Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: K5Uyb0oxo7JeOsnbeuvILz9FF2rfnB1T2AYTJqBlI+Y=
Subject key identifier: 8C:D6:26:89:7B:DD:CC:B6:46:65:88:80:F1:61:66:B9:98:CF:CD:E2
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 0198D660A98F8B7CF4B7F1A019FD9B348F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:55 +0000
Manifest this update: Sat 23 Aug 2025 10:01:55 +0000
Manifest next update: Sun 24 Aug 2025 10:01:55 +0000
Files and hashes: 1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: DfJFPs8uG0UHoodw+Fpb05YqMvRBhbuLYXa00z0cvII=)
2: dr9TUWCMOOrZgw4ya4BHH6Fl9S4.roa (hash: MHmzUWCdf8/9JI0888l1CY7P5xnPYz06hMJxDs/OenM=)
3: g5NXYnWEAdkaK-Lr_Xc0-zmGZq0.roa (hash: iRJFMsAKyY3mWv0ViO4zwD2HGWC+kyCn/YQlP9uYKFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a9:8f:8b:7c:f4:b7:f1:a0:19:fd:9b:34:8f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Aug 23 10:01:55 2025 GMT
Not After : Aug 24 10:01:55 2025 GMT
Subject: CN=8cd626897bddccb646658880f16166b998cfcde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:bf:b8:66:a1:e7:da:ed:e9:ff:99:61:c0:
4f:80:2b:09:f0:da:5f:c6:b0:7e:88:4a:64:10:b8:
d6:49:7a:45:1b:b4:5b:9c:bf:98:8e:88:cf:3c:47:
8a:19:73:c3:0e:8f:51:6b:08:c1:a8:c5:f2:29:92:
79:76:28:d1:99:d6:15:27:5b:16:af:63:8b:7f:1f:
c8:2b:e6:b5:8f:09:09:77:78:4a:6f:fc:d0:f7:b6:
a2:c6:1f:59:a4:37:6d:68:bf:7b:e9:f9:e7:f2:ef:
a7:03:f6:fd:42:df:3b:2c:b0:e8:55:ab:a4:68:46:
64:23:a8:af:cf:70:d1:79:39:9f:d4:c3:39:71:ef:
36:77:cd:d1:50:ae:19:8e:48:ec:2a:34:c7:ac:94:
f7:cf:79:da:23:1c:e3:9e:f8:c4:b1:43:c9:6b:29:
5b:d8:26:2d:aa:6d:fe:89:f6:5c:72:c3:63:2e:3d:
1c:bc:65:26:7f:8b:1a:fc:a7:54:a9:f7:c4:e7:7b:
76:81:f6:73:cd:c3:0f:88:0c:89:2a:47:97:db:96:
af:76:86:98:03:9e:ea:b5:a4:6b:28:f7:15:ed:3e:
33:f7:fb:f6:cc:d3:e1:ff:63:55:5f:6b:64:ac:a9:
5a:b3:73:e5:5c:20:2d:2e:b3:88:24:af:e3:04:6a:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D6:26:89:7B:DD:CC:B6:46:65:88:80:F1:61:66:B9:98:CF:CD:E2
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3d:06:3a:12:e4:d0:2d:5d:d9:44:6e:3b:c2:09:1c:75:b5:
86:c1:6d:39:6e:7a:7c:e2:9d:e6:ee:32:2a:ea:83:49:fd:09:
e6:48:1d:3e:8e:4c:7e:dc:42:06:f7:0f:75:84:51:c0:05:ff:
36:b7:97:4c:41:a7:a2:f2:bd:8e:6e:c5:ab:73:d9:77:2c:ba:
fc:72:be:42:b2:57:f6:0a:b0:c7:3c:04:29:bf:74:cf:93:2a:
63:de:af:7b:f2:f8:8f:a9:d9:f3:8b:d6:70:4e:31:9b:4e:66:
3b:97:cd:6c:57:43:04:e5:bb:40:cb:93:bd:73:47:f4:39:33:
a1:bb:56:6a:39:99:44:35:b5:50:c0:a6:43:c3:27:ad:ee:08:
be:c4:e3:c7:b0:87:74:9b:97:97:4c:1d:ce:76:09:49:87:b4:
ac:41:0e:5f:af:ca:d3:9b:cc:d3:eb:2d:9e:ec:28:1d:6c:36:
de:ba:06:3d:3a:e6:ab:1c:8c:d9:a8:cc:c9:f7:16:85:72:82:
b3:6d:9e:86:2a:c0:64:13:fa:6e:fd:bf:bb:58:1a:e4:9a:60:
6b:41:fb:8e:47:a1:f8:1b:77:3b:84:5a:dc:fb:78:c6:1a:4b:
09:cf:13:f7:5c:af:7c:bb:ea:90:81:fb:fd:aa:b8:3e:a4:b1:
68:26:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:02 2025 by rpki-client