Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: /0X+2p8Pztn4c+BC8+TkEtr1qb71CLaX4dSkwYnafhE=
Subject key identifier: DC:E1:5B:2E:89:B0:02:C9:B9:8A:3F:3C:B4:AF:2D:B4:CA:38:A5:20
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 019851209FD3EBC7F81AC2D2B4AD1F4DD0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 13:02:29 +0000
Manifest this update: Mon 28 Jul 2025 13:02:29 +0000
Manifest next update: Tue 29 Jul 2025 13:02:29 +0000
Files and hashes: 1: Bw0NNJ5G9QC3JaBlS90HbDrOyMk.roa (hash: B3vTdiTwQdK9HN3t4vz56wcZIYmvYpMISVeMsspgV1M=)
2: KyYkDGAKcLxBeobymFr8WHFkbsg.roa (hash: i5cDRgXd7YM0AehUFUHTls95bgAtPwPBdENU69SXQBA=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: mpjG7bl0U05X+Uhn58W07Lj7u5jRVuRs4XtQXKtP/DM=)
4: bIU1r6-kNYCwjKpYb1XeOOaMSrk.roa (hash: 6q2rVSVFi3ovtZSljouoEUOq4a8bSKXzuMgOvNyKriw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:20:9f:d3:eb:c7:f8:1a:c2:d2:b4:ad:1f:4d:d0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Jul 28 13:02:29 2025 GMT
Not After : Jul 29 13:02:29 2025 GMT
Subject: CN=dce15b2e89b002c9b98a3f3cb4af2db4ca38a520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:8b:4d:9f:6f:60:ac:eb:3e:90:fd:c3:20:
30:26:cb:13:44:41:96:18:98:99:24:64:34:28:df:
c2:65:9d:4e:7a:8c:5f:70:f9:fb:8d:06:41:49:b6:
b3:a4:db:6a:b4:c6:b8:c7:df:b8:ae:b6:c1:ad:1b:
34:21:83:4c:e7:8d:94:d3:83:d5:3c:9b:3f:2c:47:
a0:e6:50:23:7d:bf:21:be:0f:a0:7f:be:e5:d8:28:
07:ac:55:0b:59:a1:bd:fa:dc:75:d9:c5:15:b5:e4:
e4:f0:5f:97:5b:c6:01:63:85:23:5f:4e:0d:b2:93:
97:8b:f5:94:af:ce:a1:59:f0:90:fa:0b:8b:c1:3c:
89:12:24:13:6f:00:2a:c8:36:04:1f:1d:a9:55:d3:
8a:2f:84:d1:dd:02:9d:b3:75:19:e3:ae:cb:0d:03:
be:fd:3f:3b:1f:46:b5:81:d8:fa:fe:5b:85:e7:54:
c1:2d:32:cb:9f:89:c3:c1:8b:0d:92:b9:5f:7f:68:
8f:47:66:e8:47:1d:ce:dc:08:29:d6:e5:3a:c4:e9:
c7:0e:58:cc:69:b8:26:ea:13:46:28:c7:ee:d3:22:
22:4d:4e:b1:47:a1:d0:05:87:ac:ea:cd:e4:3f:39:
af:35:7f:b8:2d:83:33:39:c9:00:64:3c:33:a7:f3:
de:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E1:5B:2E:89:B0:02:C9:B9:8A:3F:3C:B4:AF:2D:B4:CA:38:A5:20
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4f:15:c4:24:96:a5:f4:1c:07:e7:ff:ea:ef:5e:e3:df:04:
db:65:d0:96:94:fd:30:fb:c6:eb:87:8c:1c:57:77:3b:d4:7b:
f4:a8:6a:a0:86:8d:8c:88:8c:02:a4:cb:79:16:24:3c:f8:b1:
0b:b4:3b:d2:5b:19:e1:d0:0d:88:cc:b5:be:03:d9:58:0a:fe:
48:f4:c2:d7:b5:9b:d0:53:dd:83:fc:86:91:50:6a:f5:84:ed:
30:0b:02:86:5f:de:1e:12:bc:e7:b6:03:5f:00:ac:da:f1:bc:
46:a2:37:c8:7e:02:4e:9a:e7:3b:05:0e:8a:88:af:94:92:9d:
92:a2:79:c2:df:c1:06:32:bc:8c:e9:5e:f9:1f:35:68:c8:95:
47:94:2a:bb:ae:2c:ef:a1:3d:0c:10:2a:18:c3:53:0a:dd:9e:
0d:e6:3e:50:4f:94:e6:0a:4e:54:a2:48:42:60:d2:1b:f9:3e:
bf:67:79:76:4b:92:5d:cd:45:9d:b9:2d:33:fc:96:dd:cf:5d:
7e:db:7e:af:b9:67:f8:11:ab:46:a5:50:00:e1:f0:5a:4d:c0:
d2:da:00:0d:86:f2:3d:ea:78:60:8f:ac:dc:35:3c:12:2c:00:
20:fd:e8:73:ac:73:f6:97:75:b3:71:a4:0b:3f:d3:77:fd:a5:
57:21:4c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:21:34 2025 by rpki-client