Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: TYVVjQ9pQW4ToySFgWNZv7yrYM1jebLqz92N4O3jy9s=
Subject key identifier: 67:FB:9D:56:FA:40:ED:36:36:80:B0:14:E0:E8:BE:94:E2:B4:9A:AE
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 019672301ECD63177D9E8C9BAD4AC64B0F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 150C
Signing time: Sat 26 Apr 2025 13:01:18 +0000
Manifest this update: Sat 26 Apr 2025 13:01:18 +0000
Manifest next update: Sun 27 Apr 2025 13:01:18 +0000
Files and hashes: 1: Bw0NNJ5G9QC3JaBlS90HbDrOyMk.roa (hash: B3vTdiTwQdK9HN3t4vz56wcZIYmvYpMISVeMsspgV1M=)
2: KyYkDGAKcLxBeobymFr8WHFkbsg.roa (hash: i5cDRgXd7YM0AehUFUHTls95bgAtPwPBdENU69SXQBA=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: 0vPTasVyvTn2ziHb5keiBJGssmTPzTzq9UunfMcKCKo=)
4: bIU1r6-kNYCwjKpYb1XeOOaMSrk.roa (hash: 6q2rVSVFi3ovtZSljouoEUOq4a8bSKXzuMgOvNyKriw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:30:1e:cd:63:17:7d:9e:8c:9b:ad:4a:c6:4b:0f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Apr 26 13:01:18 2025 GMT
Not After : Apr 27 13:01:18 2025 GMT
Subject: CN=67fb9d56fa40ed363680b014e0e8be94e2b49aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:f0:d1:80:fd:d3:99:cd:16:a4:8d:9c:44:
45:c3:bd:23:44:5a:38:22:8b:97:fe:be:41:1b:81:
4d:c9:db:62:ac:51:3d:8d:1d:35:6b:a9:f2:0a:dd:
b9:60:9a:43:2d:0d:0a:c5:4f:ad:d8:79:d1:20:6b:
2d:de:1c:dc:b2:e8:aa:a5:ba:65:bf:05:c6:1a:ef:
99:8d:1d:be:0b:20:d9:f3:0d:c9:34:41:8d:ee:7d:
24:4a:69:4c:a3:50:49:12:53:11:bd:10:e8:ea:9e:
58:26:c4:e3:0e:23:5d:42:18:5b:ef:4e:b0:e2:3f:
f1:c0:08:ad:62:b5:bb:a5:93:1b:93:0f:65:c2:62:
be:38:dd:ea:16:8c:d5:48:5d:d6:e6:66:09:11:0d:
bb:27:79:9e:73:c9:33:d4:53:e1:d9:5a:8f:5a:e3:
18:ef:62:11:c6:5c:b1:62:34:29:60:05:b9:47:98:
f2:8f:94:63:88:8d:3f:bd:f0:85:10:80:93:d6:07:
10:cb:77:0e:8b:c1:62:93:ce:0b:1b:01:92:26:68:
1c:cc:fa:85:3e:4a:1f:8c:f0:96:60:01:05:dd:96:
40:1d:4e:96:de:27:86:36:b7:a2:76:9e:90:d6:ce:
e8:c0:ec:be:1a:3e:47:4a:60:06:54:be:c2:e0:3f:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FB:9D:56:FA:40:ED:36:36:80:B0:14:E0:E8:BE:94:E2:B4:9A:AE
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:81:9c:cf:90:7c:6a:21:43:94:72:43:93:7a:2f:45:cc:eb:
1f:da:9f:d1:b4:61:04:fc:eb:56:aa:23:bb:12:16:fb:23:e3:
0d:08:29:6b:5e:08:bd:90:e1:18:e0:65:10:b4:34:09:62:de:
3f:4e:7f:28:44:d8:15:cc:e3:af:7d:23:c7:1a:d1:e9:d8:61:
2e:c7:f2:56:22:46:df:00:90:64:97:c2:c7:0f:ac:31:73:c7:
45:91:da:9a:1d:31:17:68:6d:3d:20:38:f1:df:ec:06:d6:1b:
91:06:3c:cb:98:95:0a:fe:b2:a6:06:53:59:7a:78:f9:e2:d1:
61:a7:b7:b5:81:8e:7e:3c:7c:4a:a9:7f:f1:33:6d:bc:07:fa:
dd:9b:ff:a2:2e:3d:e5:a4:b4:0e:46:e1:e3:72:1f:f0:fb:17:
90:93:e4:cd:fe:08:64:ad:93:aa:ca:bc:12:a8:e2:66:fc:2d:
ef:e9:f9:9b:39:d2:f7:2a:a9:73:ca:01:76:72:8d:fc:15:33:
09:6e:d3:5d:ef:f5:02:86:13:e1:35:6f:24:7b:6d:5f:f0:34:
ed:dc:ff:65:81:b4:c3:11:12:65:08:af:c4:3b:95:b0:2f:07:
bc:78:a2:27:11:b4:59:1c:76:42:e0:5d:1e:0f:e5:43:1e:98:
06:56:9c:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZyMB7NYxd9noybrUrGSw9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNDM2ODlhNzYzOGZmNzM3NTkxZmYzYjI1MTkxODg2MjM0
OTY5NWMwHhcNMjUwNDI2MTMwMTE4WhcNMjUwNDI3MTMwMTE4WjAzMTEwLwYDVQQD
Eyg2N2ZiOWQ1NmZhNDBlZDM2MzY4MGIwMTRlMGU4YmU5NGUyYjQ5YWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkfw0YD905nNFqSNnERFw70jRFo4
IouX/r5BG4FNydtirFE9jR01a6nyCt25YJpDLQ0KxU+t2HnRIGst3hzcsuiqpbpl
vwXGGu+ZjR2+CyDZ8w3JNEGN7n0kSmlMo1BJElMRvRDo6p5YJsTjDiNdQhhb706w
4j/xwAitYrW7pZMbkw9lwmK+ON3qFozVSF3W5mYJEQ27J3mec8kz1FPh2VqPWuMY
72IRxlyxYjQpYAW5R5jyj5RjiI0/vfCFEICT1gcQy3cOi8Fik84LGwGSJmgczPqF
PkofjPCWYAEF3ZZAHU6W3ieGNreidp6Q1s7owOy+Gj5HSmAGVL7C4D/fPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGf7nVb6QO02NoCwFODovpTitJquMB8GA1UdIwQY
MBaAFC1DaJp2OP9zdZH/OyUZGIYjSWlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMt
M2EzMDM0YTM5ZWE1LzEvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMtM2EzMDM0YTM5ZWE1
LzEvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIGcz5B8
aiFDlHJDk3ovRczrH9qf0bRhBPzrVqojuxIW+yPjDQgpa14IvZDhGOBlELQ0CWLe
P05/KETYFczjr30jxxrR6dhhLsfyViJG3wCQZJfCxw+sMXPHRZHamh0xF2htPSA4
8d/sBtYbkQY8y5iVCv6ypgZTWXp4+eLRYae3tYGOfjx8Sql/8TNtvAf63Zv/oi49
5aS0Dkbh43If8PsXkJPkzf4IZK2Tqsq8EqjiZvwt7+n5mznS9yqpc8oBdnKN/BUz
CW7TXe/1AoYT4TVvJHttX/A07dz/ZYG0wxESZQivxDuVsC8HvHiiJxG0WRx2QuBd
Hg/lQx6YBlac1w==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:21:56 2025 by rpki-client