Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: 1Sd7QMTRqo/EAf1Da7ZjfXdIqCITjD/KGB3GocyPjzw=
Subject key identifier: 7C:91:8E:43:F8:BF:6B:7F:89:0C:E1:2E:53:13:2C:AE:31:0B:2B:C8
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 0198D65F89FA11788E66804BC29CEBE6B2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:42 +0000
Manifest this update: Sat 23 Aug 2025 10:00:42 +0000
Manifest next update: Sun 24 Aug 2025 10:00:42 +0000
Files and hashes: 1: Bw0NNJ5G9QC3JaBlS90HbDrOyMk.roa (hash: B3vTdiTwQdK9HN3t4vz56wcZIYmvYpMISVeMsspgV1M=)
2: KyYkDGAKcLxBeobymFr8WHFkbsg.roa (hash: i5cDRgXd7YM0AehUFUHTls95bgAtPwPBdENU69SXQBA=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: 951LQBpYgbZWcK+XQrh2NEx6l0c1pXaCsyW4QPcbIDQ=)
4: bIU1r6-kNYCwjKpYb1XeOOaMSrk.roa (hash: 6q2rVSVFi3ovtZSljouoEUOq4a8bSKXzuMgOvNyKriw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:89:fa:11:78:8e:66:80:4b:c2:9c:eb:e6:b2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Aug 23 10:00:42 2025 GMT
Not After : Aug 24 10:00:42 2025 GMT
Subject: CN=7c918e43f8bf6b7f890ce12e53132cae310b2bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d7:d7:50:6d:29:fe:a7:93:37:2e:b7:7c:90:
d8:43:26:38:e1:2d:df:a9:0c:67:26:5b:e3:f4:54:
20:c5:97:39:a9:1c:23:cc:4c:a5:6e:70:27:ad:18:
08:78:18:4b:3e:f6:a6:27:f8:18:4a:c7:a4:ae:a2:
e3:81:b5:53:7e:47:c9:a2:02:07:e7:f4:e2:a1:db:
1d:62:d8:38:f4:38:b3:be:f4:e5:13:d9:4e:f0:5c:
c3:42:d1:d4:e7:cd:e8:e5:12:ac:cf:83:bc:7d:cc:
ee:a9:32:a6:e2:fc:4c:7e:fa:ed:f5:8b:bb:0c:86:
44:63:63:69:51:ed:be:79:7c:20:5f:2a:2a:d6:32:
45:bd:9b:a6:5c:1d:6f:c0:9c:0a:89:f4:c8:9b:5e:
d3:3d:b3:5c:2f:3a:77:8e:6b:1d:30:c3:1c:3a:ce:
f2:80:dc:de:36:93:f0:7f:64:ec:33:06:6a:de:49:
62:c7:9c:e1:03:50:46:dc:21:33:a6:6b:c5:26:ef:
b5:84:a4:dc:5b:d9:4a:8c:ce:10:46:ca:85:66:88:
dc:97:38:24:34:e7:a0:87:cd:d0:4a:f1:04:00:38:
0f:c4:28:e8:8e:b4:9f:b0:0e:c0:ab:cb:88:33:0b:
cf:5c:da:72:48:ce:93:5b:05:2c:cc:58:bd:b0:47:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:91:8E:43:F8:BF:6B:7F:89:0C:E1:2E:53:13:2C:AE:31:0B:2B:C8
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:20:7c:21:42:2e:76:fe:a6:46:eb:19:73:4d:99:c5:85:e4:
ca:b8:74:94:84:4b:61:a1:b9:20:e9:0d:08:fa:70:a5:27:09:
1e:58:7f:d6:f9:9d:9c:9d:5b:3e:c3:64:b4:2d:e7:37:a8:bd:
7d:9c:e4:1f:48:ea:6f:6d:7c:9f:0f:ba:60:63:6a:6b:8e:36:
77:60:4c:19:64:cf:71:80:47:d0:f5:bf:34:ba:7d:cd:23:0b:
19:ca:94:f9:13:98:52:54:0b:87:79:fb:5e:c3:20:92:e5:9c:
bb:60:81:9d:ba:09:75:7f:4f:66:d6:d7:52:f5:26:72:3a:a4:
c9:6e:17:00:88:62:06:18:dc:67:ff:8f:ce:e5:ef:92:c4:57:
3e:83:a4:ec:1d:15:d4:96:1d:28:54:82:b5:36:73:1c:37:f2:
28:09:9c:83:24:9c:1c:ad:a6:47:54:06:4b:8d:cd:f4:14:70:
92:d9:6e:84:33:f5:0e:1f:81:16:e2:b7:77:e7:3c:30:f1:9f:
5a:c1:6a:9d:51:93:1e:e5:a9:e7:ac:26:ab:91:47:82:86:a4:
80:fb:cf:71:6f:75:35:85:5b:93:e3:c4:59:d0:9d:16:06:b8:
f1:53:79:23:fe:8e:19:1f:bc:9a:83:90:96:9b:1d:66:0c:94:
e8:ff:fe:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:47:49 2025 by rpki-client