Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
File: LUUkZslYX29anMHDDo17Fu1HSkg.mft (raw, json)
Hash identifier: Q2/i+DcEK5rtBeFqE3yd4yU637eT/U411/icjvSCmCs=
Subject key identifier: 08:CF:1B:24:B8:65:BF:06:14:B3:75:F4:C3:86:02:59:81:2D:58:86
Authority key identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
Certificate issuer: /CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Certificate serial: 019748F9FF524C31EF56DA27E1D915D2FCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
Manifest number: 05EF
Signing time: Sat 07 Jun 2025 06:00:32 +0000
Manifest this update: Sat 07 Jun 2025 06:00:32 +0000
Manifest next update: Sun 08 Jun 2025 06:00:32 +0000
Files and hashes: 1: LUUkZslYX29anMHDDo17Fu1HSkg.crl (hash: HvoxxtZL8VUWlhOF4YCOR050wpdIS7Huw32UAm4FolM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:ff:52:4c:31:ef:56:da:27:e1:d9:15:d2:fc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Validity
Not Before: Jun 7 06:00:32 2025 GMT
Not After : Jun 8 06:00:32 2025 GMT
Subject: CN=08cf1b24b865bf0614b375f4c3860259812d5886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:3b:0d:09:4c:7d:c5:47:5a:1c:69:be:e1:
0c:e4:c7:20:1b:41:02:d2:f6:3c:b6:2c:0c:ed:fd:
cc:25:a0:0e:cc:17:0b:d4:50:d6:08:1d:4b:2c:6c:
49:cf:c9:c7:c6:b4:4d:c2:1d:4b:4f:b4:63:0f:0e:
e9:64:91:30:64:70:bf:e3:1f:ca:50:a6:f6:ca:f6:
67:b5:5d:a6:81:89:83:24:d5:5a:fb:de:18:7e:1a:
56:63:3d:fc:44:ab:34:0f:5c:55:c1:5a:0d:1c:fd:
45:90:76:36:c7:7b:63:e5:d7:1e:75:88:b4:1a:4b:
31:4a:d9:4d:6a:cd:93:8b:f6:ed:e0:2b:ce:4e:fa:
af:17:1a:ba:35:96:51:2a:05:1b:6d:22:14:2a:25:
2e:01:45:e5:62:0a:ee:9a:6a:d9:82:5b:5d:18:14:
57:d1:77:f9:25:de:f3:37:8d:3e:46:91:02:11:1e:
a0:c0:97:af:57:08:62:a1:12:65:4f:43:32:8d:5b:
c0:85:93:9c:4e:bf:52:e9:e1:a3:fc:ad:3f:e6:39:
5f:d8:79:e1:f4:28:f6:7a:85:a3:50:57:c5:09:ed:
e0:44:fa:d1:22:8b:56:46:05:ee:9f:5a:06:3f:39:
c8:b9:34:c2:10:d8:b9:64:6f:e7:a6:c3:ba:53:13:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CF:1B:24:B8:65:BF:06:14:B3:75:F4:C3:86:02:59:81:2D:58:86
X509v3 Authority Key Identifier:
keyid:2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c2:8a:4a:19:73:36:aa:ba:33:ee:6c:90:2d:22:4c:71:fc:
d6:29:87:f8:c3:b6:d8:36:d8:1b:1c:76:99:4a:b1:54:02:6f:
c2:0f:58:4f:b2:14:77:b0:a2:2d:5f:d1:a4:dc:2c:16:85:b8:
f9:7a:50:0c:c1:b6:37:ca:79:d0:3d:e0:39:01:e5:a1:43:93:
09:d6:fa:c6:1e:77:b0:0d:37:e4:cd:ba:dd:bb:99:23:8e:a2:
50:63:11:97:57:70:01:5f:90:3e:f1:3e:1e:06:a3:df:98:a3:
fe:ae:1e:20:72:36:82:cd:48:cb:1c:21:60:61:f1:df:1d:98:
ad:15:15:8e:90:79:87:dc:e8:7d:26:47:5b:cb:68:45:38:e4:
d8:d3:32:d6:7f:d3:33:dc:d5:6c:8a:95:49:ae:0c:85:19:ac:
52:73:73:d7:4c:8f:09:f8:fb:09:70:eb:38:f1:91:b0:e5:92:
23:c5:ee:f4:4c:03:81:ca:91:8f:90:8f:60:6f:0f:7e:67:57:
62:dc:96:f6:0a:9d:36:a3:9b:73:45:fd:12:6d:6f:63:f4:c8:
cb:9a:0b:de:3e:d2:fd:07:38:43:7f:df:cd:9a:33:47:4c:c3:
77:18:12:9d:93:36:0e:45:35:45:8f:9e:99:12:e9:5f:43:59:
d7:1a:22:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:34:12 2025 by rpki-client