Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier: 9uD6FM5BKmvKg7DeDeNmESVogDpvmGL0ugvzAKvyMqQ=
Subject key identifier: E7:39:3D:CD:12:B3:1A:11:5F:81:B3:36:C4:AE:4E:DD:44:20:43:46
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial: 0199FCC619160E7876C44D02E8A8E6DF86A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 14:01:04 +0000
Manifest this update: Sun 19 Oct 2025 14:01:04 +0000
Manifest next update: Mon 20 Oct 2025 14:01:04 +0000
Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: 8KSNcl7ijLBK55s0TraELUAvTATb4iqP9hddeDz9yRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:19:16:0e:78:76:c4:4d:02:e8:a8:e6:df:86:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Validity
Not Before: Oct 19 14:01:04 2025 GMT
Not After : Oct 20 14:01:04 2025 GMT
Subject: CN=e7393dcd12b31a115f81b336c4ae4edd44204346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:ad:98:f3:19:fb:c7:63:a0:9f:6d:72:3a:
cf:70:8d:03:7a:b0:b9:15:fb:33:52:6c:4a:ed:c3:
3d:13:a4:3f:23:1f:1d:34:61:f5:e5:e6:bc:79:4c:
b8:cf:c4:ca:50:10:f4:08:21:bc:57:80:a0:1f:ca:
7a:15:ff:e8:9a:b8:29:ab:c9:cf:f5:77:b9:95:f2:
b7:7d:cd:b6:ea:3a:0a:f7:0e:09:db:8b:47:cc:45:
50:6d:d3:c5:54:98:16:d8:c9:0e:7e:07:ce:1b:3f:
7c:d9:86:d6:35:a6:1d:71:f6:04:20:ae:6b:fd:02:
74:0f:cf:5f:d2:7a:ef:ef:a3:f0:c3:e9:f8:de:c0:
c1:52:21:6c:a6:7c:bf:e0:36:6b:03:83:6d:76:73:
bb:12:a0:f4:4c:51:78:d6:5f:00:9e:42:be:78:88:
a2:94:45:1e:7f:32:cb:10:f0:04:73:2c:96:69:34:
94:95:7e:35:ee:19:b7:74:f7:f8:6f:e8:cf:60:c4:
0e:0e:b4:a6:e9:ce:d7:99:08:37:f7:37:87:b8:f8:
56:73:67:c0:f6:5d:09:3d:8c:38:e6:ef:03:72:47:
97:be:44:fd:d5:c4:31:f4:76:78:67:cf:56:27:3c:
ba:f1:f0:3a:7e:f1:06:9e:6e:09:b7:f7:f3:d8:6c:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:39:3D:CD:12:B3:1A:11:5F:81:B3:36:C4:AE:4E:DD:44:20:43:46
X509v3 Authority Key Identifier:
keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:56:0e:d6:25:dc:8e:6a:9a:4d:33:99:83:9a:bb:59:eb:5b:
d4:c1:ff:db:62:e1:b6:86:96:e2:c7:c4:f9:55:69:cd:22:dc:
21:0f:a7:49:9a:0c:25:d1:b9:e0:86:d4:03:ad:f7:d9:5c:78:
e8:65:dc:d9:10:64:f4:c6:91:be:ce:56:6d:28:b8:6c:60:04:
30:1b:07:6a:68:ff:15:2d:e9:a0:61:9d:59:43:7b:ab:a4:69:
d9:ff:50:96:10:42:27:b8:df:7e:bb:42:68:15:1b:86:41:fa:
f0:fc:01:e5:bf:53:95:69:b7:49:4d:7d:6b:f9:88:1c:22:8a:
0a:f0:cf:b3:6d:db:9f:23:89:b0:2a:cf:ea:01:0f:cb:79:d6:
0e:7e:b9:80:f3:38:fb:a5:37:6d:c6:c5:00:8d:63:a9:f3:4d:
e2:a8:23:c1:b3:7d:81:db:12:7d:2d:26:6f:49:9f:64:14:18:
e6:fe:9b:f6:4f:37:2f:c8:83:4c:f1:34:5c:df:9f:0b:c7:8f:
09:64:58:d8:8c:c0:d9:06:6b:2b:72:12:86:8b:8b:92:e4:2e:
5f:cb:71:c6:6d:bd:0c:20:ac:74:70:00:c2:04:e8:48:de:fa:
3c:f9:eb:0e:a6:38:30:34:18:a9:78:d8:48:09:16:a2:ee:9f:
5f:b5:b0:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xhkWDnh2xE0C6Kjm34agMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTUyNTE2M2RjMDFkY2QzMDg5YmIxZGNmYjA5MTJlNzdl
ZGFmOTgwHhcNMjUxMDE5MTQwMTA0WhcNMjUxMDIwMTQwMTA0WjAzMTEwLwYDVQQD
EyhlNzM5M2RjZDEyYjMxYTExNWY4MWIzMzZjNGFlNGVkZDQ0MjA0MzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH2tmPMZ+8djoJ9tcjrPcI0DerC5
FfszUmxK7cM9E6Q/Ix8dNGH15ea8eUy4z8TKUBD0CCG8V4CgH8p6Ff/omrgpq8nP
9Xe5lfK3fc226joK9w4J24tHzEVQbdPFVJgW2MkOfgfOGz982YbWNaYdcfYEIK5r
/QJ0D89f0nrv76Pww+n43sDBUiFspny/4DZrA4NtdnO7EqD0TFF41l8AnkK+eIii
lEUefzLLEPAEcyyWaTSUlX417hm3dPf4b+jPYMQODrSm6c7XmQg39zeHuPhWc2fA
9l0JPYw45u8DckeXvkT91cQx9HZ4Z89WJzy68fA6fvEGnm4Jt/fz2GxVJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOc5Pc0SsxoRX4GzNsSuTt1EIENGMB8GA1UdIwQY
MBaAFC7lJRY9wB3NMIm7Hc+wkS537a+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzkt
Y2M2OGRjODU0ZTg4LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzktY2M2OGRjODU0ZTg4
LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVYO1iXc
jmqaTTOZg5q7Wetb1MH/22LhtoaW4sfE+VVpzSLcIQ+nSZoMJdG54IbUA6332Vx4
6GXc2RBk9MaRvs5WbSi4bGAEMBsHamj/FS3poGGdWUN7q6Rp2f9QlhBCJ7jffrtC
aBUbhkH68PwB5b9TlWm3SU19a/mIHCKKCvDPs23bnyOJsCrP6gEPy3nWDn65gPM4
+6U3bcbFAI1jqfNN4qgjwbN9gdsSfS0mb0mfZBQY5v6b9k83L8iDTPE0XN+fC8eP
CWRY2IzA2QZrK3IShouLkuQuX8txxm29DCCsdHAAwgToSN76PPnrDqY4MDQYqXjY
SAkWou6fX7Wwpg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:10 2025 by rpki-client