Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
File: LUrgdxLkhC-A-oEAnTNbxICeZB0.mft (raw, json)
Hash identifier: uGnhf64vpq4PnkZodEJB64RjLjOVJ90jyNtYzyWQ3io=
Subject key identifier: 8C:C4:14:0E:C3:53:2B:9F:C8:C2:A5:82:8A:97:A1:6D:2A:8E:88:99
Authority key identifier: 2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
Certificate issuer: /CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Certificate serial: 019844E3803F5D8A51ABF9D7B169664C3529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
Manifest number: 066B
Signing time: Sat 26 Jul 2025 04:00:16 +0000
Manifest this update: Sat 26 Jul 2025 04:00:16 +0000
Manifest next update: Sun 27 Jul 2025 04:00:16 +0000
Files and hashes: 1: LUrgdxLkhC-A-oEAnTNbxICeZB0.crl (hash: Nd/5JrVoXsCHBlYh3JWH6aTWoeUXLDeIGKrTEtAUuVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:80:3f:5d:8a:51:ab:f9:d7:b1:69:66:4c:35:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Validity
Not Before: Jul 26 04:00:16 2025 GMT
Not After : Jul 27 04:00:16 2025 GMT
Subject: CN=8cc4140ec3532b9fc8c2a5828a97a16d2a8e8899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2b:63:bc:ba:79:86:fa:17:74:1d:c5:45:2e:
00:ab:45:e2:32:ed:64:23:cf:41:ba:e2:38:8a:6d:
11:1c:e6:b7:2b:11:2e:4f:32:03:9e:a5:3b:d8:0a:
56:13:f0:6f:40:6a:6e:f4:fa:2d:34:49:d6:92:11:
be:41:85:6b:8d:db:96:78:17:0d:04:dc:0d:dd:82:
3e:85:fd:65:9b:3d:1a:e2:cc:b7:4b:ba:01:1c:80:
1e:b6:c0:c3:ca:c3:b6:85:5f:35:a4:e5:8d:a1:9a:
43:cc:87:63:ca:3e:f4:ae:f5:8e:d3:61:6e:44:27:
e5:51:b2:91:22:00:af:50:44:20:6f:c2:5f:1a:a5:
d3:23:fa:c0:93:c9:3b:10:af:5b:32:62:5b:4e:8a:
8c:cf:d4:05:95:2d:bb:a4:ff:15:96:de:7f:0b:97:
cb:4c:6a:aa:b0:0d:9b:16:5a:be:51:27:62:f3:41:
4d:94:10:3e:f3:6f:4f:8c:2a:56:3f:75:b1:11:f8:
22:6c:32:13:62:61:13:fc:3d:6a:9b:53:31:ac:46:
45:61:cd:8b:e7:8b:87:64:3d:12:ce:52:de:3e:6f:
8d:69:d7:88:c9:5d:88:02:86:3d:2e:e3:5c:c1:f8:
5f:50:69:66:00:01:e8:b7:b0:c8:0c:cb:3e:01:63:
4a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C4:14:0E:C3:53:2B:9F:C8:C2:A5:82:8A:97:A1:6D:2A:8E:88:99
X509v3 Authority Key Identifier:
keyid:2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6d:95:ff:38:11:8c:04:6a:6a:42:ff:d0:e8:b2:a4:20:ce:
23:4e:80:f4:28:ce:5f:dd:3e:43:4b:46:9c:b6:be:f3:0c:79:
49:4d:22:e7:ab:87:ae:f5:7b:90:25:cc:3c:93:26:78:74:7e:
2c:f0:c0:0e:fd:9a:c8:81:27:7c:a9:0c:d2:54:a8:ce:cc:47:
66:5a:58:d9:42:12:aa:56:35:d8:bc:14:d9:64:bb:4e:fe:1b:
44:1c:24:8d:08:5b:cc:26:7d:6d:c9:73:e9:26:11:58:c9:87:
33:36:27:ae:3a:ca:eb:b2:4c:5a:a4:e8:4b:99:54:cd:6f:23:
3f:43:c4:27:ce:fb:9e:5d:b1:ee:f6:a6:c3:ae:ca:a8:b6:dd:
46:61:dd:40:49:b2:1b:09:dc:24:94:87:cb:97:e0:e4:4e:d8:
a9:92:a1:45:2b:fa:0b:ab:a7:e0:af:59:ba:01:8d:9b:98:c6:
5d:4c:8c:00:e5:2e:e5:68:79:d5:c8:75:a7:1a:57:99:cf:8e:
e0:e4:50:8e:ac:82:b9:16:80:fc:42:97:e9:37:57:98:93:a2:
6f:de:47:fe:1e:5b:fc:93:cd:45:d3:ef:84:bb:ed:c6:a8:f1:
61:94:d9:2d:03:4d:b9:5b:f0:33:42:a7:de:c4:17:19:ee:9d:
3a:d2:a3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:08 2025 by rpki-client