Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: 2wzEj3LNZNHZeN1+QR2hiGYedUrI4Gu8uUeVG9dpQd0=
Subject key identifier: 2D:19:30:5E:2A:C9:24:A4:94:57:6E:02:D8:3E:18:FB:58:88:02:DD
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 019A228A7E8C7E792FC1D875BE6AE9B9A445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 22:01:32 +0000
Manifest this update: Sun 26 Oct 2025 22:01:32 +0000
Manifest next update: Mon 27 Oct 2025 22:01:32 +0000
Files and hashes: 1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: 8ZH9M6XZWS89mezmw1mDvXWxnNx5oa9CLbJQD50I+7Y=)
2: dr9TUWCMOOrZgw4ya4BHH6Fl9S4.roa (hash: MHmzUWCdf8/9JI0888l1CY7P5xnPYz06hMJxDs/OenM=)
3: g5NXYnWEAdkaK-Lr_Xc0-zmGZq0.roa (hash: iRJFMsAKyY3mWv0ViO4zwD2HGWC+kyCn/YQlP9uYKFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:7e:8c:7e:79:2f:c1:d8:75:be:6a:e9:b9:a4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Oct 26 22:01:32 2025 GMT
Not After : Oct 27 22:01:32 2025 GMT
Subject: CN=2d19305e2ac924a494576e02d83e18fb588802dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a5:5f:f4:70:08:1a:46:59:82:63:72:9e:90:
5c:df:90:8e:c9:55:4b:72:04:41:4f:4a:ae:8f:ab:
f5:f0:46:6f:e9:f6:a0:5b:05:61:38:64:c8:4e:57:
c1:07:93:4b:20:e5:00:ae:84:a5:b0:60:ae:fa:7b:
3b:d8:0a:1b:be:7a:49:6f:26:c8:cf:bc:19:c0:ad:
14:69:60:c7:7e:af:ce:66:bc:48:c2:c0:34:dc:77:
a3:02:9e:50:09:5c:3e:31:ea:d0:0f:48:fe:63:27:
04:2b:d0:8c:63:c5:65:12:cc:f6:ec:37:c7:5c:8a:
c8:f1:81:da:a3:d1:a1:57:3d:2d:65:fd:b9:86:d0:
3f:a6:5b:9f:89:c3:12:e2:f5:cc:06:03:26:b6:97:
65:a9:65:0a:b7:35:dc:25:5c:b7:60:c2:51:04:a5:
04:8e:17:c3:67:2e:fb:cc:62:9d:e0:7e:7a:3e:19:
98:f2:3f:41:a6:94:cc:25:96:97:e3:0c:33:70:7b:
14:1a:43:d3:e5:fc:3e:c6:a5:78:3b:4d:07:9a:4e:
5e:4d:05:7a:86:f8:b8:55:90:13:07:ec:04:4d:89:
ff:ca:3f:4f:e7:e3:f9:7a:98:46:e5:0f:79:b4:8d:
51:40:28:f5:a0:10:5f:4a:fb:91:f6:27:6b:4d:ef:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:19:30:5E:2A:C9:24:A4:94:57:6E:02:D8:3E:18:FB:58:88:02:DD
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:67:c9:e9:5b:06:d6:87:a3:bb:0d:b5:ff:2f:b7:bb:27:d6:
5d:0d:75:85:57:dd:f2:7f:81:90:7b:0c:85:60:10:e8:fb:12:
f7:9b:4d:37:76:08:28:59:a8:ef:10:4d:df:a5:29:bd:ec:e2:
55:4f:2b:f3:57:bc:96:9d:23:b5:d4:76:a3:e5:8f:9a:1e:74:
06:5a:20:0d:e3:9b:64:e0:e6:bc:26:0f:1d:8a:84:cb:4b:19:
18:8e:f1:af:e8:41:9a:7a:b1:bd:f1:8c:e4:16:b8:b5:5c:91:
62:a8:bc:0d:af:86:0f:bb:a4:9d:23:b7:61:f9:bb:a2:da:aa:
cf:c7:6e:70:d9:7e:e9:b5:e8:fb:da:da:7c:2c:cc:7a:75:76:
43:f6:b7:32:c6:ca:cc:18:c7:b5:1a:2b:45:81:a5:38:73:8e:
19:77:75:2b:3a:c0:c2:94:05:f5:8e:fe:fc:b9:41:ff:31:e2:
71:64:00:48:5d:60:2f:47:4d:d4:f8:6b:1a:08:12:9d:e7:97:
61:16:30:4c:71:db:a8:86:ed:f3:9d:36:68:0b:2d:e4:69:31:
58:c4:e0:c0:07:ca:af:e8:c0:9f:a2:14:cf:e5:29:df:09:42:
63:3a:bc:f5:4f:2a:86:ac:17:17:ce:71:d8:05:05:67:7f:04:
cf:d7:52:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiin6Mfnkvwdh1vmrpuaRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTk2MjA4OTI1ZDgzNmY4ZDAzN2QxNzk5ODBhODNhMWIw
YzEzNDIwHhcNMjUxMDI2MjIwMTMyWhcNMjUxMDI3MjIwMTMyWjAzMTEwLwYDVQQD
EygyZDE5MzA1ZTJhYzkyNGE0OTQ1NzZlMDJkODNlMThmYjU4ODgwMmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qVf9HAIGkZZgmNynpBc35COyVVL
cgRBT0quj6v18EZv6fagWwVhOGTITlfBB5NLIOUAroSlsGCu+ns72AobvnpJbybI
z7wZwK0UaWDHfq/OZrxIwsA03HejAp5QCVw+MerQD0j+YycEK9CMY8VlEsz27DfH
XIrI8YHao9GhVz0tZf25htA/pluficMS4vXMBgMmtpdlqWUKtzXcJVy3YMJRBKUE
jhfDZy77zGKd4H56PhmY8j9BppTMJZaX4wwzcHsUGkPT5fw+xqV4O00Hmk5eTQV6
hvi4VZATB+wETYn/yj9P5+P5ephG5Q95tI1RQCj1oBBfSvuR9idrTe9W1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0ZMF4qySSklFduAtg+GPtYiALdMB8GA1UdIwQY
MBaAFC7pYgiSXYNvjQN9F5mAqDobDBNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEt
ODQ2YWFmMGViMWFkLzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEtODQ2YWFmMGViMWFk
LzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtmfJ6VsG
1oejuw21/y+3uyfWXQ11hVfd8n+BkHsMhWAQ6PsS95tNN3YIKFmo7xBN36Upvezi
VU8r81e8lp0jtdR2o+WPmh50BlogDeObZODmvCYPHYqEy0sZGI7xr+hBmnqxvfGM
5Ba4tVyRYqi8Da+GD7uknSO3Yfm7otqqz8ducNl+6bXo+9rafCzMenV2Q/a3MsbK
zBjHtRorRYGlOHOOGXd1KzrAwpQF9Y7+/LlB/zHicWQASF1gL0dN1PhrGggSneeX
YRYwTHHbqIbt8502aAst5GkxWMTgwAfKr+jAn6IUz+Up3wlCYzq89U8qhqwXF85x
2AUFZ38Ez9dSXg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:16 2025 by rpki-client