Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier: dST5Aktq3sXADxszduWsgywwQNg/bpy/6iglahg5YMM=
Subject key identifier: FC:2B:1C:EE:27:E1:9D:1A:D9:3C:D4:04:30:53:92:DD:E5:37:4A:1B
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial: 0199FCC65C0065CC569EEDDE32956772CF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 14:01:22 +0000
Manifest this update: Sun 19 Oct 2025 14:01:22 +0000
Manifest next update: Mon 20 Oct 2025 14:01:22 +0000
Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: +S1DNRAvCYoAW1c2n0rHY4JiSZF1vk6KEUN8XbvZZqs=)
2: YnocbPb6eCTl7D0AAtuW-w6T8XI.roa (hash: 0/3lBvSnn24lW/dA1E4Lwb6/p+92YZin4bwE+8xDWMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5c:00:65:cc:56:9e:ed:de:32:95:67:72:cf:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Validity
Not Before: Oct 19 14:01:22 2025 GMT
Not After : Oct 20 14:01:22 2025 GMT
Subject: CN=fc2b1cee27e19d1ad93cd404305392dde5374a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:5d:26:5e:2c:75:ad:1f:fd:98:fe:4d:9d:
bc:7e:9c:25:ae:55:78:4b:da:5d:27:c7:8f:fd:71:
e5:60:97:c1:a0:cf:9d:a7:66:76:4b:97:d1:11:1f:
85:4c:f8:a9:ab:5d:a1:bb:6c:8a:34:e6:a4:6b:4b:
c5:e8:ff:67:3b:7d:f0:b3:a0:ea:46:78:dc:34:64:
e5:c0:a5:19:a1:e3:b5:64:fc:01:7f:b0:18:08:cf:
94:4a:3d:f7:bd:df:0f:a5:63:5c:20:b4:c0:8b:e4:
80:9b:fb:fe:55:d6:d7:65:d9:e7:e7:97:5a:16:61:
5a:90:13:08:31:15:78:b6:a8:f2:07:82:2d:50:5d:
c4:86:4b:a9:d2:62:ce:aa:18:bf:91:48:1a:76:51:
1c:bb:03:3f:ea:ed:02:87:9e:19:7a:bc:a4:7b:2b:
a9:f4:fc:78:cd:f0:42:91:b3:43:d5:b2:57:73:da:
83:26:ee:f5:2a:6e:58:16:7d:43:03:73:07:94:a1:
a1:c9:d0:e8:7d:04:06:78:3f:70:62:5a:bd:bc:c2:
aa:ed:b6:74:37:df:74:61:8f:96:df:8e:b6:d6:97:
a3:28:88:b0:3a:13:6a:24:c0:49:01:3e:7c:12:31:
5c:b8:1d:01:b9:58:45:fd:b9:6e:83:70:b4:cf:34:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2B:1C:EE:27:E1:9D:1A:D9:3C:D4:04:30:53:92:DD:E5:37:4A:1B
X509v3 Authority Key Identifier:
keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:45:ea:52:91:8b:96:e6:7c:03:90:02:20:76:62:19:52:22:
3f:4b:06:ee:c1:66:92:95:ff:1d:77:aa:16:73:be:f8:f0:be:
ac:87:bd:e2:f8:9d:84:1c:3d:9e:6f:35:2d:2b:1a:39:ef:74:
14:0f:ce:21:1d:31:ea:bb:36:cb:7f:80:44:99:24:63:89:cd:
6f:bf:12:30:5e:a0:af:b3:a0:c5:35:76:29:86:07:44:6c:7e:
56:82:bc:e1:b1:05:cb:43:e1:d6:fd:00:7b:e3:b4:a5:92:40:
33:e4:10:15:f2:c4:99:13:c3:56:38:0b:3f:f0:f9:59:24:b5:
4c:3a:61:e0:92:69:f1:cf:57:52:4f:02:49:17:c1:6a:c3:cd:
65:04:b7:e5:a6:e4:d8:ac:75:87:12:6e:a9:82:61:f1:d7:9d:
c8:a6:c8:85:be:7e:f5:e2:18:18:4f:71:23:b0:81:8d:23:88:
72:42:93:c1:31:69:74:80:13:9f:92:03:62:e4:5f:a5:e3:80:
26:2f:9f:fe:15:3f:c7:6d:31:80:07:d5:7d:1b:ce:4e:fc:85:
3c:38:47:bc:49:b0:6c:99:88:1e:f9:9c:d2:03:c6:0c:aa:6a:
5e:9c:f9:30:17:47:37:a7:fe:2b:bc:2c:b1:46:ef:5a:b3:0e:
27:2e:db:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:51:42 2025 by rpki-client