Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
File: luWtU7_HOEDEJXEcAQRTVxBX3CM.mft (raw, json)
Hash identifier: bQO7dPkAOHICGsPoCtY8JgN4rR3TNys2xNYpw/hd4TM=
Subject key identifier: 15:73:9F:7B:93:6E:73:9A:CC:90:7E:13:7A:35:3D:6F:09:74:0E:9F
Authority key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
Certificate issuer: /CN=96e5ad53bfc73840c425711c010453571057dc23
Certificate serial: 019A71EEC1AC807357CBC704BD1DC0928520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
Manifest number: 0608
Signing time: Tue 11 Nov 2025 08:01:03 +0000
Manifest this update: Tue 11 Nov 2025 08:01:03 +0000
Manifest next update: Wed 12 Nov 2025 08:01:03 +0000
Files and hashes: 1: luWtU7_HOEDEJXEcAQRTVxBX3CM.crl (hash: ytht/5KfRb+tIwoOy+tiEgE+48JIxa7mKHZ0OWQgo5w=)
2: vu4Plg05nKKxO7-zyqD-UVbYxtw.roa (hash: VNGXTJm2qjOCVOfzY/Ol932aR/HbK5RQpSPZuClIe/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c1:ac:80:73:57:cb:c7:04:bd:1d:c0:92:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e5ad53bfc73840c425711c010453571057dc23
Validity
Not Before: Nov 11 08:01:03 2025 GMT
Not After : Nov 12 08:01:03 2025 GMT
Subject: CN=15739f7b936e739acc907e137a353d6f09740e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:87:2b:55:5b:60:89:45:9b:2d:4b:e7:d6:
35:26:16:d7:f0:18:42:6b:a8:00:2f:6f:de:cc:7e:
44:ba:7c:2b:18:5b:c4:20:ed:af:0d:88:93:e8:5a:
c0:d2:b1:3d:56:ed:d9:95:94:d5:bb:e4:f6:43:16:
e8:b7:b0:88:49:a8:aa:05:c1:32:6d:63:f1:a6:bf:
28:6b:01:38:b7:98:44:70:f6:1b:f1:c0:1b:00:96:
ee:e8:fb:16:b7:0d:01:2e:8d:a8:35:f3:5b:ad:8b:
0e:53:a1:61:e7:ca:5d:f2:2d:10:5c:d9:43:a9:e7:
20:6d:51:8f:32:4e:e3:e5:36:7a:6a:90:72:f9:00:
97:38:fd:ab:17:23:be:92:09:ac:4d:df:50:a6:51:
bb:fa:94:d4:f9:03:5f:9a:2d:2e:07:d0:a4:63:34:
05:fb:83:53:39:b8:f3:03:c1:0b:0d:f9:58:7a:6c:
9c:d6:6e:3a:98:11:f6:a9:69:20:7c:22:3a:e4:23:
0e:5d:a0:cd:32:f4:5a:b5:c3:9d:e7:f3:fd:a0:1b:
85:16:2f:a0:a0:59:a4:5d:06:3e:91:ce:ad:66:4b:
8c:43:dd:62:4a:1e:ec:d7:20:44:1b:32:71:a8:56:
f5:7e:d5:76:d7:eb:43:cb:b7:c9:a2:c9:22:60:83:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:73:9F:7B:93:6E:73:9A:CC:90:7E:13:7A:35:3D:6F:09:74:0E:9F
X509v3 Authority Key Identifier:
keyid:96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:67:63:75:60:9e:61:8f:4f:c2:a5:46:02:88:dd:bd:ef:bc:
87:99:83:c7:b2:fb:cc:2b:09:46:24:3a:17:ab:b2:36:62:20:
73:73:1e:83:e8:fd:7a:99:fc:de:fa:30:cc:80:d0:92:70:c4:
95:d9:7a:1c:d9:88:5a:29:e7:e9:e4:7c:2a:9e:48:1f:82:77:
00:19:f8:8b:cd:d4:57:2c:36:13:61:5d:29:29:c7:de:06:9a:
c3:79:ca:b6:81:51:bb:b7:16:1b:b0:2c:08:17:7f:de:7b:b4:
30:fa:54:1f:98:60:31:be:37:a9:d2:fc:58:8f:88:ed:5b:7e:
e1:ef:37:04:28:1a:c9:e9:d4:f8:b5:1c:b5:9a:90:a4:82:86:
80:e6:ff:43:58:d7:c3:e9:95:b5:72:36:88:c8:5e:b0:a4:a5:
75:06:36:ba:c3:f3:07:4e:25:d4:07:3f:49:af:cc:da:26:2b:
ef:25:12:fb:80:17:eb:15:e6:ce:b9:ef:35:bc:f9:78:c6:23:
64:45:0d:21:fe:bc:ff:bd:c2:e5:08:6d:c1:d6:14:97:fc:e8:
ce:9d:37:0a:07:35:7a:82:72:77:84:23:d6:ce:32:ab:72:f1:
1d:1e:0e:68:76:02:f3:5c:1a:75:f3:46:90:35:a8:e4:b4:3a:
d8:8f:fe:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:47:02 2025 by rpki-client