Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier: eHJ9KgS70IcaX33BeC2+RSdSMeEQpBfzrjhPslupunI=
Subject key identifier: E4:1D:D1:A7:91:9D:E1:FE:13:01:4F:14:A8:56:E0:9E:00:8B:BE:EE
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial: 0197B77CAEB3D81853EBB3614E52C8F96DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:31 +0000
Manifest this update: Sat 28 Jun 2025 17:01:31 +0000
Manifest next update: Sun 29 Jun 2025 17:01:31 +0000
Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: Q6NsTHpYcNn9vgPXk3E6sjZPJpI2qTqvq/m3B9mlLEo=)
2: YnocbPb6eCTl7D0AAtuW-w6T8XI.roa (hash: 0/3lBvSnn24lW/dA1E4Lwb6/p+92YZin4bwE+8xDWMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ae:b3:d8:18:53:eb:b3:61:4e:52:c8:f9:6d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Validity
Not Before: Jun 28 17:01:31 2025 GMT
Not After : Jun 29 17:01:31 2025 GMT
Subject: CN=e41dd1a7919de1fe13014f14a856e09e008bbeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:e1:19:28:54:58:2d:12:fa:52:e5:ad:ce:
45:ef:91:b0:4e:66:13:f6:35:2e:49:91:28:d1:91:
23:b3:54:2c:5a:c6:f2:ca:b9:8c:20:a1:a0:04:cf:
97:e5:31:2d:05:31:33:e6:ef:5b:d4:81:71:d5:d8:
60:9f:b5:63:1a:b8:95:e4:8b:2e:ea:0e:40:7b:c6:
f3:20:b7:ff:fb:ed:aa:10:dc:e7:c2:94:19:8c:51:
b3:a4:ce:26:4e:91:f2:9f:6e:b6:b4:78:fd:d2:a6:
86:52:40:21:9e:f1:12:0d:ce:69:c3:a9:b3:8e:95:
09:ad:f1:d1:85:e5:7a:1c:50:98:5c:54:85:e7:71:
3a:b0:8b:aa:c4:a5:c6:e9:40:02:62:0b:a5:e5:84:
d3:b9:9b:c1:bf:97:da:90:4a:cc:54:a2:2b:f7:b6:
77:cb:dd:c1:25:37:2f:1a:b4:2e:45:30:d5:ee:84:
df:5a:f8:79:36:d5:63:06:3d:60:77:fa:4e:ad:6f:
37:09:e3:ad:44:0d:4d:e0:9b:64:01:1f:b0:f5:2b:
b8:5c:55:59:71:e1:8d:ea:b2:01:5a:4e:3a:da:59:
a4:66:b4:7f:02:3e:dd:65:a7:e3:15:26:77:0f:ff:
bc:07:8f:2c:71:a2:e4:5c:05:5e:1e:ea:7e:78:ab:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1D:D1:A7:91:9D:E1:FE:13:01:4F:14:A8:56:E0:9E:00:8B:BE:EE
X509v3 Authority Key Identifier:
keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:84:f3:51:54:01:46:e8:fe:f2:3a:45:db:8c:55:07:14:b6:
c1:69:71:9d:50:26:f8:0a:da:72:41:38:ff:e6:dd:d9:52:fe:
6b:8c:9e:1e:86:98:eb:05:4f:38:75:06:11:b9:90:ad:f2:a3:
82:3e:e1:3a:61:0c:0d:34:19:db:88:a1:da:23:c8:e2:5e:78:
51:e0:46:ca:93:c8:f0:8e:40:05:46:af:12:c8:89:04:7b:0a:
b4:8f:fe:08:5a:97:d3:a2:a8:10:f6:46:be:c4:ca:a3:a3:11:
33:52:7f:8e:0c:ab:86:a4:27:57:8d:f8:ae:ef:a0:8b:65:9f:
6a:5d:fb:bc:fc:2a:d9:bd:df:d7:53:4f:28:da:ec:28:eb:fd:
29:63:9a:c6:bc:2a:a4:c5:62:92:cd:44:45:fa:9a:ee:93:06:
50:3c:4b:c7:73:09:53:87:ee:13:88:76:6a:1e:61:91:4c:8e:
1e:c6:46:3d:98:d9:2e:ca:48:f9:e8:8d:77:da:68:8f:b8:0a:
48:ee:cc:db:7a:d8:71:ab:8c:af:c4:27:d3:ec:c5:88:2f:3d:
1c:b5:c1:30:ae:7c:66:2c:2a:02:5c:b6:a7:ac:b7:1b:74:1f:
da:44:52:20:1a:d9:66:0f:e0:2e:61:28:4f:27:72:54:ec:7a:
2d:04:cf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:49 2025 by rpki-client