Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: yCvRl4yL2ATm97j41u+E6GkOhvSvoCcQwG+TkxzrbRw=
Subject key identifier: 86:AF:88:2F:9D:AF:ED:B9:E4:36:DC:84:97:8A:D9:E3:D3:21:F8:BD
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 01993124BAF392A20A0BE388121B02CE90E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 01:01:54 +0000
Manifest this update: Wed 10 Sep 2025 01:01:54 +0000
Manifest next update: Thu 11 Sep 2025 01:01:54 +0000
Files and hashes: 1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: XW8XcNRSywUGBmYzIZPs5rAoEbATlmfpSXckeouLxiU=)
2: dr9TUWCMOOrZgw4ya4BHH6Fl9S4.roa (hash: MHmzUWCdf8/9JI0888l1CY7P5xnPYz06hMJxDs/OenM=)
3: g5NXYnWEAdkaK-Lr_Xc0-zmGZq0.roa (hash: iRJFMsAKyY3mWv0ViO4zwD2HGWC+kyCn/YQlP9uYKFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:ba:f3:92:a2:0a:0b:e3:88:12:1b:02:ce:90:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Sep 10 01:01:54 2025 GMT
Not After : Sep 11 01:01:54 2025 GMT
Subject: CN=86af882f9dafedb9e436dc84978ad9e3d321f8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:03:a4:68:6f:ad:f7:96:fa:57:1a:9f:33:6c:
53:f8:92:3a:69:e2:d9:37:ed:ec:7a:ba:40:15:bf:
90:ab:81:fb:59:ce:38:b6:74:48:a7:98:83:bb:35:
ea:53:c7:66:e5:58:c6:c3:a1:96:7e:54:69:84:46:
94:5b:67:f1:87:0e:f1:8a:7c:fa:60:ca:b8:93:04:
a8:d8:39:c3:a2:da:55:3a:20:9a:3e:28:46:d7:9d:
78:6c:5c:43:0e:70:fe:0d:6a:e1:21:b6:ab:5b:7f:
7d:5b:b2:6e:0a:63:1a:cc:33:34:55:cc:0d:93:fb:
31:e0:10:d6:84:c6:00:0b:95:b0:5d:c7:4f:c4:83:
e5:4b:0b:02:b7:51:63:df:81:50:56:63:4d:28:67:
b0:d0:a6:33:72:47:1d:24:f6:96:07:94:80:5c:09:
d8:2a:01:21:16:80:d5:3b:50:f9:da:3a:72:f0:38:
08:fa:b2:7f:32:2a:4e:fc:da:5a:a5:fc:64:5a:af:
82:bb:70:0d:f1:3b:c4:b4:a7:51:c1:21:82:b5:17:
6c:10:e2:b8:f9:53:79:53:13:54:75:ac:33:9b:51:
9d:95:ce:c0:c2:33:5a:17:b3:31:f1:f8:ea:a6:7a:
74:84:b8:6c:1a:1f:aa:90:7c:41:92:e7:df:64:eb:
ff:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AF:88:2F:9D:AF:ED:B9:E4:36:DC:84:97:8A:D9:E3:D3:21:F8:BD
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2b:9c:4b:19:d9:a8:4a:b9:39:c2:7c:2d:20:d1:8a:31:d0:
cc:e7:c7:e0:83:eb:50:ee:8d:00:fc:0b:2a:c9:4c:fa:3e:92:
33:90:ed:48:eb:32:10:c6:f5:d3:ae:18:13:4d:3d:8d:74:36:
7e:3c:c2:37:c6:40:58:5a:31:f1:72:75:85:42:9e:3a:22:9b:
d8:e4:70:dd:b3:98:6b:a6:9c:72:b7:99:af:e7:61:2d:77:33:
44:d6:1a:89:aa:bc:13:20:e7:8e:c4:fe:c0:ea:5c:c0:1e:cd:
bb:1a:53:dc:39:c8:26:5f:ac:ee:e5:4e:4c:f0:b4:b2:ae:11:
75:08:3b:7a:dd:7b:dc:41:4b:b2:7a:92:20:f5:5c:20:b8:e9:
7e:cc:b8:d4:e2:fd:1e:82:cb:9a:4a:9f:ce:20:bb:95:88:a7:
21:3d:5f:f3:49:a8:37:21:40:8e:e8:83:bc:59:f3:e9:16:dc:
de:89:6a:be:b2:fe:e2:b4:67:d7:51:7a:98:aa:9c:7d:92:be:
d5:4e:d9:7f:c4:e5:3e:19:ab:75:6c:ca:d2:f4:d2:07:08:bb:
28:0c:fc:e4:0d:98:96:dd:46:06:77:1a:bc:ed:84:0f:be:f9:
57:5c:39:bf:3d:a7:6e:82:ab:57:eb:89:c6:d9:6b:e9:34:f1:
9e:ca:5f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:35:28 2025 by rpki-client