Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: 6lk35iCoaeazwn9dNoE0Wkq4ONWUO22VAOyFJP+UovM=
Subject key identifier: 91:37:14:22:62:BA:81:74:F2:88:D8:39:80:9E:38:A3:36:62:67:C4
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 0199C3E979F445C2B86E4BEADEEC8B7CE76B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 16C4
Signing time: Wed 08 Oct 2025 13:01:22 +0000
Manifest this update: Wed 08 Oct 2025 13:01:22 +0000
Manifest next update: Thu 09 Oct 2025 13:01:22 +0000
Files and hashes: 1: Bw0NNJ5G9QC3JaBlS90HbDrOyMk.roa (hash: B3vTdiTwQdK9HN3t4vz56wcZIYmvYpMISVeMsspgV1M=)
2: KyYkDGAKcLxBeobymFr8WHFkbsg.roa (hash: i5cDRgXd7YM0AehUFUHTls95bgAtPwPBdENU69SXQBA=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: CCBTl2ydHblDNYrcXwpYfAeJZ/rHNArinubC7OTIiWg=)
4: bIU1r6-kNYCwjKpYb1XeOOaMSrk.roa (hash: 6q2rVSVFi3ovtZSljouoEUOq4a8bSKXzuMgOvNyKriw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:e9:79:f4:45:c2:b8:6e:4b:ea:de:ec:8b:7c:e7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Oct 8 13:01:22 2025 GMT
Not After : Oct 9 13:01:22 2025 GMT
Subject: CN=9137142262ba8174f288d839809e38a3366267c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:32:a1:12:d7:42:e9:3a:be:36:39:47:56:
3f:bd:5d:8c:4b:a5:84:ef:d6:dc:d4:bf:81:2f:49:
05:0c:5a:df:64:89:c1:0f:35:66:c5:5e:5a:ed:60:
28:ea:60:b7:51:67:01:b4:3d:a4:7f:1b:a3:73:ad:
49:11:08:6b:f8:f8:c3:b9:a4:4e:7f:a6:d3:31:bc:
fb:b9:7c:2a:5f:6f:b8:56:6a:ef:d5:72:88:87:be:
60:f3:dc:8f:f5:eb:66:00:b9:2a:d8:17:09:b2:cb:
77:37:4a:a4:51:46:5e:ef:00:33:b6:df:ab:37:3b:
3b:16:a1:0b:67:d4:51:cf:07:3c:f7:5d:cf:50:fa:
42:14:3b:3d:b2:0a:73:f8:22:74:39:68:f7:62:33:
41:9b:89:ef:43:70:39:21:25:f9:78:37:82:5e:61:
f3:ad:e2:78:dd:54:5d:2d:6d:f7:75:52:01:10:a6:
27:e9:aa:05:28:d9:71:ea:94:0b:ea:74:1d:fe:a3:
08:64:bf:ea:e4:2a:f0:03:00:4a:c5:db:55:eb:bd:
af:5b:dc:02:c7:10:42:36:d1:a6:c8:cc:b2:d6:93:
64:d0:eb:31:1f:bb:71:99:4a:cc:95:a7:97:c6:25:
d2:7d:68:5a:5a:a4:ff:cc:54:47:7c:eb:9b:ec:e1:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:37:14:22:62:BA:81:74:F2:88:D8:39:80:9E:38:A3:36:62:67:C4
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:83:cf:83:73:98:00:85:88:47:77:d8:97:9d:b5:0f:2b:0c:
4b:6b:b1:07:92:40:03:a3:be:23:38:38:91:f5:ea:23:68:ba:
d6:ad:d8:49:ac:61:c8:55:50:5a:42:3d:75:a2:93:0e:7d:6c:
35:66:2d:db:73:14:e9:cb:73:9c:28:2a:68:6a:67:58:9c:b7:
a7:53:e5:ee:81:ef:26:2a:a3:b5:6c:dd:12:79:6b:55:f3:4b:
31:ab:de:49:64:65:5a:7e:f6:14:c8:df:17:58:11:2d:cf:2e:
72:f8:73:5f:00:8b:c3:57:4b:74:ce:77:ea:d9:ba:75:13:f7:
97:1a:bc:6a:77:1d:5e:9c:8d:db:ff:37:05:89:e7:af:8d:57:
6b:93:bc:09:0d:2a:86:ec:39:16:2d:d7:5f:52:0d:dc:72:9d:
01:f4:c2:09:ca:22:6e:c7:fb:04:2f:ef:40:e5:d2:de:b5:ef:
d2:31:15:11:69:01:21:a8:4b:48:4e:dc:3f:b9:85:9c:f7:0b:
f3:65:5d:56:f2:76:d9:29:b3:8e:64:00:e4:fc:d2:8c:cb:ef:
cd:c1:16:ba:ac:4a:fa:ef:e3:d4:5c:dd:83:44:4c:35:1c:18:
f7:88:3c:02:c7:e8:ea:8e:cd:6d:ce:bf:37:35:b2:75:bd:1c:
82:43:4c:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnD6Xn0RcK4bkvq3uyLfOdrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNDM2ODlhNzYzOGZmNzM3NTkxZmYzYjI1MTkxODg2MjM0
OTY5NWMwHhcNMjUxMDA4MTMwMTIyWhcNMjUxMDA5MTMwMTIyWjAzMTEwLwYDVQQD
Eyg5MTM3MTQyMjYyYmE4MTc0ZjI4OGQ4Mzk4MDllMzhhMzM2NjI2N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1YyoRLXQuk6vjY5R1Y/vV2MS6WE
79bc1L+BL0kFDFrfZInBDzVmxV5a7WAo6mC3UWcBtD2kfxujc61JEQhr+PjDuaRO
f6bTMbz7uXwqX2+4Vmrv1XKIh75g89yP9etmALkq2BcJsst3N0qkUUZe7wAztt+r
Nzs7FqELZ9RRzwc8913PUPpCFDs9sgpz+CJ0OWj3YjNBm4nvQ3A5ISX5eDeCXmHz
reJ43VRdLW33dVIBEKYn6aoFKNlx6pQL6nQd/qMIZL/q5CrwAwBKxdtV672vW9wC
xxBCNtGmyMyy1pNk0OsxH7txmUrMlaeXxiXSfWhaWqT/zFRHfOub7OHrwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJE3FCJiuoF08ojYOYCeOKM2YmfEMB8GA1UdIwQY
MBaAFC1DaJp2OP9zdZH/OyUZGIYjSWlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMt
M2EzMDM0YTM5ZWE1LzEvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMtM2EzMDM0YTM5ZWE1
LzEvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYPPg3OY
AIWIR3fYl521DysMS2uxB5JAA6O+Izg4kfXqI2i61q3YSaxhyFVQWkI9daKTDn1s
NWYt23MU6ctznCgqaGpnWJy3p1Pl7oHvJiqjtWzdEnlrVfNLMaveSWRlWn72FMjf
F1gRLc8ucvhzXwCLw1dLdM536tm6dRP3lxq8ancdXpyN2/83BYnnr41Xa5O8CQ0q
huw5Fi3XX1IN3HKdAfTCCcoibsf7BC/vQOXS3rXv0jEVEWkBIahLSE7cP7mFnPcL
82VdVvJ22SmzjmQA5PzSjMvvzcEWuqxK+u/j1Fzdg0RMNRwY94g8Asfo6o7Nbc6/
NzWydb0cgkNMhw==
-----END CERTIFICATE-----
Generated at Wed Oct 8 15:47:29 2025 by rpki-client