Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: 2iauX+dCO90c+t/Uj8rhyusN63gZ2L4PumOD59pkIag=
Subject key identifier: 44:50:1F:CD:B0:64:0E:BC:7E:3D:6E:EF:A1:E5:50:27:8F:2C:42:16
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 019A50E2F9BEBE6092E1369F0A52F43506CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 22:00:43 +0000
Manifest this update: Tue 04 Nov 2025 22:00:43 +0000
Manifest next update: Wed 05 Nov 2025 22:00:43 +0000
Files and hashes: 1: Bw0NNJ5G9QC3JaBlS90HbDrOyMk.roa (hash: B3vTdiTwQdK9HN3t4vz56wcZIYmvYpMISVeMsspgV1M=)
2: KyYkDGAKcLxBeobymFr8WHFkbsg.roa (hash: i5cDRgXd7YM0AehUFUHTls95bgAtPwPBdENU69SXQBA=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: qHj0QiOQwvS+d5vY2xoY46AAgubxFzso2Kw3Y3VkX64=)
4: bIU1r6-kNYCwjKpYb1XeOOaMSrk.roa (hash: 6q2rVSVFi3ovtZSljouoEUOq4a8bSKXzuMgOvNyKriw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:f9:be:be:60:92:e1:36:9f:0a:52:f4:35:06:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Nov 4 22:00:43 2025 GMT
Not After : Nov 5 22:00:43 2025 GMT
Subject: CN=44501fcdb0640ebc7e3d6eefa1e550278f2c4216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:7a:a1:ee:9a:53:16:87:24:a4:6e:93:c6:
ca:e9:63:89:3d:c2:36:ab:0e:6d:0e:63:23:24:bf:
f9:56:00:87:ba:96:cd:fa:19:ef:d9:63:8d:07:2c:
db:8d:00:8e:c9:83:05:90:f8:e2:57:cb:4f:17:f2:
56:f9:cb:a6:8e:ce:7f:c0:54:7b:f0:ec:bf:40:62:
8b:07:ac:45:bf:35:00:36:94:9f:66:74:12:59:e1:
62:6e:40:d8:8e:16:94:93:37:ad:c0:81:f2:20:b1:
16:96:78:11:06:b4:e7:6e:8a:6d:dc:51:0a:9e:7a:
33:5a:df:94:6a:09:9d:47:2d:ec:fd:25:e1:89:30:
c1:ef:3e:26:67:d6:77:c0:85:6b:48:41:88:f0:a2:
71:f3:3b:0a:59:51:70:ec:92:10:fd:46:43:59:d6:
c8:83:79:bf:88:e2:a2:4d:9b:5a:e0:de:c7:83:4d:
19:dc:0a:29:40:0f:90:cb:21:1d:f1:07:2b:38:65:
3b:03:35:38:2e:b6:7e:15:0c:f9:36:0c:62:ca:74:
86:f9:7d:69:bc:bc:61:84:a9:6d:de:13:d0:ea:90:
19:3b:10:b0:d8:41:a4:50:06:54:87:c6:3e:b3:57:
d7:2f:8d:c7:25:d9:2f:9b:de:45:44:ba:b8:07:32:
f0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:50:1F:CD:B0:64:0E:BC:7E:3D:6E:EF:A1:E5:50:27:8F:2C:42:16
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:93:e0:02:cf:aa:c2:f3:9f:27:4d:08:12:a4:7b:3c:23:52:
25:29:a2:7c:c6:e2:3a:3c:fb:31:82:8c:f2:b3:12:60:19:6d:
27:aa:ed:0a:6c:a3:1c:21:b3:58:2d:8b:32:28:b9:cb:25:39:
13:ea:dc:99:11:8b:85:d6:91:cf:48:8b:d6:1f:81:23:b9:bf:
f5:51:89:43:ce:be:6a:55:3e:d5:d8:93:04:fc:b2:ad:6d:04:
f2:42:4f:c7:14:ee:07:a8:f0:d2:4e:16:90:b0:9b:f8:90:00:
8f:e1:15:b5:89:41:36:77:17:4d:b0:6d:af:ff:4f:c9:8c:45:
1f:51:4e:f8:48:8d:82:de:fd:ed:f6:3b:03:db:7c:ad:c3:21:
6a:4e:f0:30:16:74:e1:89:94:1c:b1:e1:70:bf:85:82:8b:e1:
5f:a1:67:68:f9:1c:3a:a8:68:c3:72:f6:67:8a:ff:7c:8b:6f:
52:3a:5a:83:22:aa:de:76:2d:d9:9c:bc:cc:0d:4c:93:62:e4:
ac:51:cd:b7:68:8e:d9:56:84:1e:43:14:3c:85:b0:83:98:b8:
44:ab:d1:0c:fc:6b:75:81:d9:41:21:b9:b5:6f:19:5c:aa:db:
41:79:90:2c:57:5d:c1:c8:8d:f2:d0:84:df:c3:dc:64:40:9f:
8e:97:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:05 2025 by rpki-client