Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
File: LUFhUhEtrymCRCUnsPlE5IKFgy4.mft (raw, json)
Hash identifier: hT0OVZ5eqkesBSByHrw5mAT4H3zmsLJrWjEj1aYgOtI=
Subject key identifier: B2:2D:DB:1C:64:90:AD:EB:B9:96:17:CC:E0:3F:E1:86:D3:E8:44:50
Authority key identifier: 2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
Certificate issuer: /CN=2d416152112daf2982442527b0f944e48285832e
Certificate serial: 0199FD345591467AE26E20ED17D34BF8B28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
Manifest number: 0666
Signing time: Sun 19 Oct 2025 16:01:29 +0000
Manifest this update: Sun 19 Oct 2025 16:01:29 +0000
Manifest next update: Mon 20 Oct 2025 16:01:29 +0000
Files and hashes: 1: LUFhUhEtrymCRCUnsPlE5IKFgy4.crl (hash: MI4MxVF8abY7e0XwTird0AXipaAyday2DgSMDm+mI/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:55:91:46:7a:e2:6e:20:ed:17:d3:4b:f8:b2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d416152112daf2982442527b0f944e48285832e
Validity
Not Before: Oct 19 16:01:29 2025 GMT
Not After : Oct 20 16:01:29 2025 GMT
Subject: CN=b22ddb1c6490adebb99617cce03fe186d3e84450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:c1:09:03:e0:de:19:f3:7b:53:42:e7:72:
e5:36:9c:f5:7b:a5:8c:39:c4:81:4c:96:d9:4d:0e:
17:56:04:27:00:8d:79:92:89:99:63:61:c3:68:1f:
17:52:17:ed:e3:48:9f:b9:7f:d1:35:de:c7:4b:01:
03:b0:ba:50:86:83:48:5a:9f:45:f5:3b:f3:8b:f5:
29:11:41:09:87:1d:9f:26:cb:59:13:70:06:6c:05:
b6:db:8e:79:ab:f8:9c:c2:87:e5:2e:b2:f2:6a:15:
39:c2:d6:4c:4b:64:a5:ce:10:99:ff:97:83:34:d0:
46:d2:9d:45:42:06:89:88:38:4a:a0:65:2e:9c:17:
49:34:4c:6d:c4:2d:ee:27:7d:ee:09:00:f4:bb:18:
b9:92:53:bc:ed:76:6d:e5:7e:c8:b7:62:fc:a3:55:
b6:4f:68:0a:c1:d3:81:86:3e:75:f2:0e:33:ba:df:
e8:6e:1d:c0:8f:34:94:2f:6c:7f:15:1f:9a:62:c2:
f5:9e:6f:0b:01:bb:ac:35:17:e4:b3:d0:85:ad:5f:
3f:e9:05:e4:d4:84:d1:4d:ff:b6:67:bb:73:dd:a1:
69:24:a3:35:7b:d6:4e:7c:19:0b:50:9f:17:23:15:
8a:09:0e:97:30:5a:52:d1:aa:1a:84:3c:b7:ea:45:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2D:DB:1C:64:90:AD:EB:B9:96:17:CC:E0:3F:E1:86:D3:E8:44:50
X509v3 Authority Key Identifier:
keyid:2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1d:74:ed:a8:e5:89:77:9e:9a:c4:80:1a:d1:5e:20:e8:a3:
a3:46:d4:d6:e9:30:bf:ae:14:83:a1:16:35:f4:b5:94:d5:51:
1d:a1:92:00:23:91:32:20:e5:00:f3:cd:36:2d:97:0b:68:4d:
5e:6b:ef:83:13:3f:b7:63:7f:79:ce:39:d4:08:1c:92:35:4d:
1f:d9:71:a4:1e:89:ad:c5:e8:35:b9:64:e9:36:13:c7:c6:7f:
d9:7e:b0:fd:77:b0:03:49:b6:45:5b:4b:7b:23:73:59:ad:70:
7c:0e:74:48:c1:05:a8:e1:0c:56:17:52:23:a1:70:6b:8d:da:
0b:ca:2c:af:87:b6:e2:09:f2:87:6a:50:10:64:79:db:03:49:
37:17:c1:5d:58:e7:78:d5:c1:9e:2a:a1:cd:c2:94:6d:9c:0f:
06:0b:52:0b:43:46:72:4d:33:9e:10:26:0b:70:b9:ae:2c:6b:
2f:dd:82:7d:ab:5b:f0:e4:30:6e:6b:d1:70:3e:1b:2a:34:54:
28:4b:93:cf:dc:40:c9:19:e9:82:ed:08:47:bf:0c:77:8a:85:
de:f8:7c:09:fd:9e:c4:38:4c:99:2a:40:09:4d:ff:6a:43:5a:
5b:59:1e:7f:8c:b3:a1:13:4b:04:d1:b6:a2:df:a3:6b:34:3c:
61:d5:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:06:47 2025 by rpki-client