Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
File: LUFhUhEtrymCRCUnsPlE5IKFgy4.mft (raw, json)
Hash identifier: UEZGWOgdkVerx/1OgCWpY2ZcE8rwG+W4cOYgej9lAUA=
Subject key identifier: 09:9A:04:AB:4F:55:43:13:74:9F:2A:46:06:0A:C5:2A:8A:7E:91:EE
Authority key identifier: 2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
Certificate issuer: /CN=2d416152112daf2982442527b0f944e48285832e
Certificate serial: 0197B7EA40B18B34AE5C7456090172F5AA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
Manifest number: 0539
Signing time: Sat 28 Jun 2025 19:01:11 +0000
Manifest this update: Sat 28 Jun 2025 19:01:11 +0000
Manifest next update: Sun 29 Jun 2025 19:01:11 +0000
Files and hashes: 1: LUFhUhEtrymCRCUnsPlE5IKFgy4.crl (hash: amQ7O93LPU1vjU/2SZOa1dJYC5hpONa8k1LwRbdRazo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:40:b1:8b:34:ae:5c:74:56:09:01:72:f5:aa:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d416152112daf2982442527b0f944e48285832e
Validity
Not Before: Jun 28 19:01:11 2025 GMT
Not After : Jun 29 19:01:11 2025 GMT
Subject: CN=099a04ab4f554313749f2a46060ac52a8a7e91ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:c9:0e:0a:01:6f:fc:4d:b7:a2:e6:06:d9:
6a:3c:c6:c7:a0:38:21:e7:87:11:fa:a9:17:e2:92:
56:37:76:99:4f:47:a2:31:8a:36:ba:ba:cc:d7:2b:
0b:14:e3:a4:86:81:80:4d:52:99:86:11:f6:fe:32:
53:2f:a0:28:a1:1f:4b:a8:85:ad:40:23:f0:64:19:
59:34:e8:bf:71:35:72:22:c3:4d:27:61:68:ea:8b:
2d:63:eb:3b:96:9f:28:ad:f9:96:b2:eb:3a:6e:f2:
bd:ae:b2:bd:ce:6a:63:84:92:d2:c5:54:1a:7c:11:
9b:f2:3d:19:a6:55:20:bc:8a:8c:9f:2d:c5:89:2d:
14:04:ce:e6:7c:1b:2c:b0:33:c2:92:a7:fa:c3:ac:
37:56:aa:d0:ce:80:5a:a5:e2:15:e4:d4:4b:0d:73:
36:d9:e4:9d:2a:4b:4d:4e:50:fc:e5:a7:18:e2:e8:
8b:41:f2:f1:d4:cf:b7:f0:6b:a8:96:27:de:b9:54:
cf:07:5d:c8:e4:97:3a:38:04:2c:42:73:7d:38:c7:
91:69:1b:c9:7e:47:01:b8:31:7d:e6:89:d9:44:84:
81:f3:e4:ab:9a:df:8a:71:85:30:fe:0c:e3:9a:f6:
fd:09:3c:23:90:9c:af:fc:bc:e6:12:d2:53:ab:16:
b5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9A:04:AB:4F:55:43:13:74:9F:2A:46:06:0A:C5:2A:8A:7E:91:EE
X509v3 Authority Key Identifier:
keyid:2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fe:18:93:f4:64:fb:4f:fd:cf:5b:de:61:2b:af:30:c9:98:
7a:80:27:b3:05:b1:dc:0c:b2:a1:24:35:32:a4:65:cc:ea:7d:
76:27:04:89:25:07:f9:77:93:3f:8a:88:1e:c7:6f:70:44:c2:
