Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier: Pg7jFpX5ttiMYvv+JW9+xW6n/SBR3sPhUNcVf4KWDiU=
Subject key identifier: 2B:6A:45:F0:C7:93:FF:DF:4C:02:6F:CC:A1:FE:1F:68:33:5D:9D:A3
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial: 0196BE5C41D0244E011DFE649E5C16585E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 08:00:39 +0000
Manifest this update: Sun 11 May 2025 08:00:39 +0000
Manifest next update: Mon 12 May 2025 08:00:39 +0000
Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: QKXzsRRAXm8HMhBeyWWu5PnMbIW512E4URWdLYVc7jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:41:d0:24:4e:01:1d:fe:64:9e:5c:16:58:5e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Validity
Not Before: May 11 08:00:39 2025 GMT
Not After : May 12 08:00:39 2025 GMT
Subject: CN=2b6a45f0c793ffdf4c026fcca1fe1f68335d9da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:f1:e1:a4:d6:9d:44:ba:db:27:81:5a:cc:
86:00:16:3a:8b:dd:5c:9c:2e:f4:35:ae:fa:65:12:
01:87:5d:19:05:df:9d:ef:d6:7a:d7:6f:f6:ed:27:
97:08:bf:4e:4f:d3:1b:1b:b9:7c:26:c5:21:09:20:
91:9f:e7:f2:d2:62:42:07:31:88:b2:e2:ab:56:88:
17:ff:33:e6:f1:9e:65:53:cb:6e:14:ea:b9:73:89:
77:2a:e6:f3:86:2a:b7:cc:f4:8c:a3:32:c0:d5:0a:
38:b1:1f:e3:42:a1:9b:16:52:49:6c:a2:e7:07:2d:
e0:d0:1b:fa:2d:90:18:9c:b4:d5:b5:a9:17:95:df:
80:aa:b9:c8:b2:94:25:34:a5:7e:48:4c:1b:33:26:
6b:6e:9d:02:12:00:f5:91:bb:f0:ec:87:78:93:e7:
21:11:84:bf:2f:c3:16:14:87:32:27:20:0b:c9:00:
fe:89:12:25:f9:f2:35:b3:91:25:3a:42:1e:11:37:
5f:f7:b0:46:4d:b3:e1:d7:4b:ed:df:34:f3:00:e7:
90:94:8a:81:8b:8a:0e:fe:0f:7e:f6:cd:c0:4c:b8:
49:5f:13:56:3a:c0:71:dc:73:7b:e9:b3:c8:04:7f:
19:64:69:10:81:ad:cf:33:f0:1e:0d:8b:1b:05:7f:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6A:45:F0:C7:93:FF:DF:4C:02:6F:CC:A1:FE:1F:68:33:5D:9D:A3
X509v3 Authority Key Identifier:
keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9b:9a:ce:9d:2c:fe:bc:2d:4f:44:2f:53:03:70:de:c3:fe:
70:03:b2:ff:34:81:06:11:f5:98:86:92:3b:0c:71:0a:2d:35:
0e:ce:80:2a:3a:26:0d:20:5a:12:a6:64:1b:2e:d6:5a:c7:81:
b4:06:6a:5a:69:d6:a3:43:ba:92:7a:22:1a:30:6d:b3:b8:3c:
35:23:d2:dc:df:9b:76:e3:47:0e:81:d5:6d:b5:56:90:c4:3a:
4e:f1:a7:67:45:e8:6b:15:49:90:49:0a:c4:23:15:6d:80:e6:
7f:1f:71:e2:7e:b9:1f:89:b1:09:82:61:05:c8:86:25:64:5d:
80:9a:d5:10:66:ad:1a:a7:4c:3b:e9:60:f5:ef:55:14:21:a8:
7d:3c:e2:c1:89:ef:53:e3:06:3a:af:86:6e:93:8e:14:5b:a4:
7d:fc:53:d2:2b:42:f0:5d:ac:cc:74:e2:d6:a9:82:8f:69:af:
66:36:da:5a:0c:22:83:61:63:c6:ca:02:ac:07:66:80:9e:27:
05:6e:e6:30:f2:11:85:36:b2:59:db:ed:c6:ed:90:7d:35:62:
a9:25:a8:eb:21:6c:b8:b0:23:a4:84:aa:54:14:18:d1:02:ad:
83:22:55:5f:dd:c1:5f:ee:0c:23:75:fe:a6:7a:79:c2:c2:af:
30:1f:28:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XEHQJE4BHf5knlwWWF58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTUyNTE2M2RjMDFkY2QzMDg5YmIxZGNmYjA5MTJlNzdl
ZGFmOTgwHhcNMjUwNTExMDgwMDM5WhcNMjUwNTEyMDgwMDM5WjAzMTEwLwYDVQQD
EygyYjZhNDVmMGM3OTNmZmRmNGMwMjZmY2NhMWZlMWY2ODMzNWQ5ZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7bx4aTWnUS62yeBWsyGABY6i91c
nC70Na76ZRIBh10ZBd+d79Z612/27SeXCL9OT9MbG7l8JsUhCSCRn+fy0mJCBzGI
suKrVogX/zPm8Z5lU8tuFOq5c4l3Kubzhiq3zPSMozLA1Qo4sR/jQqGbFlJJbKLn
By3g0Bv6LZAYnLTVtakXld+AqrnIspQlNKV+SEwbMyZrbp0CEgD1kbvw7Id4k+ch
EYS/L8MWFIcyJyALyQD+iRIl+fI1s5ElOkIeETdf97BGTbPh10vt3zTzAOeQlIqB
i4oO/g9+9s3ATLhJXxNWOsBx3HN76bPIBH8ZZGkQga3PM/AeDYsbBX+iBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtqRfDHk//fTAJvzKH+H2gzXZ2jMB8GA1UdIwQY
MBaAFC7lJRY9wB3NMIm7Hc+wkS537a+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzkt
Y2M2OGRjODU0ZTg4LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzktY2M2OGRjODU0ZTg4
LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapuazp0s
/rwtT0QvUwNw3sP+cAOy/zSBBhH1mIaSOwxxCi01Ds6AKjomDSBaEqZkGy7WWseB
tAZqWmnWo0O6knoiGjBts7g8NSPS3N+bduNHDoHVbbVWkMQ6TvGnZ0XoaxVJkEkK
xCMVbYDmfx9x4n65H4mxCYJhBciGJWRdgJrVEGatGqdMO+lg9e9VFCGofTziwYnv
U+MGOq+GbpOOFFukffxT0itC8F2szHTi1qmCj2mvZjbaWgwig2FjxsoCrAdmgJ4n
BW7mMPIRhTayWdvtxu2QfTViqSWo6yFsuLAjpISqVBQY0QKtgyJVX93BX+4MI3X+
pnp5wsKvMB8oyA==
-----END CERTIFICATE-----
Generated at Sun May 11 13:37:06 2025 by rpki-client