Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
File: LUFhUhEtrymCRCUnsPlE5IKFgy4.mft (raw, json)
Hash identifier: Iz5QKsfx1jVy7xE6az3G63/36KKqz8/TKvnqp3nhPKs=
Subject key identifier: ED:01:74:0B:1B:50:AA:F8:D8:6B:8D:80:30:71:86:B8:A7:6D:55:E7
Authority key identifier: 2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
Certificate issuer: /CN=2d416152112daf2982442527b0f944e48285832e
Certificate serial: 019A7112A79D236E2CA4B1BA9636689ABCC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
Manifest number: 06A2
Signing time: Tue 11 Nov 2025 04:00:39 +0000
Manifest this update: Tue 11 Nov 2025 04:00:39 +0000
Manifest next update: Wed 12 Nov 2025 04:00:39 +0000
Files and hashes: 1: LUFhUhEtrymCRCUnsPlE5IKFgy4.crl (hash: zOpwUN6BGJ2lYbm6+bcGDq6IjYDUDJh2bjz4Ymgwrj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a7:9d:23:6e:2c:a4:b1:ba:96:36:68:9a:bc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d416152112daf2982442527b0f944e48285832e
Validity
Not Before: Nov 11 04:00:39 2025 GMT
Not After : Nov 12 04:00:39 2025 GMT
Subject: CN=ed01740b1b50aaf8d86b8d80307186b8a76d55e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:97:84:a1:73:c6:98:b2:ac:04:d1:33:92:
25:0c:ef:0f:0e:47:e1:64:09:55:85:39:97:da:f5:
fa:2d:fe:a5:ed:7a:89:f7:40:95:3c:8c:f6:91:7d:
c8:9a:59:04:4c:ab:22:8e:d7:7c:f1:7a:a6:9e:eb:
54:cc:84:72:d1:c4:3f:04:47:5d:60:9d:45:72:ba:
f9:6a:b1:66:53:1f:56:35:a5:3c:93:57:50:11:92:
e3:51:9f:22:a0:4b:0a:fa:ec:04:4c:7f:5e:9c:10:
20:21:ad:93:d0:c7:0d:4c:0a:7a:80:e5:9a:9c:d8:
48:a0:0b:4b:f4:2a:dc:78:29:d1:31:37:6f:98:7f:
12:3d:2d:23:38:de:23:66:64:91:b6:aa:58:0c:91:
db:77:00:ec:2f:5b:7f:6c:2d:d6:53:af:d0:ac:a7:
ad:78:09:3a:dd:09:02:9b:35:fd:39:0a:6e:50:93:
7e:ec:76:e6:28:ac:94:fd:80:bb:e0:a3:58:42:03:
a0:49:47:5d:e0:10:29:a6:e4:b9:e4:40:2c:0e:13:
1b:53:3f:30:a8:42:18:20:9b:2c:e6:b7:8f:e5:21:
2d:3a:25:3c:17:f2:4b:66:3e:dd:8f:99:fc:59:95:
a3:8e:a7:11:cb:c0:15:4b:4a:f3:e8:b7:49:3f:4d:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:01:74:0B:1B:50:AA:F8:D8:6B:8D:80:30:71:86:B8:A7:6D:55:E7
X509v3 Authority Key Identifier:
keyid:2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:46:07:2c:92:e5:f9:3d:c6:c4:16:a6:aa:c9:d8:23:3a:20:
01:35:76:ba:10:c4:71:41:f8:68:56:66:54:8b:a2:b9:9c:f9:
24:41:23:96:ab:36:6a:f4:95:83:05:ad:05:e6:0f:57:58:cd:
a7:d0:86:ca:b2:e3:cf:dd:90:90:5b:0b:39:76:1c:c2:97:a8:
cb:95:8b:54:cf:28:b5:41:ba:11:0a:7f:4f:17:71:b1:56:f9:
64:5b:ff:cd:33:e8:bf:b1:4b:9b:04:8e:34:83:45:80:d9:26:
7c:3e:97:f4:35:ec:2c:5f:d3:2c:9e:80:a8:61:47:a0:a4:62:
ba:e4:d6:56:a4:96:db:1a:71:94:6c:68:80:20:9b:c5:51:f2:
94:bd:8d:c7:2b:b3:e7:e0:05:ce:75:4e:81:88:ad:66:0e:a0:
d9:2e:90:c4:72:61:49:c7:b0:73:bb:5a:81:0a:a0:4b:5e:59:
81:20:24:ad:54:a2:a5:8d:73:15:97:30:74:5e:9e:42:33:5c:
c1:19:e9:eb:1f:7c:f5:7e:74:ce:ff:b5:93:7e:72:37:32:63:
f3:32:9c:a6:fd:df:05:5a:41:16:8e:83:4d:ca:35:8b:12:16:
fe:91:b3:72:5d:61:4b:9a:39:4b:80:99:29:5b:fe:18:87:cf:
f8:93:8a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:54 2025 by rpki-client