Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: sVVh0KzFNa7kmnjEqVtcbWB+iNyXhtGc3RQLzq/ymtY=
Subject key identifier: 76:5D:CE:35:3C:63:15:E2:29:34:4F:2E:1A:B2:54:37:C4:EF:65:BA
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 019873E388E888045F9B8F8AF7B152F06291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:02:27 +0000
Manifest this update: Mon 04 Aug 2025 07:02:27 +0000
Manifest next update: Tue 05 Aug 2025 07:02:27 +0000
Files and hashes: 1: Bw0NNJ5G9QC3JaBlS90HbDrOyMk.roa (hash: B3vTdiTwQdK9HN3t4vz56wcZIYmvYpMISVeMsspgV1M=)
2: KyYkDGAKcLxBeobymFr8WHFkbsg.roa (hash: i5cDRgXd7YM0AehUFUHTls95bgAtPwPBdENU69SXQBA=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: 168zuPSb28HUiyuZiGftx2YBL8EFiBAxIuS+Vy4POFU=)
4: bIU1r6-kNYCwjKpYb1XeOOaMSrk.roa (hash: 6q2rVSVFi3ovtZSljouoEUOq4a8bSKXzuMgOvNyKriw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:88:e8:88:04:5f:9b:8f:8a:f7:b1:52:f0:62:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Aug 4 07:02:27 2025 GMT
Not After : Aug 5 07:02:27 2025 GMT
Subject: CN=765dce353c6315e229344f2e1ab25437c4ef65ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7d:27:7a:48:c5:ba:4a:a1:40:2e:36:1a:42:
aa:b7:25:74:6d:6d:19:f5:50:c9:8b:06:9f:90:cf:
57:de:8c:aa:c8:e4:25:d9:1d:ab:35:b7:af:48:1f:
0a:2c:8a:a3:d2:a8:2e:df:8d:2c:4f:7b:f6:58:f6:
06:18:ae:8a:9b:a6:ba:3b:a3:43:3d:c4:e4:dc:8a:
2d:05:20:0b:17:96:5b:6c:24:cf:d5:9b:29:74:26:
f9:96:7c:e4:18:6a:9a:6b:37:a9:53:8c:0b:ee:2b:
9d:00:56:09:0b:cf:66:b2:3b:39:de:d7:44:44:47:
8f:a7:5f:f1:8d:39:6e:bd:8c:d9:5b:08:8c:d6:f8:
45:a8:e4:28:92:e5:3a:a7:9d:23:31:b1:5c:3c:95:
80:b2:6f:40:f3:28:19:c9:97:e9:42:c7:97:c5:1e:
ab:9d:58:8b:1c:24:44:e6:7e:12:0f:ae:59:c0:14:
0c:64:a1:2b:50:9b:f7:75:bd:45:f2:36:bf:bf:7d:
ae:2c:3e:2d:ca:e3:8a:e1:78:c9:33:69:7c:fa:65:
bf:09:b8:de:b3:87:b8:a6:3c:7a:23:e4:5f:94:31:
8c:ae:80:0b:c5:7b:0e:df:4d:e3:bd:05:01:04:54:
f0:2e:e8:ef:11:6e:86:50:9b:d7:1a:30:ec:af:1c:
2c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5D:CE:35:3C:63:15:E2:29:34:4F:2E:1A:B2:54:37:C4:EF:65:BA
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:49:d3:a5:75:51:a7:75:9a:39:09:18:82:e2:99:fc:d8:3d:
88:e9:02:df:c8:49:c1:7e:ac:ae:02:d0:2e:c4:75:77:d4:11:
51:d6:9c:8e:12:59:9e:05:86:ad:c7:db:57:9c:a5:4d:3f:cc:
4e:2a:61:5a:63:45:0e:e0:3d:f5:38:13:56:ef:2e:2c:4d:39:
76:78:a9:02:23:7f:42:bd:55:3b:da:ff:06:41:2c:e6:9f:fc:
d7:7c:72:9e:6a:f4:9e:eb:a7:5d:f5:8a:79:3f:ae:04:38:6f:
bc:b5:42:7a:67:dc:1f:22:28:28:e3:2d:33:5f:0f:22:f1:c9:
9c:ba:13:77:0e:ac:e6:8d:01:67:95:81:9e:ff:98:a8:67:30:
6b:83:69:c2:2c:77:81:df:15:71:f8:de:1e:ac:51:4d:0f:a8:
a1:f4:94:db:3a:1b:4d:eb:44:a5:d0:30:3b:5a:7f:f3:ee:75:
06:de:90:0c:57:ec:44:45:a5:12:e1:72:f5:3d:12:91:37:c7:
5d:f5:ae:ba:a6:04:0c:07:67:bc:58:39:b1:4d:f3:9a:0f:5f:
09:cd:de:bc:9c:42:31:c0:d1:0d:60:f8:10:5e:01:71:4c:03:
70:10:8f:bc:98:97:08:01:f1:be:e7:f8:c5:a0:15:19:e6:d4:
8b:cb:4a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:39 2025 by rpki-client