Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier: zpIV140JErfihWwk7uj0nMv3Rl+CgwZ4W1y5gnexDYg=
Subject key identifier: A9:85:56:03:10:C0:EC:5C:7A:57:6D:AE:A1:6C:0E:32:5C:ED:4E:FA
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial: 01984664C5192219C8AE76190C9300F4E859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 11:01:05 +0000
Manifest this update: Sat 26 Jul 2025 11:01:05 +0000
Manifest next update: Sun 27 Jul 2025 11:01:05 +0000
Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: 3iPLtFgcuz3z0G8x//VyikErOBIxKsduSC4yqdYPXF8=)
2: YnocbPb6eCTl7D0AAtuW-w6T8XI.roa (hash: 0/3lBvSnn24lW/dA1E4Lwb6/p+92YZin4bwE+8xDWMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:c5:19:22:19:c8:ae:76:19:0c:93:00:f4:e8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Validity
Not Before: Jul 26 11:01:05 2025 GMT
Not After : Jul 27 11:01:05 2025 GMT
Subject: CN=a985560310c0ec5c7a576daea16c0e325ced4efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:81:d4:b3:6e:d7:af:43:18:bc:cd:96:63:f7:
95:99:9a:34:02:73:92:13:aa:84:cb:79:61:ac:39:
16:0d:fe:ae:4d:e6:97:d6:b2:ed:05:65:d9:5a:dd:
82:42:60:55:3b:d3:31:07:c3:a3:65:2e:61:c3:cb:
da:d6:43:ee:16:2d:f7:e9:18:ad:69:74:57:ca:df:
73:cc:2b:09:bd:4d:cc:da:d5:4d:ad:84:05:24:78:
9d:23:22:a1:44:57:29:4f:04:cb:6e:9b:10:9d:c3:
b4:f8:47:8f:b3:2f:eb:68:b6:f7:62:c5:f8:87:86:
64:c9:40:47:f2:2b:e9:c0:e1:d5:ea:2e:76:bb:ce:
eb:0e:c5:8d:7d:e6:ab:02:f1:6a:cb:5a:23:8e:6b:
91:4f:73:e0:49:fd:52:4d:3c:59:f0:ef:af:c9:0a:
90:34:8d:d3:46:b8:48:84:f5:f6:eb:d8:de:fc:74:
f5:84:12:92:0c:f3:12:f3:47:e6:34:4a:62:ff:0e:
0e:85:c9:08:28:c2:3f:cb:9a:70:e7:a2:23:33:ed:
30:1c:e6:24:79:ce:cf:1e:1a:95:5c:a2:94:4a:a3:
92:42:81:65:33:55:be:66:88:c8:2c:62:81:7d:33:
72:b7:be:42:ec:29:ad:d9:51:25:20:52:f6:1d:51:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:85:56:03:10:C0:EC:5C:7A:57:6D:AE:A1:6C:0E:32:5C:ED:4E:FA
X509v3 Authority Key Identifier:
keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7a:b9:03:60:5f:1b:96:f3:63:79:3f:f3:b1:4d:f9:15:26:
f6:ea:c3:3e:29:99:96:62:93:11:1b:3c:8c:28:8b:a0:92:e9:
c9:71:54:43:3e:12:1d:6e:52:9d:43:a6:bb:2a:ba:12:a2:2a:
52:8b:d1:44:11:9a:2e:1b:1a:e8:6e:fb:79:b8:25:e4:40:51:
67:30:ed:07:d4:72:a1:41:d8:5f:d1:e3:6b:2e:68:76:3a:2b:
1e:c5:a4:8c:d2:c2:46:f7:83:3a:d8:66:17:47:76:49:6f:8b:
91:8b:0c:9b:6b:a6:2e:18:9d:c6:12:d3:5f:1a:75:e3:60:1f:
10:4a:0f:85:ea:86:69:6f:98:28:c6:54:7d:70:b4:0e:ba:ba:
67:55:ba:b4:72:40:02:a7:4e:5b:81:0d:6c:fd:8f:34:08:89:
13:6e:ee:87:17:42:a1:4f:ee:45:7d:dd:1a:bd:fd:98:55:89:
0c:1b:5c:c0:ce:66:15:1f:ca:62:7f:a7:ac:dd:44:0e:97:cd:
03:ae:78:2a:9a:94:16:7f:be:21:40:8f:c9:02:13:f8:db:23:
e2:44:a0:52:0d:ee:09:3b:13:9e:2b:37:55:27:36:c4:7d:6e:
63:22:c6:fb:f0:5f:08:26:9c:d3:25:5e:11:c5:8e:1e:76:ca:
9d:45:3f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:09:15 2025 by rpki-client