Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier: nwuePvs1KaFGNlMGzYFG+OSdxg6/WJu0YN8BhThUlBo=
Subject key identifier: F3:2F:54:0D:AC:B9:5A:D2:0A:53:9B:8A:FD:89:35:27:FC:D3:EE:F8
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial: 01975CB7EE4B309EB9FFADA199E205A55590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number: 1584
Signing time: Wed 11 Jun 2025 02:00:47 +0000
Manifest this update: Wed 11 Jun 2025 02:00:47 +0000
Manifest next update: Thu 12 Jun 2025 02:00:47 +0000
Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: jUE95Gk7NcgXnyuZF0xz35ocnZYneyqUDIRVXyXqolE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b7:ee:4b:30:9e:b9:ff:ad:a1:99:e2:05:a5:55:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Validity
Not Before: Jun 11 02:00:47 2025 GMT
Not After : Jun 12 02:00:47 2025 GMT
Subject: CN=f32f540dacb95ad20a539b8afd893527fcd3eef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:72:da:7a:91:a7:d2:88:14:be:04:07:1c:38:
a9:7b:e4:62:ea:c0:eb:1e:d0:53:6c:42:8e:02:5e:
69:50:4f:81:0b:b5:d4:c9:89:28:24:a2:7c:f7:18:
98:78:3e:17:e8:e1:51:0f:e6:65:24:09:33:71:2d:
3b:23:65:ef:4a:d0:bf:54:d5:e0:0e:74:95:a0:42:
d8:ca:a9:76:84:32:c6:f5:0b:3d:58:8f:2d:fe:6c:
d6:e9:f2:58:e9:38:70:a3:ad:46:c1:fc:df:ad:b7:
0c:05:c8:3c:a9:a9:2b:bb:45:39:5a:0e:40:65:09:
82:0f:3b:09:13:f0:f8:ff:c0:89:0d:ab:b4:38:95:
1e:26:79:05:91:90:0e:43:6f:3b:ca:f9:84:01:24:
42:c6:e0:96:02:31:e7:2a:0b:c8:f5:f0:43:45:b4:
31:31:9a:be:fd:92:7d:cc:d0:52:0d:68:11:f5:be:
d0:31:93:25:06:b2:9d:9b:cb:e6:c6:8e:ba:29:9e:
91:5a:68:3a:5a:7d:a8:09:54:5b:40:d1:6e:8c:71:
c7:f2:26:81:e7:0d:c2:f0:74:08:16:bb:ad:13:5e:
1a:28:64:84:b0:f9:44:db:f8:6b:8b:f4:df:b9:72:
45:8d:9f:fb:f0:88:e1:a9:02:b4:b1:27:49:b6:b6:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2F:54:0D:AC:B9:5A:D2:0A:53:9B:8A:FD:89:35:27:FC:D3:EE:F8
X509v3 Authority Key Identifier:
keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9b:cd:de:6d:bc:19:eb:e4:91:2e:e7:c5:b9:69:36:b7:a6:
ef:bc:b6:4d:d0:5a:0b:2b:86:f3:01:91:12:b5:d4:50:af:38:
34:7f:3f:55:13:81:ba:84:b9:52:fa:5f:3e:f7:b1:8f:71:7c:
6c:7d:7a:83:0d:fa:98:d5:3a:7f:ba:22:25:20:28:b7:2d:35:
c5:8a:d2:a6:64:1f:08:54:ac:c2:7e:9b:ed:c8:b1:24:8b:94:
99:2b:5a:9d:5a:68:bb:40:a7:0d:a5:3e:20:bb:21:2b:20:9e:
8a:73:1d:8c:ad:18:f2:46:13:13:4a:b2:e4:f4:33:35:ce:d1:
4f:cd:b7:b5:6a:ed:6b:7a:66:cc:8b:c6:a4:8d:a4:22:55:a0:
31:5d:c0:08:b2:a2:cf:93:9e:ae:9f:f3:81:ba:b4:6d:44:9a:
3e:98:58:bf:46:27:78:d9:72:c7:54:2b:31:7e:2d:67:af:40:
07:c5:14:19:35:94:cf:34:bd:4d:3f:eb:44:05:f7:59:8b:5e:
6e:23:00:e2:75:de:9b:6a:64:0a:0e:81:47:63:f7:de:8b:60:
fb:3f:90:62:80:97:43:90:13:31:05:79:7d:fd:99:3e:14:06:
f1:2f:a6:55:98:1e:b0:0b:bf:60:fc:5c:fb:79:ea:61:cd:55:
48:81:d1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:01:20 2025 by rpki-client