Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: Wyx4bcpV77qllRy/QiVyoPA5PkxL81eUt1QcyD6AAzc=
Subject key identifier: DE:25:93:17:DA:56:D2:65:D2:AB:E9:62:22:CC:8B:BC:6D:E4:30:42
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 0197CA5E24DD4B363BC9A09F4A8FA4D1FF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 1552
Signing time: Wed 02 Jul 2025 09:00:56 +0000
Manifest this update: Wed 02 Jul 2025 09:00:56 +0000
Manifest next update: Thu 03 Jul 2025 09:00:56 +0000
Files and hashes: 1: blyZeWce4rBJhg8ME28pqKDnfCo.roa (hash: pmP+XETNQkgSAUy5VzGeDOXPtY/M0adsiUhjlBBfT5Y=)
2: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: gnpHSilHMFMC162OP1yin2KMkqvXhW4Nb9ZJknEnNH8=)
3: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (hash: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:24:dd:4b:36:3b:c9:a0:9f:4a:8f:a4:d1:ff:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Jul 2 09:00:56 2025 GMT
Not After : Jul 3 09:00:56 2025 GMT
Subject: CN=de259317da56d265d2abe96222cc8bbc6de43042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:5c:ec:2b:45:2c:85:57:fa:7a:7d:a4:b9:
00:14:c9:6f:fe:c7:c7:18:cf:57:92:fb:13:5c:df:
2f:c7:c3:12:7c:4b:c9:16:a4:b6:73:e4:cf:cc:3f:
09:45:98:c0:97:3b:96:88:b3:50:f4:95:2d:98:b8:
c2:64:84:0a:6d:73:f9:bb:56:ee:8b:9a:d2:47:75:
90:a2:64:69:e1:47:5d:04:fe:48:95:46:bb:85:97:
07:ce:96:b6:b4:0d:db:fc:e0:ff:40:13:d5:64:c4:
ab:ed:d4:a6:5e:51:e0:8e:60:fd:fd:dc:41:19:05:
fe:7d:78:1b:94:28:85:3d:57:9c:d1:12:00:2e:b1:
94:f0:76:1e:ae:14:20:b8:6f:da:47:aa:de:37:68:
32:68:73:2c:02:2b:35:49:76:a4:4e:74:7a:bf:b2:
69:d7:9c:fe:86:21:c4:b2:91:6b:60:09:8a:a1:f8:
0d:0d:95:9f:78:a6:ea:8c:bb:26:aa:f7:d1:85:78:
81:49:12:34:53:92:c9:c2:cb:0b:3b:46:2f:a2:26:
df:c5:b1:1c:ca:a3:13:13:ce:6c:8a:44:88:66:d0:
74:ca:38:10:f5:bd:5f:65:d8:09:78:8b:b0:fc:ac:
68:7e:dc:e4:91:06:49:0b:ed:81:24:33:6b:57:a6:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:25:93:17:DA:56:D2:65:D2:AB:E9:62:22:CC:8B:BC:6D:E4:30:42
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3a:0b:e4:9d:6f:04:27:00:95:1c:f0:67:b5:1b:c6:40:a1:
d9:8e:6c:b1:a7:b4:f4:3e:1b:15:dc:b8:c1:9c:e0:16:11:28:
56:9d:03:cb:d2:8b:26:54:3d:92:e8:a0:df:59:96:f8:c0:02:
0e:98:41:e6:03:09:2f:0c:29:79:80:84:ef:df:97:9e:c5:cb:
c6:06:bf:05:28:c5:d0:b0:53:8e:ca:cc:d5:ad:40:9e:1f:d5:
3f:ec:e2:fc:f5:65:fe:8e:78:d1:58:63:55:2f:2e:62:0a:e9:
a4:bf:48:4c:44:0a:c7:ec:a2:fe:b9:ea:d0:b1:64:06:3e:00:
2d:be:b7:4f:64:69:a9:d6:98:bd:f5:d1:ea:b3:f8:99:9b:95:
9d:e0:8f:ad:86:ae:77:07:44:0b:9a:ea:f1:9c:ba:e9:83:48:
15:fa:6a:1a:55:1e:9b:99:d9:a1:29:87:0c:74:2c:97:88:e2:
4a:8d:54:55:da:eb:1f:11:5f:c6:60:82:48:09:35:f5:05:01:
b8:e1:d1:5e:03:9e:3b:98:62:eb:c6:e3:d3:38:de:b3:65:e3:
10:83:2a:b6:3f:29:e2:7d:03:49:3e:b9:ef:7a:dd:ef:3d:8e:
60:6c:0e:08:d9:f6:23:9f:be:77:98:65:a9:c4:cd:8f:1f:8a:
45:ee:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:45:02 2025 by rpki-client