Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: tl7ZqOFq4cW2Jn7HA93L96rNJYmp5PYcDkGmFNm/Tq8=
Subject key identifier: 00:42:0A:D7:AF:2D:77:A8:F1:48:B8:2C:48:00:7C:1B:19:FC:EA:C2
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 0197B6A190322AC4C0F1B8FC92AB7A81DACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:10 +0000
Manifest this update: Sat 28 Jun 2025 13:02:10 +0000
Manifest next update: Sun 29 Jun 2025 13:02:10 +0000
Files and hashes: 1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: dTXZDOgmIkH/SS6UQI8tR7dqoA1iTMNpDa3XFgLYwXA=)
2: dr9TUWCMOOrZgw4ya4BHH6Fl9S4.roa (hash: MHmzUWCdf8/9JI0888l1CY7P5xnPYz06hMJxDs/OenM=)
3: g5NXYnWEAdkaK-Lr_Xc0-zmGZq0.roa (hash: iRJFMsAKyY3mWv0ViO4zwD2HGWC+kyCn/YQlP9uYKFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:90:32:2a:c4:c0:f1:b8:fc:92:ab:7a:81:da:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Jun 28 13:02:10 2025 GMT
Not After : Jun 29 13:02:10 2025 GMT
Subject: CN=00420ad7af2d77a8f148b82c48007c1b19fceac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:ba:01:77:b8:b2:cd:5d:f7:02:4b:fe:5b:
1f:c5:66:d5:7e:63:a3:16:36:f3:63:e3:6f:a9:1e:
49:d2:28:c2:6d:d1:39:77:5e:47:9a:8b:e2:6d:32:
9e:69:6c:1f:70:1c:dd:18:c3:cb:67:bc:00:02:0f:
a6:8d:81:d7:5a:80:7f:e3:bc:d5:d7:fe:1e:64:9f:
ee:30:8f:1c:0f:e0:af:13:19:57:b3:22:77:2c:9e:
d5:1c:f3:8e:1e:ed:fa:1e:60:bf:e3:79:ad:13:6b:
82:19:d3:24:06:5a:61:27:50:7e:97:69:14:fc:0b:
f9:8e:cf:e3:f3:09:d9:db:9a:3d:90:fc:e4:27:fe:
0d:76:07:ae:39:51:68:38:54:b3:ee:d8:ee:21:4a:
8c:1c:0c:ff:06:42:6f:70:59:b2:c4:12:ee:fd:4b:
b3:d3:a6:9f:32:e8:81:8a:80:2e:dd:28:f4:fa:78:
e9:b6:5d:c8:f8:e4:22:5e:02:d8:f4:09:0e:39:eb:
38:01:86:a7:c2:e3:34:71:e1:09:41:f2:04:c2:1e:
46:02:b8:db:6d:8b:b8:7a:f4:53:98:14:21:04:40:
a8:6f:17:8e:4f:8b:64:52:f9:5c:a8:81:fc:51:05:
57:d3:f3:17:d8:8d:13:92:48:c4:d3:86:67:b4:18:
5c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:42:0A:D7:AF:2D:77:A8:F1:48:B8:2C:48:00:7C:1B:19:FC:EA:C2
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:88:b4:24:af:50:9c:87:16:83:e4:3b:f5:fd:51:e4:69:e3:
24:ff:21:e8:f1:df:35:b5:5e:0f:a1:f0:b3:0b:55:94:5a:37:
3e:f6:6d:50:58:c0:52:01:82:ff:12:d1:f9:5e:b9:19:40:50:
84:ea:f1:b4:a6:08:3b:e3:98:6c:1c:cc:e5:b8:8e:22:3b:be:
8e:a1:0c:44:98:64:28:46:c9:8a:23:ea:c2:21:a9:49:59:23:
d3:58:9e:59:2c:bf:eb:85:66:b0:e1:4f:f5:36:28:80:be:36:
45:77:bb:ad:42:8a:6f:49:02:2a:d7:6b:04:29:77:22:8d:24:
f5:be:b1:9f:e3:aa:72:29:9c:35:a2:5c:6c:6f:59:9a:50:fa:
54:d3:6b:84:08:90:73:64:ba:ec:c1:be:73:2f:82:c6:8c:f8:
6b:73:d1:74:e9:f6:a4:c9:97:11:8a:92:6f:bc:4b:03:19:ee:
d6:09:4b:9a:3b:59:88:b7:b0:35:c8:f2:bb:e3:89:b4:7d:d9:
70:85:8a:f7:4b:81:6d:79:01:00:26:90:41:b9:2a:9d:f3:28:
b3:ef:f2:d9:45:dd:96:94:00:b2:cd:ba:99:38:5e:83:79:d9:
f0:6b:e1:cf:1f:0b:4e:80:c5:96:fb:e3:84:8c:a7:15:0f:33:
70:d5:68:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oZAyKsTA8bj8kqt6gdrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTk2MjA4OTI1ZDgzNmY4ZDAzN2QxNzk5ODBhODNhMWIw
YzEzNDIwHhcNMjUwNjI4MTMwMjEwWhcNMjUwNjI5MTMwMjEwWjAzMTEwLwYDVQQD
EygwMDQyMGFkN2FmMmQ3N2E4ZjE0OGI4MmM0ODAwN2MxYjE5ZmNlYWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6G6AXe4ss1d9wJL/lsfxWbVfmOj
FjbzY+NvqR5J0ijCbdE5d15HmovibTKeaWwfcBzdGMPLZ7wAAg+mjYHXWoB/47zV
1/4eZJ/uMI8cD+CvExlXsyJ3LJ7VHPOOHu36HmC/43mtE2uCGdMkBlphJ1B+l2kU
/Av5js/j8wnZ25o9kPzkJ/4NdgeuOVFoOFSz7tjuIUqMHAz/BkJvcFmyxBLu/Uuz
06afMuiBioAu3Sj0+njptl3I+OQiXgLY9AkOOes4AYanwuM0ceEJQfIEwh5GArjb
bYu4evRTmBQhBECobxeOT4tkUvlcqIH8UQVX0/MX2I0TkkjE04ZntBhcvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABCCtevLXeo8Ui4LEgAfBsZ/OrCMB8GA1UdIwQY
MBaAFC7pYgiSXYNvjQN9F5mAqDobDBNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEt
ODQ2YWFmMGViMWFkLzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEtODQ2YWFmMGViMWFk
LzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4i0JK9Q
nIcWg+Q79f1R5GnjJP8h6PHfNbVeD6HwswtVlFo3PvZtUFjAUgGC/xLR+V65GUBQ
hOrxtKYIO+OYbBzM5biOIju+jqEMRJhkKEbJiiPqwiGpSVkj01ieWSy/64VmsOFP
9TYogL42RXe7rUKKb0kCKtdrBCl3Io0k9b6xn+OqcimcNaJcbG9ZmlD6VNNrhAiQ
c2S67MG+cy+Cxoz4a3PRdOn2pMmXEYqSb7xLAxnu1glLmjtZiLewNcjyu+OJtH3Z
cIWK90uBbXkBACaQQbkqnfMos+/y2UXdlpQAss26mTheg3nZ8Gvhzx8LToDFlvvj
hIynFQ8zcNVoWQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:39:00 2025 by rpki-client