Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: c89UneBQj/FTuEQ9TzJltOdcPxcHRB6HTTma2/UTqeE=
Subject key identifier: 3E:64:7B:D2:C3:7B:96:0B:3E:D3:99:B6:F3:8F:A4:05:B5:96:A8:B8
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 01963FF9E541A4EAB0AD7B1FA60A510FDBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 19:01:03 +0000
Manifest this update: Wed 16 Apr 2025 19:01:03 +0000
Manifest next update: Thu 17 Apr 2025 19:01:03 +0000
Files and hashes: 1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: USBkPgOXFAtIkXMCTgK/dERdw5JPftjKoOS6WqSUZMY=)
2: dr9TUWCMOOrZgw4ya4BHH6Fl9S4.roa (hash: MHmzUWCdf8/9JI0888l1CY7P5xnPYz06hMJxDs/OenM=)
3: g5NXYnWEAdkaK-Lr_Xc0-zmGZq0.roa (hash: iRJFMsAKyY3mWv0ViO4zwD2HGWC+kyCn/YQlP9uYKFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:e5:41:a4:ea:b0:ad:7b:1f:a6:0a:51:0f:db:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Apr 16 19:01:03 2025 GMT
Not After : Apr 17 19:01:03 2025 GMT
Subject: CN=3e647bd2c37b960b3ed399b6f38fa405b596a8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:aa:3a:07:5f:b4:46:3c:7c:ac:8e:d9:80:
66:51:85:54:ab:f8:68:08:53:96:e9:9b:7a:67:a8:
10:e4:78:60:37:e2:46:9d:dd:84:f2:d1:da:5e:34:
b2:79:76:43:d0:f5:43:ad:64:63:dc:46:f4:de:ca:
65:26:28:f4:7f:17:3f:64:46:5a:08:39:1f:d8:25:
9e:14:e6:0c:49:06:0d:1f:15:5c:12:6e:20:7b:0f:
79:d0:e1:e4:8d:d9:ad:fd:4f:37:41:c0:56:c3:9e:
dd:fd:74:73:f3:08:b2:b7:89:ab:7c:69:34:42:7d:
97:ec:05:ff:9d:c9:d8:45:90:af:f3:59:8f:1f:02:
0a:f5:6e:22:46:31:2c:38:dd:7a:26:3a:4c:0f:f7:
c7:2f:67:dc:76:17:ad:cd:92:03:a0:e4:30:b1:e5:
2a:12:95:e9:e6:28:c4:8e:da:6a:f6:8d:c8:d7:2d:
90:51:97:fa:0e:38:36:88:22:5b:3f:a2:2a:93:ec:
e5:20:4b:f9:0b:e6:b7:aa:99:6d:2a:e8:6e:8b:70:
eb:9e:c2:f6:55:d3:c5:e1:db:8e:14:17:30:e5:d2:
d2:72:fc:9a:51:ac:94:8b:da:88:b0:3a:71:1c:7a:
ea:29:1d:b9:5a:df:09:46:3f:67:a2:a9:1c:23:73:
07:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:64:7B:D2:C3:7B:96:0B:3E:D3:99:B6:F3:8F:A4:05:B5:96:A8:B8
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ae:6e:28:e3:06:05:6f:6b:ae:4d:58:e9:0b:97:0e:d9:6c:
51:b3:52:ce:b0:fc:88:62:25:7f:2f:e5:6f:57:ef:01:31:5c:
73:03:92:65:da:ab:f2:53:23:b6:85:15:b4:58:c8:da:29:95:
73:78:3e:e5:1d:51:95:ac:c2:1e:9a:33:e3:cb:ae:01:ea:1f:
c9:65:61:04:28:86:cd:e7:3f:e5:10:08:c0:9e:c7:c7:1c:ad:
01:13:05:41:20:ad:e6:db:f6:1c:93:1d:54:36:1d:21:91:4f:
62:e1:df:56:2a:40:67:60:db:41:94:34:4b:51:06:ac:d8:fe:
07:a7:d1:64:d6:d3:44:a0:d3:d3:54:2f:95:48:cf:d2:0b:f0:
fc:9d:15:70:43:e1:7a:26:0e:b7:3b:07:12:bf:3e:61:2c:64:
05:30:91:d5:53:4a:46:f1:41:3f:8a:e9:91:3d:af:dc:44:b3:
94:00:d8:55:e3:16:6f:25:52:47:91:dd:aa:0a:47:ee:b8:b9:
71:f4:43:db:bf:f6:10:77:d2:0d:0d:56:b1:19:f7:fd:ec:f1:
bf:f5:f4:82:90:64:9f:78:97:d4:a5:b4:1d:b8:1b:15:08:db:
65:dc:76:5f:45:04:dd:83:41:56:46:e3:67:d7:a1:ed:5f:d1:
ff:9f:82:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:19:43 2025 by rpki-client