Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
File: lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json)
Hash identifier: xKw5UUugVk7Cmzwhtdh3YJ8z0TKGfn6BVn1aXhdwavc=
Subject key identifier: 9F:0C:9F:7B:24:74:56:37:BF:98:66:E2:C3:F4:9E:DC:85:4B:20:7B
Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a
Certificate serial: 0199244417888610EC2FE46C7654ACFCB2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
Manifest number: 0567
Signing time: Sun 07 Sep 2025 13:01:06 +0000
Manifest this update: Sun 07 Sep 2025 13:01:06 +0000
Manifest next update: Mon 08 Sep 2025 13:01:06 +0000
Files and hashes: 1: GuRsW05KP8iWPMSp7vb_kToeinc.roa (hash: xtfuu25jYNsHOYwVnrJ3v+/nadbPfCZESTGZfRgdXIM=)
2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: Y05FbXZ3PNPn9cSsEW65RxcckZGrtEG5hn7qKQ91/Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:17:88:86:10:ec:2f:e4:6c:76:54:ac:fc:b2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a
Validity
Not Before: Sep 7 13:01:06 2025 GMT
Not After : Sep 8 13:01:06 2025 GMT
Subject: CN=9f0c9f7b24745637bf9866e2c3f49edc854b207b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:40:7d:5a:09:90:1a:83:70:38:36:7a:dc:
9b:37:27:78:ad:f0:d8:05:07:c4:f4:ec:85:1f:56:
44:7c:ac:3d:eb:f2:eb:a6:df:e7:cd:48:3d:98:3c:
be:09:51:8f:c6:8e:01:a4:40:21:79:18:1a:99:c3:
13:4b:e7:34:1a:87:2e:cb:86:bc:7f:c1:1e:74:43:
13:4a:0b:ba:de:38:2a:b9:d8:ff:4d:3d:13:72:9e:
96:97:66:fb:6b:72:ce:6c:5d:38:d9:95:8b:4b:c1:
de:88:3d:98:29:8a:12:86:76:40:58:9d:ac:6d:ba:
06:92:28:eb:2b:f6:75:60:b8:a6:f0:e4:40:c8:7e:
ca:dc:fd:88:51:3f:86:fd:d1:8b:0f:f2:6b:6c:bb:
d0:a9:88:b6:00:ee:40:44:9d:0e:4f:f1:87:8a:4f:
4a:a3:2c:54:23:ef:82:7f:8f:d6:90:80:d3:46:fa:
fa:89:e1:40:39:76:7a:af:f1:18:f5:3a:fd:6f:ba:
db:c3:29:73:16:c7:62:4e:1c:81:6b:79:6f:ac:22:
76:3b:27:e1:05:01:6d:c8:2f:e8:97:ab:8b:25:7b:
51:98:72:1d:83:5d:cc:68:1c:e0:52:31:c5:d1:ce:
7e:2c:47:47:d9:9d:0d:f8:c5:93:43:93:f5:5f:78:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0C:9F:7B:24:74:56:37:BF:98:66:E2:C3:F4:9E:DC:85:4B:20:7B
X509v3 Authority Key Identifier:
keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ae:96:f3:48:a1:57:2e:b5:67:46:ee:d9:20:70:28:1e:27:
bc:e5:51:67:5f:2b:2c:2b:8f:35:10:45:73:0c:f0:d3:b3:d0:
64:55:13:aa:a2:d3:f0:5e:88:1f:97:a7:35:e1:1d:c3:f9:71:
a4:45:d1:f7:9e:94:22:a0:2f:88:c4:5c:12:cd:b8:75:1a:1b:
fc:3a:88:24:b4:2e:df:81:49:c6:1f:7a:64:75:4b:de:99:9f:
f8:e3:9e:f1:d4:ea:d7:37:4f:04:f1:4d:67:d9:31:ea:ba:77:
ca:7f:31:4f:3d:35:9c:11:9e:c5:ec:18:ec:5f:41:d3:b4:69:
49:69:6e:54:fa:bf:fa:5d:43:6a:c5:90:de:0f:99:35:bd:d8:
82:bf:a7:00:b3:3e:d3:c7:ca:ca:18:ba:e4:4e:c0:63:13:9b:
6e:a2:1f:ec:9c:8a:6d:8f:50:58:4e:de:7c:de:87:21:14:57:
a7:31:00:69:f4:bf:d6:04:07:12:a4:13:8c:14:ff:d3:c5:69:
b6:00:6d:24:53:9f:15:ac:c8:89:02:d2:db:15:b9:9a:43:60:
a5:28:07:bc:e4:72:f4:56:ef:9d:a2:b5:2a:67:98:79:11:a5:
0d:8e:51:e3:87:22:20:d7:1a:b7:b6:bd:62:22:5e:4c:ef:50:
24:03:e9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:16 2025 by rpki-client