
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
File: LUUkZslYX29anMHDDo17Fu1HSkg.mft (raw, json)
Hash identifier: I3FnLMTE2g0mSOG2Nrtvr2zSIWQfV8QfSB1tQ0coO6s=
Subject key identifier: 7F:BD:B4:A0:96:EC:C6:38:B5:2F:0B:1F:03:9C:AA:B2:42:8E:6F:E0
Authority key identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
Certificate issuer: /CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Certificate serial: 0199240CD580282A1664DDFC20AA1E11EEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
Manifest number: 06E5
Signing time: Sun 07 Sep 2025 12:00:44 +0000
Manifest this update: Sun 07 Sep 2025 12:00:44 +0000
Manifest next update: Mon 08 Sep 2025 12:00:44 +0000
Files and hashes: 1: LUUkZslYX29anMHDDo17Fu1HSkg.crl (hash: UZXX30RrbgN6yMqfS2q6sh7Oy/LjEQorfVlTghsveKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:d5:80:28:2a:16:64:dd:fc:20:aa:1e:11:ee:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Validity
Not Before: Sep 7 12:00:44 2025 GMT
Not After : Sep 8 12:00:44 2025 GMT
Subject: CN=7fbdb4a096ecc638b52f0b1f039caab2428e6fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:fa:92:33:d1:75:a4:af:d3:4c:cb:ca:69:
dd:79:66:0f:95:fb:dc:f5:6b:8a:3c:a7:b5:07:31:
d9:89:31:1a:3a:c3:28:5f:08:ff:19:20:b9:24:55:
b4:5e:30:a3:b8:66:bc:64:44:b7:0d:95:50:a6:e0:
e5:15:d6:76:99:d2:7c:7b:91:aa:f9:a8:29:0b:23:
0f:d4:ee:94:ad:72:5a:0e:56:a6:b9:67:75:45:11:
14:2e:66:86:ec:a0:57:00:a4:36:78:48:d1:cd:96:
bd:25:81:63:64:b4:1c:b6:ae:85:f9:71:6f:5c:20:
ff:43:44:e0:bd:66:02:5e:3f:1b:c2:24:b8:98:70:
5c:1e:a5:7d:36:ba:cb:f7:12:20:33:8d:e1:70:15:
3c:81:76:31:12:ef:78:72:77:0a:46:7b:31:d1:9a:
65:68:85:7e:7a:10:a9:11:3a:6c:79:bf:c7:62:57:
b5:ac:55:91:12:1f:24:24:f9:9f:4b:3f:98:6e:c2:
9c:09:9a:aa:8b:2d:62:de:46:70:38:de:36:0f:3d:
f0:4b:2a:19:09:19:5d:ba:5e:4d:11:89:aa:59:2e:
ee:d0:7f:8b:03:cc:71:35:88:e5:f0:2f:66:64:65:
66:4e:b9:da:c3:ed:dd:36:d3:e6:05:5e:68:85:c5:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BD:B4:A0:96:EC:C6:38:B5:2F:0B:1F:03:9C:AA:B2:42:8E:6F:E0
X509v3 Authority Key Identifier:
keyid:2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2a:78:c4:a1:ad:44:ec:5f:d4:6c:f9:23:02:19:f8:8b:50:
ed:c2:72:69:89:cc:91:d4:f0:7f:eb:98:5a:71:89:f1:0b:c5:
3e:52:96:2a:40:f6:32:0e:e1:76:cf:f5:aa:98:b9:00:85:2b:
0c:43:e0:e4:a3:17:12:f9:ab:d8:cd:f5:1b:8c:88:1c:07:32:
eb:8f:11:a5:3a:89:99:c2:fe:29:27:5f:84:aa:ee:b2:78:3a:
72:b4:9e:69:e4:ce:b1:f9:f2:1d:73:73:e1:c2:de:cb:d4:77:
ae:56:dc:3e:c4:35:8b:e9:7c:19:56:3f:20:cf:5f:c1:72:20:
e9:2e:e2:d5:97:de:67:99:40:0e:af:ae:5f:5b:f3:e0:4b:e2:
84:cd:f8:52:ab:b1:8b:f7:de:0a:37:72:6b:fa:22:da:18:fc:
3d:94:5d:d0:38:a7:ff:09:d2:d2:bb:bd:e6:64:f2:31:47:c0:
9d:7a:b6:fc:2a:da:94:a4:0e:ad:6d:b9:59:2b:72:4e:d6:a7:
96:09:31:c9:f4:b8:48:28:a9:9a:00:19:2c:9b:71:c8:42:95:
b2:b9:07:af:40:29:a1:6e:33:48:d8:77:5d:3b:6f:00:31:69:
59:48:1b:85:26:5f:0b:7e:c4:06:f1:8b:da:72:c2:c6:85:ac:
58:5c:06:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:04:58 2025 by rpki-client