Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
File: lugqtki4s_iFdWnDmvlUSt_BfAE.mft (raw, json)
Hash identifier: 49w/HbHNsFtwkUqNM0UMMevDaR3CDKxE1SJitKLkV/Q=
Subject key identifier: 1A:48:82:D3:BB:5D:78:D1:E4:7C:33:83:0A:A0:10:50:35:1E:A3:F0
Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Certificate issuer: /CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Certificate serial: 019838DF8380B22057AF7309AE4DBC5E56B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
Manifest number: 0CB4
Signing time: Wed 23 Jul 2025 20:00:28 +0000
Manifest this update: Wed 23 Jul 2025 20:00:28 +0000
Manifest next update: Thu 24 Jul 2025 20:00:28 +0000
Files and hashes: 1: 1-Dw1PHMy6IBe_-mHLEz4ebvy2w0.roa (hash: Ah1oxFMhZvVxbnGr/mLU8GHb80xSkSSdAwDT+auz+vQ=)
2: 7U5ZnSwYG1otH2rn3lTqbRVE3B0.roa (hash: VzOH1v3ihvshRqLzYlHFbA9ewMu5V3WewaJXm960cgk=)
3: lugqtki4s_iFdWnDmvlUSt_BfAE.crl (hash: WHrs2WzCl1xiZFfunwwm3g4lOwgdmYnatHqxP3+1sVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:df:83:80:b2:20:57:af:73:09:ae:4d:bc:5e:56:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Validity
Not Before: Jul 23 20:00:28 2025 GMT
Not After : Jul 24 20:00:28 2025 GMT
Subject: CN=1a4882d3bb5d78d1e47c33830aa01050351ea3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:e8:1a:ef:6e:24:0a:80:18:b8:f0:73:e6:
95:20:f5:78:a3:a9:f8:48:ed:94:8f:a6:c4:4a:95:
64:87:cf:29:60:54:1a:47:90:17:73:be:ab:30:d7:
7f:e3:91:51:52:80:da:29:c6:2c:6e:30:3f:aa:23:
1b:18:bc:48:ef:0a:38:70:6a:8a:ea:02:b9:f6:f7:
5d:37:55:b8:ed:b2:2b:59:7c:6c:39:93:4d:bf:97:
6a:a2:80:fb:2e:04:af:4e:21:b8:c9:a2:79:e1:3d:
e2:99:b5:63:96:7a:6f:9f:a9:a4:0c:b6:55:dd:c8:
79:17:9b:e1:16:7e:90:04:37:45:fb:30:ba:21:7a:
b8:5a:be:ee:2b:34:7d:31:df:b2:55:9d:4e:39:26:
6a:8d:84:d2:0f:b9:6c:81:65:4e:db:21:cd:2e:0a:
b8:e0:13:2b:7b:50:96:84:6c:6d:d6:c5:fd:b5:75:
91:18:b0:8c:72:64:3e:cf:b7:76:5f:31:93:14:96:
e9:0e:30:e3:e3:4a:46:50:b4:87:28:65:9a:b6:43:
05:82:12:c8:61:a6:b5:ab:ff:73:5f:39:21:5d:20:
32:fa:92:74:d0:27:40:c6:60:ab:b3:ae:df:61:58:
f9:f1:d3:90:8b:e8:37:33:f6:eb:e8:60:a4:20:81:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:48:82:D3:BB:5D:78:D1:E4:7C:33:83:0A:A0:10:50:35:1E:A3:F0
X509v3 Authority Key Identifier:
keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:79:e1:d3:5b:ed:30:54:60:a5:13:c3:ed:91:3b:2b:15:41:
86:b9:fe:6c:37:5e:88:ec:f2:b7:00:83:61:83:0c:ee:4a:fe:
1d:cb:3a:a9:86:be:19:2b:0a:30:cd:ff:21:8f:a9:49:7e:f3:
46:14:31:88:b7:d6:2f:a5:bd:9c:65:c3:31:f4:9e:ef:13:22:
ed:8d:0f:a5:69:64:34:97:60:7a:e8:89:40:49:2f:34:6d:ce:
9f:0b:41:34:9c:43:50:4b:c9:31:e2:7c:c0:c4:31:a7:0b:b8:
96:b7:41:6a:b2:5c:84:df:9d:ce:88:8e:f0:b1:ad:d9:5c:3f:
bc:17:9a:6b:59:7d:7a:f3:52:b6:8f:46:be:c7:0a:0a:3e:b6:
cd:27:76:db:e1:1b:da:e2:7f:8a:30:a1:bf:e3:cd:61:05:83:
c9:e8:5f:57:05:c7:0b:58:a7:15:1f:66:81:60:11:fe:c8:91:
a9:ab:0c:a1:2d:f4:12:b9:22:b5:ad:85:e9:49:6c:52:a7:b6:
97:b4:fc:5d:b3:9a:c1:ac:26:0c:ee:8e:74:47:d2:cb:e0:38:
02:05:dd:f2:aa:8f:bb:b7:dc:f2:46:ac:c1:f0:6a:ad:cd:6c:
98:8d:b9:d3:a5:fb:82:43:08:0a:a2:0b:e0:fd:28:55:8f:90:
90:f5:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:57:37 2025 by rpki-client