Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: HBGnKU9wNSiNAJNWtVarrJ2QE5wTncboGQLERWa3+mk=
Subject key identifier: 7C:9B:73:07:2E:F6:01:AB:EC:C8:43:FF:20:64:98:43:C7:5F:AE:E7
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 0199FDD9EF1005ECB1C7A38C79FC3F2C8FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:22 +0000
Manifest this update: Sun 19 Oct 2025 19:02:22 +0000
Manifest next update: Mon 20 Oct 2025 19:02:22 +0000
Files and hashes: 1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: 0Tr+38mzpHRnsztMGOMhWVGhBX/dUAuvM+ZMQthy/68=)
2: dr9TUWCMOOrZgw4ya4BHH6Fl9S4.roa (hash: MHmzUWCdf8/9JI0888l1CY7P5xnPYz06hMJxDs/OenM=)
3: g5NXYnWEAdkaK-Lr_Xc0-zmGZq0.roa (hash: iRJFMsAKyY3mWv0ViO4zwD2HGWC+kyCn/YQlP9uYKFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ef:10:05:ec:b1:c7:a3:8c:79:fc:3f:2c:8f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Oct 19 19:02:22 2025 GMT
Not After : Oct 20 19:02:22 2025 GMT
Subject: CN=7c9b73072ef601abecc843ff20649843c75faee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:99:30:b2:29:bb:62:23:1c:46:2b:17:c5:
0a:ed:38:10:4f:a5:fe:b3:68:08:88:97:8d:28:e4:
b7:fe:0a:c7:78:d5:93:ea:72:eb:66:ca:00:e7:9f:
f6:b7:4b:54:2c:b0:3e:1d:2d:87:4b:41:1f:c3:d8:
18:31:0e:c8:6b:27:d3:e5:db:78:7a:e8:1f:2a:89:
1e:21:13:08:6b:fc:5b:c5:ee:48:f7:d0:27:78:f5:
66:88:e0:c2:c9:af:70:14:35:ce:42:a5:37:25:b0:
29:3f:c8:65:9d:6d:46:69:82:f7:80:ff:8c:72:8e:
14:ca:ac:b0:03:04:5d:ca:5f:16:01:e4:0b:97:30:
60:98:33:b4:7f:5d:54:2a:1e:1c:56:fe:0b:87:79:
70:cc:25:f0:b6:d8:8e:2a:c4:bb:d5:23:12:96:fb:
25:40:0a:59:79:f8:24:dd:17:6b:15:35:33:e8:2e:
a5:14:5c:25:8d:d1:fe:bc:a8:f6:1f:4b:49:2b:43:
71:95:76:98:c9:b6:ef:9f:4f:66:ca:d5:00:20:89:
ff:6f:e3:5d:1b:d1:5b:77:80:b4:30:86:72:bd:10:
cd:9a:93:a7:23:e8:8f:c4:e4:0e:f4:f1:b2:ea:69:
ca:3e:bc:a2:32:d5:4f:d6:a6:65:9d:cf:97:f4:6c:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9B:73:07:2E:F6:01:AB:EC:C8:43:FF:20:64:98:43:C7:5F:AE:E7
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b9:fa:c3:ba:24:59:9a:f6:e2:07:4a:d5:24:de:37:5c:78:
f6:af:95:91:7c:a0:9f:48:e7:76:fe:9b:42:19:4f:92:ab:ec:
b0:77:fb:f6:6f:c6:2b:a1:67:ce:27:dd:e8:82:e7:a7:4b:17:
2b:e4:c5:a5:d5:9a:57:28:64:e6:ca:51:63:6d:68:e7:0b:52:
76:ac:15:a1:33:ea:cb:32:41:b6:57:c3:d9:4d:c3:92:52:a6:
4d:47:ec:4c:31:b1:65:d7:32:8d:82:79:c6:b3:9b:1e:b8:2f:
17:9c:b2:95:c5:06:a9:d8:de:47:a7:4b:6e:f9:01:98:0b:fa:
df:cc:ee:9e:9e:f1:cb:ff:1a:6a:cd:12:23:33:b0:9c:90:89:
05:4c:c2:41:eb:d3:6c:3b:eb:16:91:1c:2d:99:a5:ee:3e:d9:
6f:37:f3:b8:53:6f:90:45:36:33:e6:2b:ea:31:a4:7f:d2:d7:
73:bf:76:1d:69:b0:0e:56:ee:14:a6:a8:a8:1c:e3:4f:db:30:
cb:eb:5b:6d:aa:c8:c2:8f:2d:4f:f7:97:83:ed:57:2f:ce:16:
b4:77:43:dc:e1:ea:34:fa:46:c6:82:a6:b4:9f:32:7e:db:78:
7c:4a:d5:dd:31:3f:62:8e:28:cf:98:33:d5:41:5d:20:fc:cb:
7b:3c:8c:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92e8QBeyxx6OMefw/LI+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTk2MjA4OTI1ZDgzNmY4ZDAzN2QxNzk5ODBhODNhMWIw
YzEzNDIwHhcNMjUxMDE5MTkwMjIyWhcNMjUxMDIwMTkwMjIyWjAzMTEwLwYDVQQD
Eyg3YzliNzMwNzJlZjYwMWFiZWNjODQzZmYyMDY0OTg0M2M3NWZhZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz2ZMLIpu2IjHEYrF8UK7TgQT6X+
s2gIiJeNKOS3/grHeNWT6nLrZsoA55/2t0tULLA+HS2HS0Efw9gYMQ7IayfT5dt4
eugfKokeIRMIa/xbxe5I99AnePVmiODCya9wFDXOQqU3JbApP8hlnW1GaYL3gP+M
co4UyqywAwRdyl8WAeQLlzBgmDO0f11UKh4cVv4Lh3lwzCXwttiOKsS71SMSlvsl
QApZefgk3RdrFTUz6C6lFFwljdH+vKj2H0tJK0NxlXaYybbvn09mytUAIIn/b+Nd
G9Fbd4C0MIZyvRDNmpOnI+iPxOQO9PGy6mnKPryiMtVP1qZlnc+X9GzM+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHybcwcu9gGr7MhD/yBkmEPHX67nMB8GA1UdIwQY
MBaAFC7pYgiSXYNvjQN9F5mAqDobDBNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEt
ODQ2YWFmMGViMWFkLzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEtODQ2YWFmMGViMWFk
LzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbn6w7ok
WZr24gdK1STeN1x49q+VkXygn0jndv6bQhlPkqvssHf79m/GK6Fnzifd6ILnp0sX
K+TFpdWaVyhk5spRY21o5wtSdqwVoTPqyzJBtlfD2U3DklKmTUfsTDGxZdcyjYJ5
xrObHrgvF5yylcUGqdjeR6dLbvkBmAv638zunp7xy/8aas0SIzOwnJCJBUzCQevT
bDvrFpEcLZml7j7ZbzfzuFNvkEU2M+Yr6jGkf9LXc792HWmwDlbuFKaoqBzjT9sw
y+tbbarIwo8tT/eXg+1XL84WtHdD3OHqNPpGxoKmtJ8yftt4fErV3TE/Yo4oz5gz
1UFdIPzLezyMCA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:30:27 2025 by rpki-client