Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: unSN4l4BYi6OykzmflhA93TMmkNxHLnIVvmtyNk/2RQ=
Subject key identifier: C1:EA:ED:85:D4:9C:99:5E:46:C7:AB:5B:D9:13:A3:70:72:99:08:6F
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 0196BDEEDCE6CC6AC2508E6D4B4ABD01DC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 14C7
Signing time: Sun 11 May 2025 06:01:10 +0000
Manifest this update: Sun 11 May 2025 06:01:10 +0000
Manifest next update: Mon 12 May 2025 06:01:10 +0000
Files and hashes: 1: blyZeWce4rBJhg8ME28pqKDnfCo.roa (hash: pmP+XETNQkgSAUy5VzGeDOXPtY/M0adsiUhjlBBfT5Y=)
2: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: Ztj22NCOWnDZa1/gAAyuJUgOPOObx2pxO3ZPrM2oMFU=)
3: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (hash: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:dc:e6:cc:6a:c2:50:8e:6d:4b:4a:bd:01:dc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: May 11 06:01:10 2025 GMT
Not After : May 12 06:01:10 2025 GMT
Subject: CN=c1eaed85d49c995e46c7ab5bd913a3707299086f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:0c:0c:c0:b2:32:96:ac:b5:67:41:1a:07:
22:74:a2:e1:75:0c:68:3d:b4:44:d3:53:34:9d:97:
33:c5:26:89:c2:72:e1:f6:46:dc:41:19:00:c5:21:
be:01:2a:1a:a2:65:c1:2a:ae:d8:78:7b:db:f3:63:
06:60:a0:84:fb:81:f3:85:d9:be:5d:20:5e:4e:99:
ef:49:dc:ce:98:ff:69:a3:3e:31:45:cc:d6:fa:1c:
52:e6:c5:b9:ec:f4:39:68:5a:74:b7:fd:5d:d7:13:
57:cf:1f:98:e9:ec:52:8f:11:69:9a:d7:38:b8:b0:
03:81:0c:04:ea:52:9a:85:89:03:d1:8d:9f:92:c5:
ef:62:57:83:99:f8:8c:d1:81:a9:22:c7:cf:09:36:
fb:24:5c:bc:76:75:37:e1:fa:cf:63:08:75:5b:de:
7d:5b:11:cf:66:0f:42:ce:0b:f9:e6:7f:c8:88:5e:
27:1a:21:0a:d9:29:9f:71:00:fc:ed:a6:05:84:3d:
3b:30:35:df:52:41:90:90:b0:00:f8:46:7b:ef:4d:
62:20:f0:6d:a7:96:b0:4f:ec:e7:2e:3d:0e:f1:92:
1c:b2:56:0e:52:70:ee:87:c1:09:a9:fb:62:09:d0:
5c:05:21:27:85:77:1b:0d:ca:e3:2e:88:1d:ba:dc:
cb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EA:ED:85:D4:9C:99:5E:46:C7:AB:5B:D9:13:A3:70:72:99:08:6F
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:97:1f:61:a6:82:78:4a:d3:06:c6:eb:80:a7:62:fe:73:73:
61:9b:f6:34:28:b3:9b:3c:68:09:1c:77:c0:9e:d9:a2:29:66:
3a:69:99:fe:52:55:08:e1:a4:19:34:af:a7:2f:55:05:f0:43:
90:da:dd:f4:de:50:8d:00:97:c1:87:31:19:4e:fc:88:49:46:
80:66:cf:f0:63:6e:53:5c:cd:32:36:2e:6a:a2:22:8b:d4:a9:
66:cd:5b:e1:ec:65:f3:21:3a:9d:d3:f8:e8:8d:ab:e3:8a:ef:
21:10:d2:82:73:f7:03:ad:b6:4a:70:f8:6f:2f:a7:d5:c4:a4:
e1:8d:8f:8a:ef:0a:af:3a:cb:85:67:d6:2a:83:98:c6:24:d2:
cd:9b:ab:24:e3:e5:95:e7:25:c4:b3:5d:13:d1:97:50:c6:83:
fa:8c:95:0a:20:49:2f:cb:b9:57:ba:0f:0f:d5:9d:52:38:26:
35:68:6b:9c:d9:dc:74:b1:09:88:89:12:72:41:7c:ce:e7:85:
b5:04:82:e0:6e:2e:f5:30:bf:06:86:28:92:43:cb:15:c8:83:
8c:c9:cd:ee:cb:5d:2a:b6:6c:f5:c2:17:ac:e2:c8:03:6d:64:
63:fd:28:09:53:91:03:45:dd:92:be:1f:16:fd:3d:e4:9a:61:
cb:3e:7f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:54:39 2025 by rpki-client