Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier: yuopAlRVE32tptuH5yIc3MzYm6XFUNdcEesfa5FkjRY=
Subject key identifier: 8E:8A:B3:92:5A:AD:40:EF:69:F7:CF:72:5D:A9:7A:3F:7F:04:D5:43
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial: 01974D448E6A5004CAEF502DB601692DB4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 02:00:27 +0000
Manifest this update: Sun 08 Jun 2025 02:00:27 +0000
Manifest next update: Mon 09 Jun 2025 02:00:27 +0000
Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: IXGSHU5RxEFoSBCR47pBI9JvhSMd64Mh4XDjFGc1ToE=)
2: YnocbPb6eCTl7D0AAtuW-w6T8XI.roa (hash: 0/3lBvSnn24lW/dA1E4Lwb6/p+92YZin4bwE+8xDWMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:8e:6a:50:04:ca:ef:50:2d:b6:01:69:2d:b4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Validity
Not Before: Jun 8 02:00:27 2025 GMT
Not After : Jun 9 02:00:27 2025 GMT
Subject: CN=8e8ab3925aad40ef69f7cf725da97a3f7f04d543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:e8:de:4c:e5:ad:cd:c9:02:db:a7:06:6f:b0:
78:61:71:6e:d5:5b:fb:20:94:21:9f:72:a4:5f:13:
e5:a0:e5:ed:53:73:d0:db:f7:0b:81:78:e4:24:73:
93:81:ec:ae:9e:94:0a:a4:38:96:d2:f4:16:0d:08:
dd:04:bd:bb:ef:fa:f3:f7:99:2b:e7:ee:d1:82:77:
74:3e:e3:cf:f7:28:5f:5e:31:1f:18:01:d7:bd:df:
c9:8b:99:ca:ef:26:de:9d:54:0c:80:91:72:c4:91:
c1:a8:b6:0d:d1:36:ed:cf:1f:22:95:47:d3:a8:f4:
6a:ab:76:41:4d:4e:ee:b8:36:47:86:1a:c3:16:81:
bf:73:2e:65:54:cb:f3:4c:73:82:9f:e4:87:98:69:
18:2b:73:ff:7c:5c:55:4f:56:96:11:55:5d:c4:c6:
98:50:74:df:99:c4:dc:6a:e4:4e:e4:0f:ee:5b:74:
a5:45:8e:42:42:37:bb:31:f0:c2:78:ac:5e:2d:f5:
2a:bc:b8:db:4a:ff:41:f1:bc:38:42:04:51:f1:7d:
e6:70:82:40:e0:d3:a6:96:bb:e8:62:2f:01:91:a5:
c6:66:38:48:5d:96:84:47:fc:82:0b:e9:84:c6:3c:
72:0c:29:35:2f:d9:ed:a3:fc:bd:8e:e1:3c:01:0f:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8A:B3:92:5A:AD:40:EF:69:F7:CF:72:5D:A9:7A:3F:7F:04:D5:43
X509v3 Authority Key Identifier:
keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:59:6e:2b:fc:fa:a4:0e:cc:c2:19:01:b1:71:58:98:ec:d5:
a7:08:67:34:f7:88:04:58:81:5a:cc:c9:a7:34:0c:97:6f:1f:
2b:7b:65:05:8f:88:61:aa:3f:49:19:67:3d:a7:d9:37:36:fa:
59:3c:15:14:a7:2b:8f:33:dd:f7:67:e0:e2:7b:c6:17:a3:a0:
9e:b0:bd:6a:88:f1:88:5f:bd:8b:0e:b4:33:b2:0d:a7:c7:39:
0d:a0:3b:33:6b:20:01:90:40:ba:96:d1:05:c6:1d:f5:58:3e:
c5:de:ca:38:d5:47:69:f3:35:10:a5:b2:35:54:ec:d7:4e:03:
5f:4f:73:57:bf:e3:d3:99:00:e8:1b:c4:ba:78:82:b3:05:81:
b4:85:e1:6c:47:48:dc:56:99:8e:ee:a4:cc:9b:62:e2:da:3e:
f5:de:d4:e0:ee:17:a9:b4:80:06:89:12:bf:64:4e:f5:36:02:
c1:46:c1:d7:ae:ce:07:6c:65:08:f4:e2:a7:df:bc:7b:30:83:
8e:68:71:e6:db:a3:7a:4d:a5:2c:89:22:15:df:f0:8c:60:61:
68:e4:53:9a:c5:51:69:4f:44:a3:f5:dd:92:45:d7:1a:12:c5:
ce:54:14:ee:1d:0a:ed:6c:19:81:98:ca:93:cf:81:23:a1:03:
33:42:d7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:28:28 2025 by rpki-client