Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
File: LUFhUhEtrymCRCUnsPlE5IKFgy4.mft (raw, json)
Hash identifier: 6mfjskvD0Hq/361/4sXFunaq84Cq/A+G2uD2geSi3zk=
Subject key identifier: 5C:67:E3:72:2A:4A:23:93:61:47:A4:00:7A:CB:15:45:20:60:4E:14
Authority key identifier: 2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
Certificate issuer: /CN=2d416152112daf2982442527b0f944e48285832e
Certificate serial: 019749D581ABAEC2E11525679F9E632A44A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
Manifest number: 0500
Signing time: Sat 07 Jun 2025 10:00:18 +0000
Manifest this update: Sat 07 Jun 2025 10:00:18 +0000
Manifest next update: Sun 08 Jun 2025 10:00:18 +0000
Files and hashes: 1: LUFhUhEtrymCRCUnsPlE5IKFgy4.crl (hash: 80Rh/vYJdiAvY2Ovp9uYUi5Ap6c2Fyj5T4cSe4eMuFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:81:ab:ae:c2:e1:15:25:67:9f:9e:63:2a:44:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d416152112daf2982442527b0f944e48285832e
Validity
Not Before: Jun 7 10:00:18 2025 GMT
Not After : Jun 8 10:00:18 2025 GMT
Subject: CN=5c67e3722a4a23936147a4007acb154520604e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c1:c8:96:01:9c:88:ef:18:9d:31:0e:d5:6b:
b0:6a:0d:fb:a1:c8:1e:89:71:a6:e2:6d:20:92:8f:
cd:03:c1:91:02:7a:42:94:33:e3:b1:84:19:7f:87:
1f:57:17:16:c7:f8:f2:82:2c:1a:79:6f:d9:12:64:
bc:57:08:e1:9c:29:29:de:0e:15:e6:9a:24:db:9f:
d8:4d:07:99:93:b9:9a:cd:81:7a:5c:d9:50:a9:e4:
c1:a6:46:c2:b1:f9:c8:ef:7e:06:1b:a3:c5:6c:fa:
c2:56:07:7f:51:d9:96:bd:00:35:20:e5:cd:f7:4f:
35:a1:eb:d1:eb:59:a7:3c:e0:c9:33:15:3b:6f:8c:
19:c8:83:d2:2a:3f:07:02:8e:2f:40:bf:9c:70:29:
68:e7:3d:33:db:69:1f:ba:7c:40:a8:f5:d8:a0:36:
e4:06:1c:65:f3:11:7a:4d:45:52:e2:93:32:8e:ed:
60:c2:aa:46:c1:ea:12:4c:85:ed:5b:08:74:ef:29:
ea:c8:fb:de:b2:d5:76:74:4d:23:0f:46:0f:ca:d2:
d9:a8:f6:2a:3a:7b:d7:20:3f:68:c9:81:91:a1:6d:
20:58:52:fb:0b:6f:bb:1f:8b:c1:68:e0:ea:e2:78:
b4:d2:01:8d:9c:2b:22:74:70:4e:8f:6e:59:51:49:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:67:E3:72:2A:4A:23:93:61:47:A4:00:7A:CB:15:45:20:60:4E:14
X509v3 Authority Key Identifier:
keyid:2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e9:0c:62:98:1a:a4:d2:ec:c8:43:d1:92:be:12:92:a9:3a:
89:14:03:8a:7c:ce:c6:fc:5b:fe:1e:bd:ed:2e:d8:4d:77:28:
6a:07:0d:79:8e:fe:8c:80:db:0d:88:92:bf:65:07:c1:a1:04:
79:7f:8c:93:ff:06:fb:b7:b9:d3:8b:d2:2f:48:2e:fd:c2:13:
86:03:2f:24:e2:14:6b:88:1b:2d:86:40:63:6f:05:a4:85:de:
73:55:84:7c:87:8e:5d:29:b0:7e:70:37:8d:af:8b:5b:c5:c6:
11:e0:de:c5:fa:70:75:6b:b3:39:91:ba:c1:ba:36:7b:e7:78:
91:db:5b:76:2a:fb:d1:5b:c8:24:41:f8:9e:4a:1e:8c:8e:ef:
ff:5e:3f:8c:49:0a:cb:c9:61:c5:15:3b:57:b1:83:8b:b3:55:
2d:e4:08:13:36:b7:7a:2e:43:9f:39:1a:88:0b:72:d0:f2:89:
1d:07:5b:d5:89:3a:16:fd:82:e6:e8:4d:0b:5e:42:8b:2e:2e:
f7:68:d7:6a:6c:fb:48:dd:ab:99:13:3a:ac:79:88:41:09:4f:
c8:72:ee:bc:bf:8b:b1:41:43:9d:27:cc:f2:f3:3b:48:16:e3:
3a:fb:2d:c2:c1:fb:20:ec:2c:37:ab:c0:6d:ab:2f:a9:16:4f:
6e:d6:20:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:34:56 2025 by rpki-client