Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: 8BPPDtm3ISR35Yz/q7/1Meb/8eLa6TEha6byEk5SAQQ=
Subject key identifier: 3A:0E:FB:F2:DB:1E:20:5E:B9:A0:78:FA:67:C3:D0:15:9E:AB:4E:AF
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 0199FBEAEFAD2D5F395F6F130BCC7108E863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:41 +0000
Manifest this update: Sun 19 Oct 2025 10:01:41 +0000
Manifest next update: Mon 20 Oct 2025 10:01:41 +0000
Files and hashes: 1: Bw0NNJ5G9QC3JaBlS90HbDrOyMk.roa (hash: B3vTdiTwQdK9HN3t4vz56wcZIYmvYpMISVeMsspgV1M=)
2: KyYkDGAKcLxBeobymFr8WHFkbsg.roa (hash: i5cDRgXd7YM0AehUFUHTls95bgAtPwPBdENU69SXQBA=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: VwJF4ra6v+Eol4pzJMZUjl5SzVlyKAMxqkU/WuDNL0Y=)
4: bIU1r6-kNYCwjKpYb1XeOOaMSrk.roa (hash: 6q2rVSVFi3ovtZSljouoEUOq4a8bSKXzuMgOvNyKriw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ef:ad:2d:5f:39:5f:6f:13:0b:cc:71:08:e8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Oct 19 10:01:41 2025 GMT
Not After : Oct 20 10:01:41 2025 GMT
Subject: CN=3a0efbf2db1e205eb9a078fa67c3d0159eab4eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:1f:d2:64:29:78:aa:30:15:06:43:6d:36:
7a:86:81:20:f5:07:92:d1:98:16:93:e3:57:b5:41:
c2:71:a9:42:94:a2:41:6e:de:55:9a:ad:7d:82:6a:
68:86:5f:da:67:3f:0f:c9:a4:c6:86:13:b8:ab:b4:
ed:bc:25:c1:e3:e2:08:ef:6b:c9:80:ae:1d:5f:56:
f2:03:de:65:f7:8e:57:b1:cf:17:5a:8d:12:80:41:
78:7c:92:df:00:ed:d6:82:16:5e:f5:33:65:52:a6:
9c:ac:6a:e3:c9:8a:6a:f6:e9:e7:79:64:bf:8c:39:
59:84:84:f1:ca:7f:28:fc:46:a5:c1:17:b8:c1:c5:
4a:c7:8f:ce:da:e9:61:35:2e:bb:8b:bf:c8:cf:5c:
97:34:4c:d7:77:29:5b:f3:29:d7:0b:76:57:a8:de:
4a:42:de:73:26:e0:be:3f:df:34:ba:e1:b1:a4:5d:
dd:62:5d:0f:9a:84:2b:76:88:b6:c8:77:41:b8:fd:
3e:46:00:5c:ec:68:fb:49:31:0e:af:34:d4:bb:cd:
e5:4c:66:39:74:76:64:a4:53:14:82:d7:69:52:df:
06:ba:0a:55:fa:92:64:74:b9:12:55:21:f9:d1:fb:
51:01:e3:58:9b:38:12:2a:72:a2:ff:31:54:4b:86:
78:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0E:FB:F2:DB:1E:20:5E:B9:A0:78:FA:67:C3:D0:15:9E:AB:4E:AF
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fa:50:29:ea:be:ad:e9:c4:e2:18:bb:24:44:b8:61:aa:ba:
41:37:ef:5b:08:a2:56:dc:71:cc:10:2b:e2:ac:3b:dc:98:98:
ec:c7:89:b6:8a:e7:0d:ff:60:97:d7:da:7a:81:47:a8:ff:78:
f8:9e:2f:75:1c:f9:c6:81:9d:01:58:75:0d:24:27:39:28:08:
ca:12:2d:4f:ef:09:ef:76:1f:97:fb:de:a4:80:40:4b:18:e7:
6b:63:43:3b:47:5f:de:81:9c:5c:d8:35:2c:09:a8:bb:8d:0c:
82:65:91:49:79:e5:7f:92:3f:46:ae:6c:22:ca:b5:28:90:43:
6d:99:7a:e0:26:48:07:f2:01:15:75:3c:6a:5a:e0:8d:3e:76:
9f:b0:d3:96:63:a4:c3:70:09:c4:f4:21:cc:35:08:d1:68:e9:
90:20:45:5d:8a:20:75:1c:e5:3c:0c:7f:d0:77:2d:ab:e8:69:
2e:33:51:e3:c5:f8:b9:d8:d2:5f:97:d4:16:7c:9a:4e:29:db:
28:11:05:59:10:66:78:39:ad:05:bf:d0:c1:b4:2d:2e:06:c0:
05:f9:26:d4:31:d7:ab:04:90:ec:b2:19:ee:da:9a:90:4f:67:
ee:3f:c8:b1:81:53:b5:0c:48:c4:d8:d0:42:e3:fb:8c:65:ee:
01:1f:25:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:10 2025 by rpki-client