a4:f0:03:25:ff:9c:34:de:57:8d:1e:73:2f:11:62:5a:82:28:
cf:a4:42:a7:26:24:bf:4a:4d:9b:7c:16:75:52:78:8a:16:40:
d2:c4:26:e2:94:fa:06:62:33:28:e4:a4:cd:b5:73:26:51:3f:
87:ff:06:5b:8b:e7:65:eb:1b:06:e3:11:dc:ff:86:43:9e:6c:
ab:f2:2d:92:7c:4b:18:84:16:35:29:90:c5:98:cf:b5:bc:b2:
dc:de:e0:4e:b8:ae:5c:c7:7d:c3:bf:9f:df:03:54:c6:b2:78:
90:e5:41:cc:bb:18:05:c0:9c:8a:5a:fb:05:7e:71:1f:fa:e4:
da:68:db:e7:9c:a0:15:57:22:35:2c:05:3d:df:c9:00:59:01:
22:08:ec:45:ca:01:36:23:08:49:d4:66:88:c7:e1:c8:86:73:
b2:7f:eb:d0:79:e6:af:9d:2e:84:05:e8:11:e0:94:b3:af:b0:
71:d0:0a:75:58:37:06:c2:24:8d:85:9c:1d:b2:70:0e:0a:0a:
80:04:11:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36kCxizSuXHRWCQFy9aqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNDE2MTUyMTEyZGFmMjk4MjQ0MjUyN2IwZjk0NGU0ODI4
NTgzMmUwHhcNMjUwNjI4MTkwMTExWhcNMjUwNjI5MTkwMTExWjAzMTEwLwYDVQQD
EygwOTlhMDRhYjRmNTU0MzEzNzQ5ZjJhNDYwNjBhYzUyYThhN2U5MWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZbJDgoBb/xNt6LmBtlqPMbHoDgh
54cR+qkX4pJWN3aZT0eiMYo2urrM1ysLFOOkhoGATVKZhhH2/jJTL6AooR9LqIWt
QCPwZBlZNOi/cTVyIsNNJ2Fo6ostY+s7lp8orfmWsus6bvK9rrK9zmpjhJLSxVQa
fBGb8j0ZplUgvIqMny3FiS0UBM7mfBsssDPCkqf6w6w3VqrQzoBapeIV5NRLDXM2
2eSdKktNTlD85acY4uiLQfLx1M+38GuolifeuVTPB13I5Jc6OAQsQnN9OMeRaRvJ
fkcBuDF95onZRISB8+Srmt+KcYUw/gzjmvb9CTwjkJyv/LzmEtJTqxa17QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmaBKtPVUMTdJ8qRgYKxSqKfpHuMB8GA1UdIwQY
MBaAFC1BYVIRLa8pgkQlJ7D5ROSChYMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVGaFVoRXRyeW1DUkNVbnNQbEU1SUtGZ3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jMWExNGMtYTc4Yy00MGE3LWJmNTMt
ZDk2Y2U0MmExMTNiLzEvTFVGaFVoRXRyeW1DUkNVbnNQbEU1SUtGZ3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9jMWExNGMtYTc4Yy00MGE3LWJmNTMtZDk2Y2U0MmExMTNi
LzEvTFVGaFVoRXRyeW1DUkNVbnNQbEU1SUtGZ3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/4Yk/Rk
+0/9z1veYSuvMMmYeoAnswWx3AyyoSQ1MqRlzOp9dicEiSUH+XeTP4qIHsdvcETC
pPADJf+cNN5XjR5zLxFiWoIoz6RCpyYkv0pNm3wWdVJ4ihZA0sQm4pT6BmIzKOSk
zbVzJlE/h/8GW4vnZesbBuMR3P+GQ55sq/ItknxLGIQWNSmQxZjPtbyy3N7gTriu
XMd9w7+f3wNUxrJ4kOVBzLsYBcCcilr7BX5xH/rk2mjb55ygFVciNSwFPd/JAFkB
IgjsRcoBNiMISdRmiMfhyIZzsn/r0Hnmr50uhAXoEeCUs6+wcdAKdVg3BsIkjYWc
HbJwDgoKgAQRUA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:53 2025 by rpki-client