Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: oPEtrl1dkXBok34ccnbsOdgKx2EZu7QxoE6to92Asxs=
Subject key identifier: 64:01:AC:9F:1F:C7:B5:23:E1:11:67:20:3A:E6:51:98:88:D5:4C:0E
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 019845898F791590695F43015BBA90934B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 07:01:39 +0000
Manifest this update: Sat 26 Jul 2025 07:01:39 +0000
Manifest next update: Sun 27 Jul 2025 07:01:39 +0000
Files and hashes: 1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: qIe/+RFEa+HREC5p0LSLLIS6cWERsCaqAnTllq8CfW4=)
2: dr9TUWCMOOrZgw4ya4BHH6Fl9S4.roa (hash: MHmzUWCdf8/9JI0888l1CY7P5xnPYz06hMJxDs/OenM=)
3: g5NXYnWEAdkaK-Lr_Xc0-zmGZq0.roa (hash: iRJFMsAKyY3mWv0ViO4zwD2HGWC+kyCn/YQlP9uYKFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:8f:79:15:90:69:5f:43:01:5b:ba:90:93:4b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Jul 26 07:01:39 2025 GMT
Not After : Jul 27 07:01:39 2025 GMT
Subject: CN=6401ac9f1fc7b523e11167203ae6519888d54c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:5e:54:f2:f6:19:f7:ef:fd:15:f2:dd:11:
8c:bc:88:1e:84:87:ef:85:3c:d3:53:81:92:64:4d:
f2:80:7c:53:63:9d:34:e9:c3:65:e5:42:fa:ea:67:
bf:5b:8c:b7:81:7e:0b:6b:e1:4f:f4:ed:d5:4f:6c:
62:b5:84:27:77:3b:5e:76:a1:32:8b:de:88:d4:14:
25:e2:47:f6:b0:f9:49:2d:06:fc:d1:46:19:23:e2:
10:98:30:b8:eb:77:f6:8f:65:2a:4a:f2:4b:21:c0:
bf:ff:4e:fc:f6:13:6c:18:75:20:c8:49:92:21:13:
4a:1e:ad:de:6b:d1:bf:a6:da:22:4b:d8:22:9e:bd:
63:6a:a6:e0:31:29:85:f0:08:e1:48:84:7d:b5:6d:
5c:69:c0:86:67:02:90:28:61:f3:80:ce:b7:51:19:
1b:1f:27:eb:c8:48:69:fb:fd:df:05:ef:0f:c4:09:
b0:eb:fe:7e:97:9b:f8:7f:8a:c9:9f:d6:8f:50:8c:
1c:cc:76:85:48:18:38:16:6b:75:f8:ab:56:3f:cb:
44:99:26:59:5b:58:a2:f9:2d:96:6d:be:c0:27:d8:
2d:12:18:51:5d:7e:29:2b:99:01:b3:5a:c8:6c:e1:
56:36:dd:48:5d:51:f2:fb:35:80:a6:ac:da:ff:e9:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:01:AC:9F:1F:C7:B5:23:E1:11:67:20:3A:E6:51:98:88:D5:4C:0E
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:89:61:65:1c:34:b8:b1:e0:55:9a:3d:8e:36:2d:17:28:c5:
3d:bb:82:af:1e:7c:0e:69:c7:2b:86:da:aa:6c:09:57:4e:c6:
31:f9:96:db:8e:62:b7:41:10:41:f0:93:73:cb:1d:b5:27:2a:
47:c5:50:07:8e:e5:cd:51:bd:91:a1:80:a3:72:a7:6a:29:63:
75:fd:68:e1:c8:53:f7:77:a4:76:0a:4a:8d:81:1b:ed:c3:2d:
36:76:ae:49:13:e0:3e:6f:83:e0:24:f6:4d:b7:5e:aa:cc:ee:
fd:46:69:08:bf:60:2f:15:4b:d1:35:69:77:2a:4c:db:49:e5:
16:d8:6f:3e:44:9d:f6:f4:13:6e:97:ea:5f:36:68:94:1d:81:
87:b5:a0:89:73:52:70:ea:c7:f0:39:77:c9:58:d6:10:aa:f3:
68:b3:b6:86:b9:16:28:81:38:43:35:76:e8:17:1d:9f:c9:ce:
2a:78:41:f0:bd:09:30:a2:db:ec:9a:ec:d8:94:3c:15:3f:d5:
eb:e3:64:36:ed:ea:54:4e:a3:a9:41:a7:13:71:c4:ce:00:49:
81:a6:31:2c:93:be:a1:0a:19:27:09:90:2b:64:f5:b7:7a:d0:
aa:27:81:c6:b2:b4:ad:ed:c4:4d:06:3d:5c:fe:64:48:fe:cf:
a0:f2:18:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:43:46 2025 by rpki-client