Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier: WHDaR6wAAm6iQhu6Pg4J4VJ8UeUDibmp6C7anYt7JNs=
Subject key identifier: F4:37:E3:74:F9:D4:A1:12:D1:23:45:CB:33:06:76:56:D0:9A:87:82
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial: 019758DAE6724637495DF5CE50C27E60BC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number: 1582
Signing time: Tue 10 Jun 2025 08:00:30 +0000
Manifest this update: Tue 10 Jun 2025 08:00:30 +0000
Manifest next update: Wed 11 Jun 2025 08:00:30 +0000
Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: Sxusl9yM2buUKP3NbNSTC41RP4H6qRed4etHumNre8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:da:e6:72:46:37:49:5d:f5:ce:50:c2:7e:60:bc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Validity
Not Before: Jun 10 08:00:30 2025 GMT
Not After : Jun 11 08:00:30 2025 GMT
Subject: CN=f437e374f9d4a112d12345cb33067656d09a8782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:dc:41:32:9c:85:f7:d7:a6:e8:79:df:bd:
f1:7a:ba:4f:42:94:c8:44:db:3f:00:72:a2:76:0f:
c1:f9:5a:4d:f4:32:ef:e8:a3:20:79:16:cc:61:34:
85:2f:4e:73:04:b6:76:78:5f:cb:7f:c5:ff:78:10:
cb:96:17:84:e0:cf:f2:dc:08:57:8e:ce:37:de:81:
2b:48:5a:3b:6b:91:d6:b1:ce:3d:f9:2b:8e:65:27:
47:5d:80:a8:84:07:a6:c2:4b:60:a2:8a:ea:75:a9:
d0:73:be:5b:a5:f1:7f:1d:ba:db:26:68:22:d5:0b:
ee:b9:dc:6e:be:c2:b7:45:c5:06:c5:43:5c:59:ca:
04:3d:e0:7b:78:cd:9e:b7:52:3b:92:77:f2:41:31:
5b:62:dc:14:e3:50:75:e8:12:60:a2:8e:ae:ee:8e:
d6:bb:a2:11:11:b0:c0:5f:df:1b:e1:89:f7:3f:2a:
0e:05:a2:7f:8f:ec:6d:a9:80:1e:32:f3:74:85:56:
50:b6:ec:24:dd:17:45:e5:ec:6a:47:d1:19:22:36:
8b:d3:af:26:0f:08:fc:2f:7a:1c:8f:ad:3a:a7:15:
68:23:f9:4d:74:15:d1:e7:2f:99:e9:d7:ee:c4:64:
92:a7:66:89:88:f5:59:17:26:fc:cb:3c:1c:8a:e1:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:37:E3:74:F9:D4:A1:12:D1:23:45:CB:33:06:76:56:D0:9A:87:82
X509v3 Authority Key Identifier:
keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:16:ea:48:ca:cd:7e:3b:4e:5c:d3:15:49:19:44:04:ab:c5:
ca:f1:e3:1e:0f:ff:e9:48:e6:9a:35:f1:32:66:3d:de:48:dc:
db:6c:47:82:bb:5e:af:90:4b:2f:69:b9:39:c2:c9:3e:7e:8f:
25:00:55:89:3e:f3:83:da:a2:17:36:e3:d6:02:18:ed:ae:3f:
71:9b:95:8a:d7:bd:2a:ce:9e:d0:10:9b:2f:5b:ae:e4:63:fa:
56:75:83:46:20:05:af:ce:df:37:46:7e:eb:5c:62:68:3b:d3:
36:fd:04:32:b3:b7:e1:c6:e5:1f:ae:2d:62:f1:ac:dc:c1:f9:
91:66:47:7f:5f:04:b9:84:15:7a:cd:6c:30:3a:02:43:5f:f2:
1d:9a:8a:26:4d:5e:ec:16:43:d1:0f:46:5c:e6:2e:c3:dc:21:
90:22:6d:d1:3e:9e:3f:82:ce:d1:8d:7d:dd:ce:5c:cc:d6:79:
f3:fd:99:40:9e:46:a7:06:9e:93:5d:7e:78:78:48:31:c8:1d:
e7:65:39:75:ff:c0:3c:f7:65:3b:bb:23:d4:9b:d5:3b:02:e4:
3f:cb:56:52:90:4a:7b:85:3b:f6:d5:5f:4a:6c:f0:07:4c:1c:
e7:46:9c:75:6e:b1:33:b4:92:54:ba:46:34:c3:9b:11:a0:2a:
53:f2:2e:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdY2uZyRjdJXfXOUMJ+YLyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTUyNTE2M2RjMDFkY2QzMDg5YmIxZGNmYjA5MTJlNzdl
ZGFmOTgwHhcNMjUwNjEwMDgwMDMwWhcNMjUwNjExMDgwMDMwWjAzMTEwLwYDVQQD
EyhmNDM3ZTM3NGY5ZDRhMTEyZDEyMzQ1Y2IzMzA2NzY1NmQwOWE4NzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp3cQTKchffXpuh5373xerpPQpTI
RNs/AHKidg/B+VpN9DLv6KMgeRbMYTSFL05zBLZ2eF/Lf8X/eBDLlheE4M/y3AhX
js433oErSFo7a5HWsc49+SuOZSdHXYCohAemwktgoorqdanQc75bpfF/HbrbJmgi
1QvuudxuvsK3RcUGxUNcWcoEPeB7eM2et1I7knfyQTFbYtwU41B16BJgoo6u7o7W
u6IREbDAX98b4Yn3PyoOBaJ/j+xtqYAeMvN0hVZQtuwk3RdF5exqR9EZIjaL068m
Dwj8L3ocj606pxVoI/lNdBXR5y+Z6dfuxGSSp2aJiPVZFyb8yzwciuGhgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ343T51KES0SNFyzMGdlbQmoeCMB8GA1UdIwQY
MBaAFC7lJRY9wB3NMIm7Hc+wkS537a+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzkt
Y2M2OGRjODU0ZTg4LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzktY2M2OGRjODU0ZTg4
LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxbqSMrN
fjtOXNMVSRlEBKvFyvHjHg//6UjmmjXxMmY93kjc22xHgrter5BLL2m5OcLJPn6P
JQBViT7zg9qiFzbj1gIY7a4/cZuVite9Ks6e0BCbL1uu5GP6VnWDRiAFr87fN0Z+
61xiaDvTNv0EMrO34cblH64tYvGs3MH5kWZHf18EuYQVes1sMDoCQ1/yHZqKJk1e
7BZD0Q9GXOYuw9whkCJt0T6eP4LO0Y193c5czNZ58/2ZQJ5Gpwaek11+eHhIMcgd
52U5df/APPdlO7sj1JvVOwLkP8tWUpBKe4U79tVfSmzwB0wc50acdW6xM7SSVLpG
NMObEaAqU/Iu1A==
-----END CERTIFICATE-----
Generated at Tue Jun 10 11:40:13 2025 by rpki-client