Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier: oo/Cjd2IlJPDvxk4BMWlUhqLJzO28mYvWqqo6ydA7oQ=
Subject key identifier: A3:66:F8:D0:A6:73:01:B5:98:87:EF:D5:0C:B9:B0:BF:AB:A5:B4:36
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial: 019A29301D8BADABEC921B021E08BCED336A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number: 16F7
Signing time: Tue 28 Oct 2025 05:00:10 +0000
Manifest this update: Tue 28 Oct 2025 05:00:10 +0000
Manifest next update: Wed 29 Oct 2025 05:00:10 +0000
Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: HUvreFFWuba3OTv3dMs6oTZgl7hKPAk3YHCFv/JYU7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:1d:8b:ad:ab:ec:92:1b:02:1e:08:bc:ed:33:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Validity
Not Before: Oct 28 05:00:10 2025 GMT
Not After : Oct 29 05:00:10 2025 GMT
Subject: CN=a366f8d0a67301b59887efd50cb9b0bfaba5b436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:4c:80:33:04:c0:cb:34:74:f8:28:5d:03:
82:33:d3:af:9b:92:c4:55:b2:45:3f:00:56:4b:6a:
03:63:ed:99:e8:95:b4:d8:d4:6e:7d:c9:64:b3:2c:
2a:ba:0a:fd:2f:22:52:6c:71:cc:3e:63:20:7f:59:
ec:1e:13:1e:59:f2:ab:a8:53:7e:b5:95:b5:51:92:
cd:08:92:f4:96:88:aa:14:db:64:8b:f9:9d:6f:4b:
ba:ad:43:f5:9a:57:47:bd:f6:f2:b8:3c:b2:6d:c8:
7e:4c:64:10:63:1f:ab:40:e4:9b:ab:32:d0:d6:67:
14:a3:99:25:8e:94:75:1c:5b:7c:b9:93:5f:e9:04:
99:c1:09:2f:70:94:43:0d:46:cd:29:0c:17:7c:f1:
ab:10:40:46:ae:ba:a4:0c:74:c2:4a:01:33:a7:68:
17:d2:4f:06:3b:ec:e8:ab:6a:dd:bb:34:1e:63:31:
33:02:87:8d:32:4c:bf:eb:6a:b2:50:8a:bf:81:9c:
90:b8:b7:e2:2e:9f:90:19:1d:98:1b:a5:65:1c:28:
1f:4a:57:65:cb:1b:03:72:03:ae:74:40:96:c7:b4:
de:74:2f:32:cf:5a:92:d6:82:05:bb:08:b4:a9:a1:
ae:16:3e:a5:22:b1:09:2a:d6:fc:8c:69:f1:87:ae:
db:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:66:F8:D0:A6:73:01:B5:98:87:EF:D5:0C:B9:B0:BF:AB:A5:B4:36
X509v3 Authority Key Identifier:
keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:df:dd:fb:c9:47:a1:df:81:ea:08:04:ec:eb:cf:47:8e:3d:
42:d1:8d:ee:c6:c5:de:0e:a7:ce:35:ca:70:84:fc:57:be:31:
df:9c:3e:f6:8a:1c:ee:70:b5:1c:e8:ab:75:c7:42:de:17:dd:
e5:54:22:74:15:09:97:38:cd:dd:99:61:0e:61:dc:ac:f3:69:
d3:82:91:92:21:df:4a:3b:a4:21:dd:0e:09:6f:8e:cd:3e:40:
c4:b5:f9:c3:1c:b7:6c:43:56:c6:bd:bc:68:23:aa:47:f6:4d:
d5:dd:7a:69:da:1c:a8:81:82:1e:0e:fb:5d:cf:29:af:6d:80:
b9:45:ef:fb:a2:79:30:2c:43:49:1c:a3:41:4d:42:84:7a:7b:
74:49:6c:90:df:51:dc:9d:0e:59:c1:a6:a7:13:f6:17:ad:a2:
95:d1:f1:c5:47:c9:7e:00:d2:c4:49:ff:5d:10:88:d8:d2:de:
53:97:2f:9d:15:4e:6a:a2:eb:dd:cb:e6:42:87:2b:2d:4e:3b:
a7:4b:f0:cc:6c:a7:be:63:da:3f:13:8a:b6:dc:22:38:46:11:
3c:df:06:04:48:b3:4d:ae:cf:1f:99:43:75:36:25:f5:53:31:
d3:1e:93:ac:de:6a:a2:1c:7a:64:12:7c:4d:f9:d0:eb:5a:eb:
5d:a3:e2:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopMB2LravskhsCHgi87TNqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTUyNTE2M2RjMDFkY2QzMDg5YmIxZGNmYjA5MTJlNzdl
ZGFmOTgwHhcNMjUxMDI4MDUwMDEwWhcNMjUxMDI5MDUwMDEwWjAzMTEwLwYDVQQD
EyhhMzY2ZjhkMGE2NzMwMWI1OTg4N2VmZDUwY2I5YjBiZmFiYTViNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXtMgDMEwMs0dPgoXQOCM9Ovm5LE
VbJFPwBWS2oDY+2Z6JW02NRufclksywqugr9LyJSbHHMPmMgf1nsHhMeWfKrqFN+
tZW1UZLNCJL0loiqFNtki/mdb0u6rUP1mldHvfbyuDyybch+TGQQYx+rQOSbqzLQ
1mcUo5kljpR1HFt8uZNf6QSZwQkvcJRDDUbNKQwXfPGrEEBGrrqkDHTCSgEzp2gX
0k8GO+zoq2rduzQeYzEzAoeNMky/62qyUIq/gZyQuLfiLp+QGR2YG6VlHCgfSldl
yxsDcgOudECWx7TedC8yz1qS1oIFuwi0qaGuFj6lIrEJKtb8jGnxh67bpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNm+NCmcwG1mIfv1Qy5sL+rpbQ2MB8GA1UdIwQY
MBaAFC7lJRY9wB3NMIm7Hc+wkS537a+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzkt
Y2M2OGRjODU0ZTg4LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzktY2M2OGRjODU0ZTg4
LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9/d+8lH
od+B6ggE7OvPR449QtGN7sbF3g6nzjXKcIT8V74x35w+9ooc7nC1HOirdcdC3hfd
5VQidBUJlzjN3ZlhDmHcrPNp04KRkiHfSjukId0OCW+OzT5AxLX5wxy3bENWxr28
aCOqR/ZN1d16adocqIGCHg77Xc8pr22AuUXv+6J5MCxDSRyjQU1ChHp7dElskN9R
3J0OWcGmpxP2F62ildHxxUfJfgDSxEn/XRCI2NLeU5cvnRVOaqLr3cvmQocrLU47
p0vwzGynvmPaPxOKttwiOEYRPN8GBEizTa7PH5lDdTYl9VMx0x6TrN5qohx6ZBJ8
TfnQ61rrXaPiWw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 11:30:02 2025 by rpki-client