Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: 5xwwVYoqw6aOf6iwjjpNNYMg9DO5JxILro33VOKts40=
Subject key identifier: E0:AB:48:B3:48:89:10:57:9F:F7:BB:30:76:93:35:34:DB:AC:E1:AA
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 01974A7B39096C10BA648B51F6F771B3BA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 13:01:18 +0000
Manifest this update: Sat 07 Jun 2025 13:01:18 +0000
Manifest next update: Sun 08 Jun 2025 13:01:18 +0000
Files and hashes: 1: Bw0NNJ5G9QC3JaBlS90HbDrOyMk.roa (hash: B3vTdiTwQdK9HN3t4vz56wcZIYmvYpMISVeMsspgV1M=)
2: KyYkDGAKcLxBeobymFr8WHFkbsg.roa (hash: i5cDRgXd7YM0AehUFUHTls95bgAtPwPBdENU69SXQBA=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: SvdxawZnfv489+fabwrnz8z9hiyCxQQPJf4I9q0sTy4=)
4: bIU1r6-kNYCwjKpYb1XeOOaMSrk.roa (hash: 6q2rVSVFi3ovtZSljouoEUOq4a8bSKXzuMgOvNyKriw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:39:09:6c:10:ba:64:8b:51:f6:f7:71:b3:ba:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Jun 7 13:01:18 2025 GMT
Not After : Jun 8 13:01:18 2025 GMT
Subject: CN=e0ab48b3488910579ff7bb3076933534dbace1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:6c:2d:eb:ae:26:fc:87:b5:b8:3c:07:3b:
3a:d1:1c:dc:5a:86:7b:be:81:90:a4:94:6f:7f:f9:
ba:f9:7f:41:1c:06:30:b4:d2:95:81:c1:ca:a0:e1:
8d:fa:b9:b2:bd:ea:f1:f1:1c:89:69:6e:ba:a2:73:
ce:86:67:0a:91:e7:bf:a9:13:98:ad:9c:fc:4f:c5:
2a:36:3a:bc:f0:31:33:f5:db:41:68:c2:3e:d5:63:
06:75:a6:15:6a:27:07:16:3c:ba:f2:7b:45:c0:fc:
94:d3:98:e4:0e:c5:b8:79:7d:16:49:33:1e:ac:6b:
95:9c:7a:6e:5f:b7:98:a1:8d:46:49:60:32:4f:1e:
0b:4a:69:26:80:81:89:c2:5f:a5:b7:9d:e2:75:41:
34:87:59:54:56:e5:ff:7d:bd:41:36:be:da:10:30:
79:34:ca:6f:04:c6:bb:49:90:aa:b2:28:4c:a0:0e:
88:82:0a:67:fe:df:6f:86:a1:8e:99:38:8e:7b:05:
98:f5:96:6a:bf:e2:fd:88:7e:90:4f:b2:85:52:6c:
ff:8c:60:3d:38:9a:c4:28:5d:be:4f:8b:11:ff:43:
bf:52:32:66:f6:c4:0c:f0:d0:33:c6:2c:5b:e7:e4:
17:e8:5d:a8:bc:a5:30:a0:6d:ac:f7:7e:2e:00:6f:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AB:48:B3:48:89:10:57:9F:F7:BB:30:76:93:35:34:DB:AC:E1:AA
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:00:52:c1:4f:f1:cd:44:4e:8e:9f:1a:47:1d:8d:15:79:93:
e5:43:95:d3:b5:11:e0:c2:7f:86:18:64:43:d9:4c:0d:86:9d:
38:51:54:8b:5c:d3:c4:8b:fd:5e:60:bb:e5:57:2c:a0:17:9b:
17:e5:ef:1a:5c:6f:ad:ec:2c:e2:a5:89:78:e4:95:68:a9:74:
56:52:f8:6c:a7:be:fb:e3:76:bf:37:11:95:3e:09:64:a1:80:
f8:f8:74:7f:97:62:3d:d7:0f:63:ec:b8:95:ea:0b:b9:24:0b:
2c:4c:65:b0:5c:9f:bc:37:dd:44:21:2c:e8:20:0e:0b:e9:1c:
ff:82:b5:c3:ca:26:1d:7f:75:7a:7e:b8:78:85:35:03:f8:bf:
2b:21:88:f1:e0:bf:33:33:d3:92:3d:a3:48:ce:c4:c8:32:c7:
39:20:3a:d9:97:4d:d6:0b:57:6e:9f:d7:56:d0:13:b0:b8:be:
d7:63:9d:15:d9:3d:f3:0d:8f:ca:c0:c2:d0:44:fa:c8:d9:97:
3a:63:26:3c:c3:52:77:7e:0d:0e:af:cd:46:b1:60:4f:1f:ae:
45:f7:df:fe:f9:f2:40:22:25:b4:ba:03:14:d2:91:4c:37:f8:
ba:dc:a6:af:b7:16:79:2e:01:53:6d:80:96:22:5c:25:c2:95:
0e:b3:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:34:26 2025 by rpki-client