Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
File: lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json)
Hash identifier: 7GkLxQw5tbpkTlDz2PHJTYTHHKEeHDl5PM67bqZ77RQ=
Subject key identifier: 60:1D:54:74:9A:E6:26:B3:A1:C8:29:8B:6F:07:B4:FC:D8:1D:1F:E4
Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a
Certificate serial: 019749315C1AC0B8832955C9FD430762E552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
Manifest number: 0471
Signing time: Sat 07 Jun 2025 07:01:00 +0000
Manifest this update: Sat 07 Jun 2025 07:01:00 +0000
Manifest next update: Sun 08 Jun 2025 07:01:00 +0000
Files and hashes: 1: GuRsW05KP8iWPMSp7vb_kToeinc.roa (hash: xtfuu25jYNsHOYwVnrJ3v+/nadbPfCZESTGZfRgdXIM=)
2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: QM6eFv/ijna8DoOH7zjTi/PCD2rzuFKw52s/TEReDQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:5c:1a:c0:b8:83:29:55:c9:fd:43:07:62:e5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a
Validity
Not Before: Jun 7 07:01:00 2025 GMT
Not After : Jun 8 07:01:00 2025 GMT
Subject: CN=601d54749ae626b3a1c8298b6f07b4fcd81d1fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:70:93:65:51:6a:7d:32:c1:a2:aa:e2:da:
37:28:44:5e:7e:3a:94:01:18:c2:eb:37:8d:0a:68:
9c:e3:9d:ad:05:3c:32:e4:a7:b0:3d:a9:c7:a5:0a:
ec:14:3d:23:68:5c:96:9c:fd:c4:15:20:0f:5d:e4:
d0:2c:0a:7f:5b:52:4d:b0:92:18:9e:fb:69:49:1b:
14:20:c5:fa:cb:1f:a0:c7:f9:dc:c9:5e:fd:dd:7f:
59:a1:bc:fb:bf:d2:db:fa:24:14:37:87:8f:17:ed:
50:ee:ba:2c:99:14:5b:e1:2b:40:d8:10:72:0e:75:
aa:3b:eb:de:6a:99:56:95:7f:d5:d4:3b:80:73:0b:
a7:ab:66:95:85:0f:2a:61:5f:73:41:6c:06:56:e0:
c6:72:0d:cf:4f:bd:0a:f0:eb:2f:75:2f:d1:dd:d1:
67:80:66:6c:37:72:20:b3:ad:f0:17:7e:bf:47:48:
9c:5d:50:74:91:03:eb:0a:f4:e0:14:dc:2c:77:fa:
7d:89:a7:47:be:17:22:61:65:a4:5d:21:35:37:a6:
bf:79:60:75:ba:21:59:1c:d8:14:eb:e6:42:a5:99:
6a:2e:a4:64:1a:70:f0:91:23:5d:60:6e:0c:d9:44:
f3:31:fd:dc:c1:0a:a9:01:81:5e:93:99:60:98:97:
66:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1D:54:74:9A:E6:26:B3:A1:C8:29:8B:6F:07:B4:FC:D8:1D:1F:E4
X509v3 Authority Key Identifier:
keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5b:26:ed:34:fb:9e:28:08:1c:89:f3:1e:68:e7:9a:94:fb:
2c:6c:56:98:8b:5e:14:12:b5:dc:d3:09:a0:65:0e:e5:32:64:
4d:45:54:b6:6e:e0:5f:ce:aa:3e:fd:c3:43:fd:af:84:cc:3f:
47:72:ef:6f:6b:90:bc:f5:6f:29:f2:85:01:94:be:f3:73:60:
4e:5a:d6:6c:64:a3:2c:ad:d6:02:23:30:fc:2f:d0:54:72:9c:
91:af:34:9b:25:a7:23:d5:c7:d8:d0:bc:7b:5e:0f:41:25:c0:
fa:0f:10:97:fd:f5:92:88:6c:35:e6:dd:01:23:32:c0:bf:ad:
e0:0a:7a:d8:a8:d8:ce:36:7f:b2:bf:72:67:73:71:bb:d0:25:
6b:f9:7f:20:b5:ca:66:f3:28:da:2d:84:7b:0b:59:92:24:2d:
7e:e7:a9:25:be:08:6b:bd:60:fe:f7:1d:56:8c:42:a4:5e:5e:
2f:3c:cd:5f:55:6e:87:51:3a:e7:4c:f8:fa:16:99:43:50:f0:
eb:dc:72:94:cb:36:d3:43:78:c8:8e:aa:58:56:ba:81:5b:b5:
6d:32:89:04:d7:c8:ad:8a:d3:28:72:67:58:cb:ea:ec:70:91:
1d:0f:62:40:ea:29:5b:33:0a:e4:94:a5:e4:20:a1:ac:c9:91:
7c:da:e1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:32 2025 by rpki-client