b1:e5:e1:68:14:a3:0e:6f:e4:e3:9e:d0:29:
62:6d:a4:07:45:58:a3:80:8d:1c:4e:17:05:14:0e:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D1:C5:38:04:90:13:DF:85:6E:96:5F:AE:C1:A7:ED:33:A3:D6:D9
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b8:f0:4e:fc:75:23:ae:81:7b:26:f6:0a:b9:51:f8:0d:7f:
08:52:c3:93:c2:3e:a5:a7:1b:3d:c6:e3:52:63:ba:b0:4d:3c:
69:d8:60:c4:64:82:5a:6e:1b:12:55:39:c0:48:b1:46:fd:2c:
64:17:50:92:33:72:da:22:14:b0:eb:b3:bc:3e:d2:b9:40:24:
ea:0a:05:0f:c1:24:25:02:d8:90:18:7a:34:4f:23:e9:aa:1d:
8f:b4:20:f4:00:3a:eb:88:d1:81:e8:ea:f8:b2:ad:f6:7b:5d:
e8:eb:8f:ec:f0:d4:da:f3:84:42:d6:b5:04:95:96:70:fd:5c:
ee:7c:8d:e8:35:04:ce:f0:c8:b7:a6:82:c0:39:8a:4d:a2:40:
69:64:98:d8:64:c4:a2:67:95:d9:e3:d3:b9:fe:f4:de:e2:32:
4a:c9:11:44:c6:3f:c4:16:36:29:d5:86:23:73:75:fb:d0:36:
d5:9e:7d:2d:d0:68:ff:ad:d5:b8:87:ec:90:17:22:b3:05:9e:
67:4e:f1:f0:b4:ef:41:39:82:92:74:6b:f4:7c:a3:0a:60:18:
43:4c:9f:97:7d:22:90:11:24:85:32:48:b0:1d:85:e9:f6:e1:
8c:b5:10:cf:73:30:90:1d:cf:62:25:ce:e9:20:52:b3:ef:19:
11:0c:bc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:36:54 2025 by rpki-client