Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: hRG1JN3J2+kU1NM4jYeIf50tH3q55mg1JFym575rQro=
Subject key identifier: F9:E9:9A:0D:90:38:DB:C3:40:DB:79:96:75:88:C3:BA:C5:81:7A:D6
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 01974EC5D848857A56C97A42F4CCC871DE2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 1512
Signing time: Sun 08 Jun 2025 09:01:18 +0000
Manifest this update: Sun 08 Jun 2025 09:01:18 +0000
Manifest next update: Mon 09 Jun 2025 09:01:18 +0000
Files and hashes: 1: blyZeWce4rBJhg8ME28pqKDnfCo.roa (hash: pmP+XETNQkgSAUy5VzGeDOXPtY/M0adsiUhjlBBfT5Y=)
2: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: qjfWB/RI+Br5Er5tMzSI1PuW3HQm3MgnGprSXbWSQxo=)
3: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (hash: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:d8:48:85:7a:56:c9:7a:42:f4:cc:c8:71:de:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Jun 8 09:01:18 2025 GMT
Not After : Jun 9 09:01:18 2025 GMT
Subject: CN=f9e99a0d9038dbc340db79967588c3bac5817ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:b8:73:f8:a9:6e:4d:6c:d0:ec:d2:09:2e:
8e:7f:bb:b0:86:ea:67:8d:3e:d7:1a:a8:68:ab:01:
47:97:39:5b:aa:0d:da:4d:3f:3b:e0:46:38:a1:a3:
db:c2:ce:49:28:6e:74:04:a4:c4:25:9b:5f:61:46:
20:80:b6:f3:4f:31:f5:0e:3d:dd:2b:03:82:a2:1d:
b2:3b:a9:44:cd:00:51:d5:43:b7:bc:71:2d:39:09:
0b:ae:21:61:47:f7:a2:01:05:28:69:3a:f8:c3:52:
44:2e:e9:16:89:6a:1d:0f:1d:4b:79:f6:bf:75:d6:
9b:42:58:18:ff:3a:8b:a3:cd:c0:98:46:ca:c4:93:
3a:49:f1:72:02:f4:76:ca:c3:82:fc:e2:6b:2a:fa:
69:f5:0a:27:ea:9c:a1:5a:87:49:e4:fc:e5:da:ce:
a6:3a:06:85:b1:2c:19:ef:e3:5d:96:de:fc:62:b2:
a9:b6:a8:a4:51:35:6d:d4:43:a5:5d:d8:6e:70:dd:
fb:b9:58:52:99:f4:24:c8:0a:5d:75:b4:df:3a:7c:
0c:92:c5:1a:ab:da:a0:24:28:71:96:8a:44:d0:6c:
4d:97:0a:05:35:87:8c:df:b7:bf:80:e5:9b:56:05:
29:89:7b:91:1d:c0:64:df:56:6a:5c:b9:86:3f:33:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E9:9A:0D:90:38:DB:C3:40:DB:79:96:75:88:C3:BA:C5:81:7A:D6
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:27:59:18:91:50:f1:df:e2:ed:04:5e:a7:70:9e:01:2b:0e:
74:9d:2d:2a:9f:05:54:03:bd:40:e4:49:21:b5:26:2f:b7:85:
f5:95:7d:3b:6f:d1:2f:da:b6:a0:90:f1:a0:94:1c:55:45:3b:
c4:92:0a:f4:f5:3e:ac:aa:ad:8b:63:68:8c:e6:18:67:d8:ec:
67:e5:2e:8d:2e:c0:2d:c2:b5:f0:22:5b:d7:e3:f6:a1:dc:09:
df:e3:49:5f:b1:48:a4:c2:26:68:ef:9d:6b:4f:c4:dd:70:64:
6b:77:6e:40:58:e3:33:06:97:c6:d2:4c:6f:1e:a8:4f:93:d0:
3e:a8:94:f3:1b:92:b0:81:cb:74:26:3c:2a:bf:0c:74:db:b0:
fe:99:22:40:d1:2c:4d:ab:4e:50:00:aa:19:fd:59:31:fc:ad:
a1:2c:df:10:56:09:9d:7c:a8:97:e0:04:f5:e1:a3:ec:be:c0:
83:f3:c9:cd:1a:34:f4:bd:b7:fb:d0:7e:86:a5:26:b9:b6:74:
6b:2a:73:8d:18:7f:7c:84:71:15:ea:46:4c:12:01:27:83:db:
dd:d3:38:66:93:68:9d:42:5d:f7:0a:a1:9a:e8:e8:bf:49:e2:
ff:71:f4:ce:e5:cb:af:98:35:d7:fb:0b:13:6e:1d:3b:db:92:
1a:46:69:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:51:05 2025 by rpki-client