Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier: nK0K28P00aY/O98VlroHlUIoXaW6IJ4vLa5FJFGik4o=
Subject key identifier: 31:9F:D5:E0:54:48:1A:67:66:C6:B7:C7:83:09:84:10:92:1D:1D:AF
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial: 01976E19133B422E2E6AADBC1652099C7DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 11:00:26 +0000
Manifest this update: Sat 14 Jun 2025 11:00:26 +0000
Manifest next update: Sun 15 Jun 2025 11:00:26 +0000
Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: uQeElZrZGeF/DCszNUyZ9WULeiK3GFQJDJ44AVYC6o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:13:3b:42:2e:2e:6a:ad:bc:16:52:09:9c:7d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Validity
Not Before: Jun 14 11:00:26 2025 GMT
Not After : Jun 15 11:00:26 2025 GMT
Subject: CN=319fd5e054481a6766c6b7c783098410921d1daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:c8:7f:84:7e:6e:5d:46:b6:4d:2a:90:18:
6f:ea:b6:86:76:d8:00:ad:d6:eb:05:3e:61:e6:79:
b5:eb:f2:6a:97:8e:48:e8:84:eb:89:b0:43:9f:3c:
a2:6b:38:34:a0:fb:db:e3:e5:08:14:02:66:82:22:
a4:53:9c:66:15:0a:05:76:6e:16:4e:95:25:e5:bb:
91:2c:53:86:d8:8b:69:08:1e:ad:cf:ea:57:90:73:
cd:7b:34:7f:31:31:8e:8d:d3:34:3c:b7:b7:c4:7c:
6d:c1:e6:6e:ee:24:5a:9d:74:c1:74:94:bc:a3:f8:
c4:22:49:79:29:9c:e7:38:66:4c:bd:ca:57:0d:62:
54:f4:ea:73:89:32:36:ea:7b:6b:0c:ad:04:dd:03:
83:0d:15:66:cd:9c:2a:88:79:9c:00:35:b3:86:c8:
ed:79:ac:de:3c:1c:23:d6:ea:27:4c:d3:0f:eb:5b:
e5:bb:71:0a:4f:87:dc:49:58:23:f1:55:25:35:94:
97:8b:0b:0d:ee:ed:8c:b1:5f:7f:40:92:d5:34:45:
ca:92:4f:a2:fd:45:ee:fe:31:1e:f0:92:f5:dd:ca:
55:99:f9:b6:dd:e8:5f:bb:0a:8c:52:4a:44:81:0a:
81:97:2e:1d:ee:9e:cd:6d:ea:5b:dd:7d:db:72:1a:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9F:D5:E0:54:48:1A:67:66:C6:B7:C7:83:09:84:10:92:1D:1D:AF
X509v3 Authority Key Identifier:
keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a8:72:c9:18:1f:18:da:fe:c2:dd:97:8f:10:68:81:ee:57:
85:b7:69:67:f4:f9:22:9f:3f:77:8c:79:51:08:92:0f:1c:41:
ae:28:f1:16:37:f1:28:96:38:72:8b:5e:53:67:58:01:78:1c:
d8:f4:4f:e3:f9:c5:b8:6f:f9:9e:26:d3:96:2b:86:32:10:2d:
1e:32:25:c8:e0:44:81:06:80:fc:c1:b7:6b:dc:f2:b3:b4:63:
b7:b8:27:bb:4b:2f:d2:33:fb:b6:2b:9f:a4:37:32:1c:fe:a8:
3a:33:02:dc:b3:e1:fa:71:9d:f1:58:eb:d5:50:8c:26:56:56:
59:7e:01:ac:c4:3b:87:77:20:04:a7:77:28:f1:de:7e:23:80:
4e:b5:59:86:e2:76:eb:33:64:ba:79:a6:eb:cf:b9:b9:e3:cf:
43:88:5f:22:c0:63:2b:3f:cf:dc:1a:81:7a:d3:5f:ea:d6:86:
f8:1c:1c:e1:23:85:08:8c:2c:93:f1:7f:97:d8:cb:20:ed:31:
e7:22:cd:41:c7:66:b6:44:0e:6d:e8:2a:c6:f2:80:11:7f:10:
4f:d7:b1:8e:51:3f:e2:3c:bd:22:e5:ac:11:31:fc:e0:ea:7a:
cd:4f:be:c4:c1:95:f7:50:8f:54:ca:f6:fe:cf:da:09:98:46:
5b:ef:48:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:51:10 2025 by rpki-client