Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier: V3mALIlUWrCM6fTFJ3jz6uziPmbUfqMcIa/amiED9TI=
Subject key identifier: 42:43:3B:3C:6F:26:F8:80:3E:FF:0F:A9:7A:12:E0:76:5D:72:17:E0
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial: 019A729333BCA553B7F702543F4B6224BCDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 11:00:40 +0000
Manifest this update: Tue 11 Nov 2025 11:00:40 +0000
Manifest next update: Wed 12 Nov 2025 11:00:40 +0000
Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: yVQ4X/ZYN9Qy08zO7U0k0eD3tEpB9eRJtFGPaVETh/I=)
2: YnocbPb6eCTl7D0AAtuW-w6T8XI.roa (hash: 0/3lBvSnn24lW/dA1E4Lwb6/p+92YZin4bwE+8xDWMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:33:bc:a5:53:b7:f7:02:54:3f:4b:62:24:bc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Validity
Not Before: Nov 11 11:00:40 2025 GMT
Not After : Nov 12 11:00:40 2025 GMT
Subject: CN=42433b3c6f26f8803eff0fa97a12e0765d7217e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d1:71:ae:de:2f:f6:18:23:bd:b9:98:96:16:
4e:5e:bc:0e:d4:69:be:74:01:96:90:02:46:ec:01:
8a:18:4a:8f:85:f1:83:f2:3a:82:e8:6a:7c:38:16:
9a:61:cb:c9:8a:83:24:b4:6b:c1:d9:5d:77:7c:0c:
05:6d:f7:be:50:28:0a:54:41:e9:19:4d:fe:2a:6e:
09:08:46:31:c2:b7:ea:9b:f9:7d:99:f6:a2:46:57:
42:b4:52:db:e8:f0:5b:11:5f:ec:af:f2:40:9c:1b:
10:69:49:73:68:39:7c:c6:c8:d5:ff:65:bb:7c:a8:
28:3f:f6:ba:b1:c9:c3:dd:3b:a7:23:51:07:f9:2d:
2f:ff:fb:6b:86:21:f1:b5:5c:de:33:11:df:c4:b7:
eb:ef:32:50:69:c9:1d:dc:13:1c:06:d3:fa:0a:fc:
24:6e:1d:06:40:97:84:e0:0d:06:6c:f9:27:fd:ca:
8f:50:6f:7e:12:89:9f:d1:b2:46:0a:5c:b4:1c:7b:
c5:ba:25:d5:be:64:b0:62:33:ca:a4:d1:c7:0f:62:
e7:a8:53:fb:2e:e6:86:61:64:dd:f6:b8:e5:d8:31:
25:47:0a:ee:52:59:92:85:85:5e:dc:e6:d4:70:fe:
eb:2e:fc:7a:1e:2e:d0:21:0a:94:0f:1c:92:92:ba:
24:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:43:3B:3C:6F:26:F8:80:3E:FF:0F:A9:7A:12:E0:76:5D:72:17:E0
X509v3 Authority Key Identifier:
keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a2:af:45:67:a3:ca:89:08:fa:68:32:6f:c1:68:22:37:9c:
12:99:38:72:70:07:cf:5c:96:03:31:ed:c2:82:0b:f4:6b:f3:
49:42:05:9c:a1:98:35:a1:c9:18:d8:1b:cb:82:b2:7b:c6:cf:
9f:4f:71:62:5e:fe:f3:48:1f:89:c6:51:8b:a5:c9:76:36:9a:
8d:72:1a:3e:ff:0f:78:91:16:21:87:8a:ef:d7:86:5b:51:29:
9e:8d:80:f0:1c:24:1c:59:52:87:bb:7f:01:29:72:00:1e:59:
1f:4f:6b:0e:a3:34:f1:79:e1:61:68:e5:e0:08:c1:41:d7:d8:
d8:66:98:b6:e1:9c:a3:0f:83:20:8c:c1:82:46:bc:73:20:35:
eb:44:d0:1a:7d:de:b2:bf:f8:a6:fb:fa:39:27:7a:cc:9c:a0:
72:11:42:f0:8e:0a:cf:fe:ad:9b:f1:55:33:ca:44:a1:ce:04:
1a:19:c0:c8:b0:a8:12:d7:30:e0:bb:c2:4f:e3:f8:e1:00:80:
be:eb:04:30:ce:84:0c:73:42:88:39:92:df:68:0f:0f:de:90:
9c:4e:05:fa:c2:72:c4:95:74:bb:16:fe:5c:3b:30:ba:e7:d2:
18:9a:37:92:d7:59:c8:e1:3c:15:29:9b:df:dd:68:ee:4c:46:
13:c8:c2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:06 2025 by rpki-client