Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
File: LUFhUhEtrymCRCUnsPlE5IKFgy4.mft (raw, json)
Hash identifier: M8EXp6CYJ0gNDL4AkW4t57biOneWVAH7HrFn2RrM0G8=
Subject key identifier: E5:56:53:EE:D7:CA:71:1A:0E:D9:E8:B9:8C:CE:17:16:08:1A:B1:55
Authority key identifier: 2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
Certificate issuer: /CN=2d416152112daf2982442527b0f944e48285832e
Certificate serial: 0198D5BB8219CFCB296119CBB114E9354875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
Manifest number: 05CD
Signing time: Sat 23 Aug 2025 07:01:32 +0000
Manifest this update: Sat 23 Aug 2025 07:01:32 +0000
Manifest next update: Sun 24 Aug 2025 07:01:32 +0000
Files and hashes: 1: LUFhUhEtrymCRCUnsPlE5IKFgy4.crl (hash: GkzDzhughajTxb/I44d58Wgos8mPX6WW1vYpgHSGqPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:82:19:cf:cb:29:61:19:cb:b1:14:e9:35:48:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d416152112daf2982442527b0f944e48285832e
Validity
Not Before: Aug 23 07:01:32 2025 GMT
Not After : Aug 24 07:01:32 2025 GMT
Subject: CN=e55653eed7ca711a0ed9e8b98cce1716081ab155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:6e:35:3a:8e:ff:ec:df:99:10:1b:44:f7:
c9:f7:52:02:27:f4:fb:70:42:be:12:01:d6:17:16:
fd:d4:e9:06:a2:9e:b5:19:7a:c0:5d:f6:7b:37:1d:
59:63:a1:00:52:8c:37:98:f2:5a:a0:50:ad:dd:26:
dd:b2:3b:93:3e:e3:63:3c:ec:71:f3:f0:ad:c8:a7:
11:7f:f5:b8:6b:7d:f9:b8:a4:67:2c:b8:8f:02:e8:
4a:70:25:33:6b:fe:38:26:42:f8:93:54:62:64:12:
9e:52:e8:c6:17:40:0b:1c:5b:46:5d:ac:58:56:cb:
65:6a:e8:bd:b0:52:5c:93:db:c4:a6:82:06:fe:24:
da:06:e4:39:db:46:1a:73:06:d8:47:78:00:ed:ea:
5a:ff:e0:c0:3b:5f:2c:77:ad:92:cb:50:a8:85:8e:
98:2d:45:ae:b4:c5:9f:77:44:28:81:24:fb:49:95:
cf:b4:d3:21:97:4f:ec:13:1f:f4:ba:93:fb:d6:ed:
85:b1:7b:46:dc:a4:38:0a:54:d9:4d:ed:4f:3d:f3:
15:34:32:86:9c:31:e0:dc:fd:22:9d:78:b9:51:c4:
13:d9:93:d3:37:2a:61:1f:dd:a4:0e:a7:3f:6d:b6:
13:a2:68:a9:33:d7:05:1c:26:a7:9f:81:2b:3a:62:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:56:53:EE:D7:CA:71:1A:0E:D9:E8:B9:8C:CE:17:16:08:1A:B1:55
X509v3 Authority Key Identifier:
keyid:2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1c:9e:db:d2:ca:7c:45:c2:9b:ad:d1:6d:f2:21:7a:9f:a2:
0b:36:a9:8e:bb:69:29:90:98:82:0d:aa:6b:eb:dd:8b:e0:c7:
39:19:a3:6a:4c:01:c0:fe:fb:12:f9:7d:01:71:34:ea:49:12:
da:b3:f1:cd:a3:5a:f9:9a:59:a7:da:37:82:5f:76:44:26:9d:
e5:2f:31:49:a5:6d:7c:57:5c:9c:90:63:d3:19:39:de:40:ba:
ab:f4:80:8c:07:9d:26:fb:b0:ed:c1:46:9a:00:d6:71:5f:74:
d7:07:03:ee:d5:88:2f:54:4f:5a:42:b1:8d:52:27:be:2d:9b:
90:00:37:6e:f7:a8:35:4c:63:de:21:c2:e5:c3:b2:bf:fe:4d:
25:8a:d6:ea:47:cb:a7:92:1d:bf:22:be:a4:ea:a7:40:20:87:
bc:e1:44:de:e8:12:28:a4:82:58:92:97:a4:39:31:01:e0:3a:
cd:e7:16:61:77:73:a4:a5:0c:95:3b:e3:eb:0f:b5:00:4e:d6:
28:07:51:a4:b9:1b:e8:8d:7f:74:f7:5f:6e:c0:31:4b:6a:e8:
83:c8:e1:c0:9b:28:f1:d2:be:65:b0:80:bc:1a:9d:7b:b2:9b:
bd:c0:5b:0c:5d:22:64:ca:25:30:ad:86:21:68:7c:40:e3:05:
23:60:64:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:01:08 2025 by rpki-client