Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
File: lugqtki4s_iFdWnDmvlUSt_BfAE.mft (raw, json)
Hash identifier: l9vZNu2xj3KPnML53v9CSRnhYc5LdYYB4D0KqlbRMV8=
Subject key identifier: 2F:AE:FF:96:94:9B:A3:4F:13:39:C2:65:9D:A1:8A:76:11:47:0E:79
Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Certificate issuer: /CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Certificate serial: 0199FCC6A33E6B73A0682B91BB901BEFE6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
Manifest number: 0D9E
Signing time: Sun 19 Oct 2025 14:01:40 +0000
Manifest this update: Sun 19 Oct 2025 14:01:40 +0000
Manifest next update: Mon 20 Oct 2025 14:01:40 +0000
Files and hashes: 1: 1-Dw1PHMy6IBe_-mHLEz4ebvy2w0.roa (hash: Ah1oxFMhZvVxbnGr/mLU8GHb80xSkSSdAwDT+auz+vQ=)
2: 7U5ZnSwYG1otH2rn3lTqbRVE3B0.roa (hash: VzOH1v3ihvshRqLzYlHFbA9ewMu5V3WewaJXm960cgk=)
3: lugqtki4s_iFdWnDmvlUSt_BfAE.crl (hash: Z2V5m4j6lSHIkaZezk5RuSze/6LPYx9t6IV6Gbwnbfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a3:3e:6b:73:a0:68:2b:91:bb:90:1b:ef:e6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Validity
Not Before: Oct 19 14:01:40 2025 GMT
Not After : Oct 20 14:01:40 2025 GMT
Subject: CN=2faeff96949ba34f1339c2659da18a7611470e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ce:59:e3:1f:dc:55:75:60:21:00:8d:e3:20:
6e:ab:db:b5:3b:db:72:7d:5a:0b:39:d8:08:20:54:
23:db:9d:cd:50:61:57:e3:fc:56:c2:ec:62:03:48:
d4:f1:6f:e3:46:d0:2d:61:62:c3:13:7c:c6:45:2d:
87:2b:0e:b8:51:55:d6:66:01:3b:43:3e:90:fc:65:
97:6e:fd:de:57:63:47:67:ec:d2:bf:cc:55:33:1c:
e2:69:85:fa:d1:c3:9e:39:9a:e4:c6:f8:b5:f1:df:
e8:e1:97:3b:7b:5c:d0:5c:35:dd:42:f5:d4:12:40:
83:4d:01:a3:e0:9e:e8:51:65:11:a6:aa:77:52:e2:
f9:8f:15:3a:3f:dc:86:11:91:99:ac:d4:35:cf:4d:
99:fe:48:86:e9:c1:f0:ae:c8:a0:be:28:41:d1:3c:
3e:4d:a4:aa:52:18:68:83:b8:a9:6c:40:a7:e5:1b:
aa:99:4d:64:ea:f9:4e:7e:8c:bd:58:68:23:ec:65:
a3:06:33:79:97:54:d0:50:f6:7f:27:8d:ac:f7:fb:
4a:6e:39:2d:69:71:28:f8:0e:3a:22:96:24:7c:b0:
62:77:ba:20:ed:35:5a:27:8a:c9:f4:b0:64:0c:a6:
62:5b:cf:32:9a:f1:c4:3f:1a:9f:70:f6:e5:e6:03:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AE:FF:96:94:9B:A3:4F:13:39:C2:65:9D:A1:8A:76:11:47:0E:79
X509v3 Authority Key Identifier:
keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6e:ac:d2:db:69:5e:de:e9:4e:41:20:e2:26:ab:20:26:34:
ec:78:21:09:62:ef:da:9c:99:c9:74:ac:07:86:c9:b8:16:65:
aa:bf:08:61:47:5c:b7:c8:4d:dc:a1:2d:f2:c6:7a:06:5c:cd:
83:a0:1e:ed:68:88:dc:59:82:a1:ea:3f:e9:0f:79:31:f6:f4:
0e:69:a4:da:4b:b4:3e:18:31:70:e4:8b:90:ff:f1:c4:4e:43:
cd:16:51:5a:cd:27:50:72:19:01:b8:76:db:6c:31:50:5c:e2:
99:eb:90:a1:13:27:b5:ea:9d:5d:13:f8:17:70:9e:a4:4a:c5:
16:7e:d9:10:f7:10:88:9f:79:fc:18:1c:ad:2b:f6:dd:ee:fd:
76:a4:97:2c:03:67:79:13:3e:99:6b:85:78:4f:cd:8c:e6:85:
e4:2c:41:34:54:a0:59:b0:76:6e:55:97:18:aa:28:aa:3f:93:
92:5f:a5:31:60:12:7f:9e:7a:44:f6:b8:ce:4f:58:a7:bd:8c:
36:7e:c8:3d:8a:10:4d:dc:6f:88:fb:2a:37:49:f2:a8:be:ed:
a4:a1:47:f7:bf:07:e3:59:31:89:e6:2d:0f:db:b6:e5:db:a0:
a8:ef:5b:06:b9:31:c2:f6:4c:9e:ab:ba:f2:06:80:1e:b5:2d:
b9:42:0e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:07 2025 by rpki-client