Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft
File: luqmiIUr9hQfUxdoBoMLTRbHZq8.mft (raw, json)
Hash identifier: lY3MkJFG51IHibfhsR3d5ajyRo7N1yUiDVScPyeXPzw=
Subject key identifier: 3F:41:EE:3F:FA:2A:ED:95:48:41:BD:6E:76:B9:44:1C:C8:AA:FB:F2
Authority key identifier: 96:EA:A6:88:85:2B:F6:14:1F:53:17:68:06:83:0B:4D:16:C7:66:AF
Certificate issuer: /CN=96eaa688852bf6141f53176806830b4d16c766af
Certificate serial: 019921E7A21CFC09EE86A2A02EC7279D835E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqmiIUr9hQfUxdoBoMLTRbHZq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft
Manifest number: 26
Signing time: Sun 07 Sep 2025 02:00:52 +0000
Manifest this update: Sun 07 Sep 2025 02:00:52 +0000
Manifest next update: Mon 08 Sep 2025 02:00:52 +0000
Files and hashes: 1: luqmiIUr9hQfUxdoBoMLTRbHZq8.crl (hash: Kb29m3PniYhOna4nlkd6kdHzGfzVVtShRdsLdg6yqCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqmiIUr9hQfUxdoBoMLTRbHZq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:a2:1c:fc:09:ee:86:a2:a0:2e:c7:27:9d:83:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eaa688852bf6141f53176806830b4d16c766af
Validity
Not Before: Sep 7 02:00:52 2025 GMT
Not After : Sep 8 02:00:52 2025 GMT
Subject: CN=3f41ee3ffa2aed954841bd6e76b9441cc8aafbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:50:08:5e:93:24:42:df:fa:b3:e8:58:51:
e4:b9:07:65:20:10:e1:a7:ee:0c:bf:94:5a:2c:b3:
e6:a8:2c:31:13:04:c3:f3:36:2b:ca:69:7a:ad:43:
9e:03:5a:10:d5:41:77:30:25:e2:c8:a1:40:48:8b:
5f:24:e7:43:01:27:b8:cb:16:0b:8d:f6:62:28:8c:
b1:94:6e:af:b6:a3:73:bf:10:a9:33:2c:33:1e:ae:
68:c0:83:cb:40:b5:a8:9b:64:de:e3:59:dd:ed:d5:
95:2c:d4:c2:f4:7d:8e:75:8c:b8:7b:ef:3b:79:cb:
cf:2b:73:be:a6:e5:84:fd:a3:4b:17:c6:48:f3:a7:
1a:e0:2b:9e:ee:79:d8:c6:14:16:58:42:79:35:e1:
fb:13:b4:c2:4b:5d:1c:c1:8c:17:93:5b:14:fc:a7:
9d:35:b5:e3:03:2d:f8:fd:df:85:58:a4:8f:f9:83:
82:4b:68:60:75:40:25:63:c4:4a:6d:f2:51:d6:2e:
2e:5d:65:f9:9c:50:6b:bf:fb:d8:2d:d7:1b:65:b0:
b6:47:58:39:cf:c5:26:55:70:30:64:6d:79:e9:c1:
9b:3d:f6:ec:ca:82:b3:72:80:bd:68:ca:6a:df:b1:
9a:ea:84:3f:85:0e:93:38:e7:e3:d4:9e:0d:82:e9:
19:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:41:EE:3F:FA:2A:ED:95:48:41:BD:6E:76:B9:44:1C:C8:AA:FB:F2
X509v3 Authority Key Identifier:
keyid:96:EA:A6:88:85:2B:F6:14:1F:53:17:68:06:83:0B:4D:16:C7:66:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqmiIUr9hQfUxdoBoMLTRbHZq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:00:41:60:6c:82:e1:cc:53:fe:4e:35:a1:3d:ef:b7:cf:79:
16:93:3f:7a:6a:e5:4b:a8:40:3e:53:b8:0b:a8:af:23:6d:f8:
8d:5e:64:36:42:36:6c:b1:f2:67:28:8d:77:2c:9c:2f:c1:34:
06:24:cb:dc:85:ed:74:01:5d:23:10:3e:73:1e:89:54:50:bf:
e6:2c:46:82:41:fc:73:45:aa:c5:11:4b:a4:2f:d1:e7:ce:cc:
ee:c3:75:0e:18:ab:59:1c:0b:b4:73:2d:3c:b4:31:6a:c3:d7:
db:d2:b5:57:90:44:a0:90:4c:ae:a0:04:72:32:58:9b:f0:eb:
2c:40:5c:52:fe:22:0d:40:1a:81:bf:c9:a3:ca:34:87:52:5a:
09:9b:b0:30:c6:1f:79:9d:14:26:27:e2:39:2e:55:a3:0b:9f:
92:f3:97:b2:10:5e:25:a3:21:6f:c9:29:e3:fe:6f:2a:ec:51:
8d:73:a0:e9:19:9a:5f:66:e6:b0:3c:dc:c0:fb:5d:6f:6c:d0:
92:48:c4:ac:32:bf:cc:30:eb:02:65:74:9a:2d:f2:cb:3c:05:
ea:13:9c:e0:63:9a:dd:53:d9:30:2c:f5:a3:6c:36:97:5f:21:
72:d0:5f:63:bd:3b:b1:db:02:79:e7:36:a7:57:21:64:29:d8:
cc:ab:56:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:56 2025 by rpki-client