Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
File: lugqtki4s_iFdWnDmvlUSt_BfAE.mft (raw, json)
Hash identifier: vp4RmFaIFWmftKYoCrwhemkdXdLOHI1/P81CASDt3v4=
Subject key identifier: DB:39:F0:8E:E8:A3:EE:D4:76:C1:EC:4E:E3:59:88:62:5D:0B:5D:FE
Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Certificate issuer: /CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Certificate serial: 019893A4944869FFE1ABE1E88508234B3789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
Manifest number: 0CE3
Signing time: Sun 10 Aug 2025 11:01:33 +0000
Manifest this update: Sun 10 Aug 2025 11:01:33 +0000
Manifest next update: Mon 11 Aug 2025 11:01:33 +0000
Files and hashes: 1: 1-Dw1PHMy6IBe_-mHLEz4ebvy2w0.roa (hash: Ah1oxFMhZvVxbnGr/mLU8GHb80xSkSSdAwDT+auz+vQ=)
2: 7U5ZnSwYG1otH2rn3lTqbRVE3B0.roa (hash: VzOH1v3ihvshRqLzYlHFbA9ewMu5V3WewaJXm960cgk=)
3: lugqtki4s_iFdWnDmvlUSt_BfAE.crl (hash: raypeh8B/noh5P7CanVKgnI2vH7Rj3GN+vJFxkLOBGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:94:48:69:ff:e1:ab:e1:e8:85:08:23:4b:37:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Validity
Not Before: Aug 10 11:01:33 2025 GMT
Not After : Aug 11 11:01:33 2025 GMT
Subject: CN=db39f08ee8a3eed476c1ec4ee35988625d0b5dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:82:4e:fb:78:c8:97:bd:d9:36:ad:1c:58:
e0:c3:98:90:e4:e7:80:e9:cf:49:8e:3e:b1:e5:98:
3b:b6:64:02:f2:62:af:57:6d:ba:9c:46:a4:5f:93:
5a:3e:b6:82:0d:41:8d:fc:ef:79:32:02:9d:76:3d:
a3:69:c2:38:52:9a:1e:f8:93:6c:08:6f:a3:d5:05:
47:b8:82:71:17:e8:a3:93:b9:0f:b2:5c:f4:03:4c:
7c:48:f8:50:cf:5e:fa:e9:dc:8b:80:ac:6c:b1:44:
5e:99:d3:84:97:86:b6:9d:5d:b4:c3:61:e1:b6:8f:
6f:4c:34:3d:fa:54:0a:86:ee:d1:e9:10:d9:3e:ac:
39:74:35:8c:bb:fe:38:23:f2:05:5a:c3:0e:ff:3b:
75:57:d2:51:43:5c:b9:e4:d7:d6:1f:6b:6a:b3:72:
63:ae:bb:be:6c:a0:ef:e4:2b:66:f1:cc:32:51:bf:
72:88:16:fa:9f:b1:21:ed:08:2b:c1:5d:7e:18:6b:
c3:68:3c:31:84:e5:cc:6e:59:3b:9d:c6:53:db:e4:
cd:79:55:7f:83:49:7b:40:0f:40:5e:b1:ec:f0:b2:
25:d5:28:22:6a:bb:1f:57:f2:b0:13:56:28:9d:ce:
de:e1:68:b9:9c:f8:82:42:3e:7b:b6:5e:b5:b7:4e:
40:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:39:F0:8E:E8:A3:EE:D4:76:C1:EC:4E:E3:59:88:62:5D:0B:5D:FE
X509v3 Authority Key Identifier:
keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:42:57:18:6c:1b:fe:a2:59:c8:5a:97:23:d5:13:d5:91:d9:
ee:88:f3:9c:d2:b9:75:0f:98:1c:4d:9a:05:52:ec:52:98:68:
19:a0:74:9f:6f:6b:fd:2c:17:93:4c:15:87:c2:20:5e:cc:86:
14:74:4c:91:29:01:41:a3:15:fc:5c:b9:33:54:86:9e:27:e5:
cf:26:ca:15:36:d6:1f:16:44:06:58:3c:c5:db:b8:1a:85:57:
8b:9e:01:21:c7:7f:24:94:b0:b7:d0:6d:bc:5d:39:ff:21:66:
fc:7a:b2:20:bb:26:08:5f:f3:fd:46:eb:8b:55:3a:d7:45:b7:
1b:64:28:90:98:7e:6a:07:6d:24:81:d4:3e:e3:c5:32:d6:40:
78:1d:fd:f4:16:bd:97:30:57:09:dc:2e:f3:37:7e:14:3a:49:
5d:55:f7:04:9f:b9:ad:48:64:78:cd:3c:f3:e3:a9:b9:78:e0:
72:3f:2a:fb:a3:d7:79:26:09:cb:77:06:d6:3f:50:e7:7c:65:
de:67:a7:a3:69:cf:b7:58:26:3a:1f:47:56:bc:6a:8b:38:a1:
34:29:3d:57:d5:43:ac:4a:57:bb:25:ca:43:a6:c2:3a:b0:4d:
f0:bc:60:2a:07:9e:2d:5e:4f:1f:38:f8:c1:b5:fd:a1:96:99:
31:bf:9d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:31 2025 by rpki-client