Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: 9n0WPszLYnCc0W2YAOxqswBDVFKtsylWd58ut1OJcV4=
Subject key identifier: A9:E5:89:2D:1B:FB:14:DF:8B:B9:F3:B1:72:2C:32:DF:A5:B5:D7:54
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 01963E78E73EB813E6C671ABF1ED9644D632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 1485
Signing time: Wed 16 Apr 2025 12:00:33 +0000
Manifest this update: Wed 16 Apr 2025 12:00:33 +0000
Manifest next update: Thu 17 Apr 2025 12:00:33 +0000
Files and hashes: 1: blyZeWce4rBJhg8ME28pqKDnfCo.roa (hash: pmP+XETNQkgSAUy5VzGeDOXPtY/M0adsiUhjlBBfT5Y=)
2: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: WmAhYpSMEBifVWRjoTzjk9uEs0HtdQguZma568eQIhE=)
3: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (hash: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:e7:3e:b8:13:e6:c6:71:ab:f1:ed:96:44:d6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Apr 16 12:00:33 2025 GMT
Not After : Apr 17 12:00:33 2025 GMT
Subject: CN=a9e5892d1bfb14df8bb9f3b1722c32dfa5b5d754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:e8:10:da:50:70:00:0d:51:29:fc:f3:de:
f2:a9:ca:3a:76:ec:4c:f5:86:70:13:70:7b:7b:37:
ff:6a:a3:29:e4:a0:e4:f0:58:6e:ea:c4:1c:7d:96:
da:7e:0b:5d:fb:8c:c5:6b:27:fb:a4:e2:d5:b4:8b:
b5:2c:22:95:57:c2:22:1e:44:95:e8:1b:47:b4:94:
a1:8d:c4:46:a6:c8:99:5e:ed:3c:9c:33:8b:9b:12:
79:93:d9:36:fa:66:b1:1d:d9:46:4a:d6:23:da:78:
77:da:0f:fa:a2:76:7c:7d:c8:f0:56:c4:5c:29:ef:
9f:1e:06:76:52:f2:bd:6f:33:e7:56:2f:19:86:c9:
19:51:ff:73:8e:64:23:bf:67:00:73:f5:40:4f:8f:
f0:6b:27:92:9e:7e:dc:59:2c:7b:9e:2c:14:53:55:
10:3c:50:ed:b9:42:f6:2d:56:20:7c:07:23:1b:aa:
81:cd:76:14:11:09:6a:05:48:99:69:c7:61:d0:36:
75:b8:f0:23:64:0a:70:9e:79:9b:15:96:b5:ca:cc:
ee:70:0d:45:be:e2:24:3d:cd:90:5d:a2:7a:4a:ff:
f3:9b:53:c5:2c:bd:26:d7:dd:9a:94:b1:0b:e0:4c:
c1:14:2b:41:96:88:9b:37:f3:d4:e7:27:ce:4f:1d:
0f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E5:89:2D:1B:FB:14:DF:8B:B9:F3:B1:72:2C:32:DF:A5:B5:D7:54
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f1:19:eb:8f:0a:ec:62:49:c9:8d:cd:9a:c9:00:2b:98:e0:
d3:d4:bc:d9:8c:83:a5:57:18:16:f7:c0:d0:83:18:24:28:08:
63:dd:dd:88:21:a0:7b:97:4a:4b:7f:3a:9d:ac:9a:40:2e:0c:
c7:34:5b:b4:c8:e0:d4:a7:15:4a:44:7c:10:64:48:a3:e2:c8:
ca:a3:df:db:64:d2:ab:07:36:73:dd:f0:6e:f5:e5:a9:62:7e:
f8:fc:bd:4f:fe:f7:7f:93:ba:64:1e:03:66:67:e9:83:d2:5c:
52:dc:dd:14:6b:b7:7c:ab:10:02:d8:76:45:e3:34:b4:b8:79:
95:da:f7:7d:d4:71:45:9b:a1:5d:2e:05:35:49:01:7a:98:4d:
b4:f2:83:47:1d:31:31:91:63:e3:7b:fc:fe:1b:28:73:7b:69:
a8:dd:30:8d:54:13:a8:fb:72:e8:7f:a8:7a:84:d7:73:a7:44:
67:b4:2f:7a:e4:13:bb:98:4b:88:9b:09:d8:80:67:10:1d:c8:
1f:b2:8e:c6:e2:25:c9:75:89:5e:6b:0b:ce:30:5d:5b:ce:fa:
69:b5:ca:08:4f:d2:10:b3:18:16:c8:a9:36:38:85:f3:f7:3f:
3c:9b:08:e8:5a:80:44:52:ea:be:61:48:37:2f:d7:51:da:76:
05:ce:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:02:02 2025 by rpki-client