Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File: LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier: J/S7tN48Q86+49w/p9r8mNSStFSbCE+Lu2Zn3p2r8wU=
Subject key identifier: 57:4A:8F:95:C9:ED:6A:68:11:D2:67:90:7F:88:A8:EE:F4:31:4B:CE
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 0197B6326BD5AE23B41631E476E6DD81524F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 11:00:46 +0000
Manifest this update: Sat 28 Jun 2025 11:00:46 +0000
Manifest next update: Sun 29 Jun 2025 11:00:46 +0000
Files and hashes: 1: 2aLxopPcHENcfLMPsouZcp1_F6M.roa (hash: h4R/reMNBt8uBqG3DatHK1fJyHrvX4LbUEuuPBCoJK8=)
2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: hMFD3WI4+/kq9IHgVm78s6wH5LXgZmo1Rq5BTWRRReU=)
3: VUTE9O5_hq_bVZqW49cK8Uyj9bo.roa (hash: xI9AJIQruyMmhbpTp5z9YUSoSRn5ytxFSzSALijAUX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:6b:d5:ae:23:b4:16:31:e4:76:e6:dd:81:52:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: Jun 28 11:00:46 2025 GMT
Not After : Jun 29 11:00:46 2025 GMT
Subject: CN=574a8f95c9ed6a6811d267907f88a8eef4314bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:3c:91:ed:8c:f5:51:c3:86:2d:88:d4:dd:
f5:40:eb:a3:d3:76:24:51:ec:46:92:c5:65:02:7b:
48:ef:d7:c4:b2:ef:35:b7:84:8c:9c:c3:84:18:33:
39:57:44:08:3c:13:df:e0:67:aa:8a:1c:73:4e:4f:
c9:63:3e:40:1b:8e:a3:7a:3d:7e:42:42:e2:bd:5a:
8b:97:48:ab:cb:8c:2a:96:3d:a4:3a:5e:59:6e:da:
d9:47:16:f9:74:a1:d2:c2:bd:8c:09:26:42:a6:e5:
73:d4:b8:eb:bd:80:ed:33:01:e9:24:40:67:bf:91:
c9:24:c0:b9:62:89:95:da:63:ce:ff:31:3f:c7:be:
3f:54:ee:dd:39:1e:5d:23:8d:d0:2d:4c:77:20:c9:
52:57:6f:df:b3:6f:64:38:5d:cb:31:1b:d7:de:ff:
65:d8:39:12:b6:71:55:42:c5:3b:79:65:c6:66:6d:
8e:03:4e:61:bc:f6:d2:4a:6e:da:fb:12:ca:bb:47:
31:38:84:7c:57:87:04:70:16:f2:80:58:b8:7f:41:
77:c2:73:42:13:4d:f4:0f:7c:dd:fb:26:bc:72:38:
0f:fb:45:20:c9:b5:c1:c4:2d:51:34:03:51:8c:bf:
70:4e:e7:20:72:43:2a:81:29:65:7e:16:b9:4a:1b:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4A:8F:95:C9:ED:6A:68:11:D2:67:90:7F:88:A8:EE:F4:31:4B:CE
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5d:89:70:a9:2d:b6:23:c0:4c:75:1a:80:76:91:22:d8:9f:
d3:1c:14:4a:f2:ed:7e:bc:50:53:1e:46:dd:dd:fb:05:7a:07:
6c:5f:9f:a5:2f:58:fb:29:79:4a:ad:b2:c4:78:47:49:66:69:
db:6f:61:bd:d2:ca:cf:14:38:37:27:bb:d0:7a:22:be:cb:18:
07:8c:a6:04:e4:1f:d7:e3:12:2b:1f:70:8e:d5:08:b2:ad:64:
ae:69:b6:4e:8e:e6:c0:4b:23:6d:8d:08:34:4b:b4:3e:44:e5:
88:49:0a:a8:be:8b:08:af:4b:43:d2:ae:9d:31:55:f4:d2:e0:
a6:41:e7:de:4e:f8:65:54:67:2f:d4:7c:27:48:5b:d9:2c:d1:
ed:8c:8e:07:05:a0:32:1c:34:9f:46:40:e2:03:8b:92:75:57:
96:17:e7:c0:30:c3:27:c0:d5:1e:e6:f8:d2:6a:0c:bf:f8:38:
45:50:5e:98:60:44:88:ac:08:0e:9a:ef:15:eb:49:ab:de:90:
e0:1d:3c:df:25:eb:d6:f6:74:70:67:dc:46:27:75:74:e7:46:
b5:0c:a8:d9:8a:13:73:71:bf:d0:ca:41:f0:cc:cc:71:d9:fa:
b4:af:01:99:c9:4f:1e:a0:02:bf:fc:f8:4e:b1:c8:d9:f7:c3:
d5:56:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:25 2025 by rpki-client