Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: igCDdsTby7IBdkIuscvfNlT1R2zXqA1KycqdJ+DDUR8=
Subject key identifier: 41:87:25:57:E2:3C:04:33:B7:E3:3E:2E:EE:B4:F0:F2:CF:9D:EB:96
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 0198D6CD8038762FA01D9810720E93C1EDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 12:00:48 +0000
Manifest this update: Sat 23 Aug 2025 12:00:48 +0000
Manifest next update: Sun 24 Aug 2025 12:00:48 +0000
Files and hashes: 1: blyZeWce4rBJhg8ME28pqKDnfCo.roa (hash: pmP+XETNQkgSAUy5VzGeDOXPtY/M0adsiUhjlBBfT5Y=)
2: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: frl2FnNAwnMVVPrOIie91iQ2kFy4vnoVW7P/DGVD6yM=)
3: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (hash: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:80:38:76:2f:a0:1d:98:10:72:0e:93:c1:ed:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Aug 23 12:00:48 2025 GMT
Not After : Aug 24 12:00:48 2025 GMT
Subject: CN=41872557e23c0433b7e33e2eeeb4f0f2cf9deb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:52:f9:60:29:f1:fa:45:71:8a:77:f6:5f:2c:
ef:68:53:d7:e7:bc:ff:e8:e2:b7:45:e3:3c:7d:dd:
34:de:39:1f:6e:69:9b:4e:bc:48:f9:64:b0:73:f5:
2b:73:5f:ac:d6:71:45:1f:07:0c:05:8d:14:e7:28:
ca:bb:f5:94:59:7e:59:f1:f0:b3:da:85:45:d1:4a:
c6:73:a1:54:92:90:8f:a8:25:90:53:7a:20:89:1c:
13:be:d3:e6:d3:46:3f:9d:fd:38:e6:65:be:01:4a:
3d:4c:35:e9:c1:23:d0:15:d2:78:dc:eb:26:7e:37:
74:4c:96:bb:2a:b9:e8:25:94:70:1d:e3:85:5e:84:
f5:00:42:b2:ab:00:47:57:47:2e:66:fc:4e:21:01:
2f:1e:e6:2f:d3:49:b6:3a:52:75:14:6b:82:ea:10:
52:cf:63:67:65:d0:24:29:22:ba:3e:83:82:dc:5c:
29:e2:71:a4:79:b4:71:03:f4:a0:5d:69:0b:12:8e:
4e:a4:27:3d:f2:76:c2:69:df:c9:86:24:eb:ea:b8:
f5:2e:ad:ca:cb:c0:7d:8d:32:7a:6e:ac:df:8b:2b:
92:36:80:7b:7c:7f:a4:ca:52:ed:cd:cf:a3:06:24:
ba:e0:a8:5e:71:f6:76:5a:1d:c7:81:80:41:f1:1a:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:87:25:57:E2:3C:04:33:B7:E3:3E:2E:EE:B4:F0:F2:CF:9D:EB:96
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:02:cd:e5:d0:ec:31:23:d9:65:c9:70:0b:24:79:3f:f1:fa:
4e:c6:4b:54:40:b8:d7:f4:9d:e9:cc:e2:8d:de:e6:9b:54:c6:
ca:3f:01:c2:b5:14:3f:c5:bf:8c:e5:57:34:ff:87:83:4c:c1:
c4:9f:81:4c:4a:69:86:49:11:58:9b:3e:ae:ee:46:16:8a:43:
3f:c6:05:b4:4e:ef:ce:68:42:35:8e:89:5b:90:ee:5f:e3:2d:
bd:06:d0:49:41:95:4e:78:00:80:2e:7e:6a:63:a5:22:3e:dc:
25:4d:fb:28:76:4b:f0:d7:fe:28:b7:39:5a:01:ff:8e:e7:98:
fa:d9:fc:6b:2a:99:eb:29:fb:08:a3:f5:99:11:97:6b:9a:a8:
01:02:f7:98:5f:0d:ae:7b:37:af:dd:e0:d3:47:c5:af:47:9d:
34:4c:cb:0e:00:26:30:7c:f9:89:20:50:e3:c6:0a:ee:7f:4d:
35:ac:b3:a2:a6:81:2a:14:a7:06:9d:a5:11:65:dc:1c:ea:ad:
d3:4a:6b:dc:a9:fd:57:56:4e:03:32:91:8e:ad:90:7a:67:1a:
23:c9:ff:f1:a5:35:44:9e:b3:b4:e9:53:c4:fe:cd:91:5c:24:
2d:9f:82:80:b7:f9:31:ba:8a:ef:32:f5:e9:ff:59:f7:4c:5f:
81:96:2c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:25:16 2025 by rpki-client