Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: 25JYiZvLdPzTBUHTEGF7+EUT5JAD8eAgnmE06Yb1ANc=
Subject key identifier: 5B:43:02:D1:BA:56:BD:A7:1C:6C:B0:B4:8E:DB:54:57:2D:6E:21:1C
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 0196BF6F288F02B3179A57F6F70687EA990D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 13:00:55 +0000
Manifest this update: Sun 11 May 2025 13:00:55 +0000
Manifest next update: Mon 12 May 2025 13:00:55 +0000
Files and hashes: 1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: j/6ZcpwsmhSyovvYhPbumUCA9h+/lfpujiKnMKd+tbk=)
2: dr9TUWCMOOrZgw4ya4BHH6Fl9S4.roa (hash: MHmzUWCdf8/9JI0888l1CY7P5xnPYz06hMJxDs/OenM=)
3: g5NXYnWEAdkaK-Lr_Xc0-zmGZq0.roa (hash: iRJFMsAKyY3mWv0ViO4zwD2HGWC+kyCn/YQlP9uYKFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:28:8f:02:b3:17:9a:57:f6:f7:06:87:ea:99:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: May 11 13:00:55 2025 GMT
Not After : May 12 13:00:55 2025 GMT
Subject: CN=5b4302d1ba56bda71c6cb0b48edb54572d6e211c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:e7:a6:3e:c2:00:1b:95:9d:1f:4e:f7:0c:
72:ba:50:b8:1e:ca:3f:33:2d:eb:e3:fd:b5:f0:dd:
ea:9e:89:e3:6e:7a:0b:48:e7:70:06:06:77:8d:41:
89:3e:a8:19:fe:3d:c5:18:a4:1c:3e:87:4d:06:0b:
a7:27:ca:5f:4a:38:f4:a2:dd:88:b1:0d:05:42:1d:
2f:cf:83:3a:55:17:13:2c:b1:07:44:3f:20:52:87:
c7:60:7f:bd:e8:f5:43:5a:73:6e:d3:07:b4:76:d0:
fe:d2:c9:27:c0:43:16:5d:6d:c9:35:6c:ba:5d:0c:
e4:a6:ab:3e:b1:b7:b9:79:28:b2:a7:95:d3:41:f8:
48:ba:ea:96:d2:f3:04:13:65:cc:96:11:72:29:d6:
69:3b:c9:fb:00:06:95:0b:75:dc:d2:bb:56:79:4c:
44:78:0b:4f:4a:ee:e8:40:9c:cc:42:3b:fc:80:24:
ae:db:4e:9e:88:e8:e8:6f:62:f1:49:aa:50:cc:3f:
e5:dd:32:12:7f:fe:c9:ee:1d:09:8d:95:fc:4b:a2:
c3:d7:1d:4d:af:4e:ce:94:34:4f:42:d8:b6:3e:96:
26:15:0f:c2:d0:2a:f9:68:64:81:ef:5b:08:7a:6f:
7f:6b:30:07:1a:22:cb:7e:c2:94:3b:d5:1b:3b:55:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:43:02:D1:BA:56:BD:A7:1C:6C:B0:B4:8E:DB:54:57:2D:6E:21:1C
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c8:f5:25:df:40:b7:e7:ef:d3:d4:38:8e:b7:ef:70:d9:97:
75:14:7b:8b:7b:1e:f6:5c:e6:82:ca:2e:16:d3:dd:9e:1d:82:
cb:74:f8:41:d5:a9:ec:39:34:45:84:73:46:56:77:8a:d6:10:
e3:ef:cd:8d:12:14:0b:5b:f0:19:7a:c2:44:82:7e:6c:6c:8c:
ce:e2:39:6c:be:47:7d:ac:d4:50:fa:88:ce:27:a0:e3:db:f8:
68:49:a4:38:ab:5c:7e:f5:09:63:5b:de:83:8e:75:c2:1e:bf:
06:47:9b:9c:8b:fa:75:99:5a:e8:91:4b:10:2c:74:9e:df:4d:
77:1a:03:47:18:0a:36:a6:e0:8b:53:28:7e:da:dc:51:52:14:
d1:69:26:ae:72:da:ee:b5:e1:48:d4:d3:da:55:22:79:da:0a:
fb:64:c0:bd:fd:70:a0:fa:4a:84:88:68:68:73:c1:70:d9:23:
91:82:6c:c5:07:04:02:9c:5a:d7:16:76:4f:60:27:22:18:2b:
a8:7a:58:4d:e8:9b:15:0f:9e:ba:a0:cd:b1:99:25:eb:30:b9:
3f:27:b7:44:67:2a:9f:de:b4:d2:52:87:9c:55:2a:e6:40:b6:
91:0c:40:1f:6f:03:35:da:79:48:88:ab:41:44:a2:7d:72:7f:
85:da:0a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:16:09 2025 by rpki-client