Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier: x3wMWItLAl2+7WHM3o/rttZCyG+pQQc5vP+zv4CKEoM=
Subject key identifier: 92:0B:9C:56:4A:27:04:AC:2A:A0:FA:1F:D0:05:CE:23:40:34:D6:DB
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial: 0197B77CA0C234C19E2E0B49ED95509EB602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 17:01:27 +0000
Manifest this update: Sat 28 Jun 2025 17:01:27 +0000
Manifest next update: Sun 29 Jun 2025 17:01:27 +0000
Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: DEd0+Ug1yOu87Rc4x4x3d9lehA+rA4iv4yoWG78Hbu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a0:c2:34:c1:9e:2e:0b:49:ed:95:50:9e:b6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Validity
Not Before: Jun 28 17:01:27 2025 GMT
Not After : Jun 29 17:01:27 2025 GMT
Subject: CN=920b9c564a2704ac2aa0fa1fd005ce234034d6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:9a:3a:2e:bc:c9:9b:b2:6b:64:ed:14:3f:
c3:a5:91:e8:30:b3:f9:aa:03:e9:ea:f2:bf:70:b8:
18:a0:03:6e:63:e6:b7:ee:02:8f:d4:ed:00:f3:f5:
05:e7:f6:bd:7c:19:45:b0:d8:72:c4:6a:17:73:39:
98:9f:36:8a:dc:c1:db:b5:c2:39:06:08:2a:08:c5:
1c:50:63:b7:70:a4:dd:7a:c2:be:6f:57:a5:3b:97:
ad:66:e1:84:91:ed:5c:f1:6a:a4:cf:26:39:3a:2d:
55:5a:e6:61:2f:fe:cf:a3:62:4e:41:30:da:09:9c:
9e:59:bc:66:34:81:61:fb:b2:78:a9:54:d9:f6:0e:
8b:8e:2f:c5:67:b9:eb:ec:c1:ea:f3:00:63:b8:3a:
6c:f1:ea:41:90:37:a9:a0:b1:44:b5:fe:f2:3b:68:
36:41:03:91:23:0d:47:d5:6e:3f:07:2c:6f:47:11:
58:47:cc:16:80:a7:12:cc:a9:38:dd:a7:4a:41:ad:
84:2c:db:33:ba:61:a0:34:bf:43:06:f2:84:23:7e:
ea:c2:cc:f3:a2:f3:ba:12:eb:4c:19:76:d7:0c:c6:
55:f7:b7:17:96:31:5b:8c:6f:29:c6:50:02:29:1e:
42:79:82:24:7b:a2:6e:47:2b:1e:1e:f4:a9:3d:7a:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0B:9C:56:4A:27:04:AC:2A:A0:FA:1F:D0:05:CE:23:40:34:D6:DB
X509v3 Authority Key Identifier:
keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e5:fa:ac:43:f5:cb:b6:28:d7:b9:6e:b0:33:e8:23:04:6e:
33:9d:c9:4d:1e:52:08:7a:db:d5:8d:84:99:7f:0a:5b:32:88:
7a:99:6d:a9:f8:b5:43:09:3b:58:83:d5:b9:b9:eb:6f:6c:9a:
06:09:7a:b5:a4:25:7f:95:46:ed:52:78:c7:dc:eb:fd:68:19:
f1:84:cb:6f:fd:9f:b3:1e:a4:29:5d:05:b1:44:00:16:c3:78:
83:2f:dc:b9:15:e0:1d:b1:c2:aa:2f:cd:dc:0d:53:d2:52:ac:
33:46:2b:2b:a0:bc:c1:a8:a1:0b:20:f9:0c:9f:c3:56:db:9c:
76:58:5c:a8:64:41:61:4d:f8:50:df:ca:d1:76:10:8c:9e:42:
12:7e:7e:7c:2d:cf:aa:5f:fe:20:5c:1d:a5:f5:1e:ff:5b:07:
2d:6c:ea:0c:51:55:3b:bd:ec:52:99:7d:db:26:4c:f1:48:04:
c8:3a:73:40:c1:80:8b:68:47:4a:8a:6b:72:22:d2:1f:1f:a2:
11:c3:78:d8:62:b7:32:fa:f3:db:03:80:a0:7f:55:24:cd:94:
cc:3c:ca:4f:df:4f:20:c9:43:30:15:f5:ed:f3:40:0c:52:1c:
27:a4:03:77:da:af:c0:7e:e7:4d:a4:7f:1f:d6:9c:0a:8e:b3:
6d:91:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:14 2025 by rpki-client