Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
File: LUrgdxLkhC-A-oEAnTNbxICeZB0.mft (raw, json)
Hash identifier: I6NIJzsb01mrYRS0n+abe2DfP7x5CRAA0YaENZGzKS4=
Subject key identifier: E8:3A:0F:F8:F2:9D:AA:8B:AD:E2:3B:CA:90:28:D1:36:C5:09:4D:1C
Authority key identifier: 2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
Certificate issuer: /CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Certificate serial: 0198D7A8F88FA0AA990D446B40C2F31856BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
Manifest number: 06B7
Signing time: Sat 23 Aug 2025 16:00:31 +0000
Manifest this update: Sat 23 Aug 2025 16:00:31 +0000
Manifest next update: Sun 24 Aug 2025 16:00:31 +0000
Files and hashes: 1: LUrgdxLkhC-A-oEAnTNbxICeZB0.crl (hash: rHZ7LYct4gv5sgZCkeywwKyqKlMv+8oiBVzpI1igLzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:f8:8f:a0:aa:99:0d:44:6b:40:c2:f3:18:56:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Validity
Not Before: Aug 23 16:00:31 2025 GMT
Not After : Aug 24 16:00:31 2025 GMT
Subject: CN=e83a0ff8f29daa8bade23bca9028d136c5094d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:94:bc:e0:ab:0e:c8:f9:e2:b4:b1:51:26:
8c:35:87:f5:72:25:57:e4:d8:e1:7d:3e:fa:24:73:
fc:73:f9:f4:97:33:4e:30:3b:5c:2c:02:fe:6e:2b:
05:ea:dd:33:e9:40:0c:43:77:3b:04:a9:db:c2:2a:
6b:41:f4:60:c7:10:58:cd:2e:e9:ba:3d:e9:ee:7a:
72:1d:9d:de:40:bf:ca:82:ca:39:b6:c4:ac:b8:42:
95:fb:12:31:f8:e6:fb:69:83:59:23:6f:a9:79:af:
0e:d4:85:08:06:40:50:17:0a:a5:e2:a5:d7:57:65:
92:17:c6:77:5c:95:4f:5b:d7:41:26:7c:4b:f1:88:
af:38:9a:c5:f3:ea:6c:9e:f6:76:3a:03:73:73:d7:
9d:a3:6b:11:97:d0:b7:ae:b4:9d:45:f3:58:29:bd:
7f:88:7b:b8:1a:b6:46:4b:cc:dc:64:ef:8b:4b:c1:
9f:d8:24:03:5a:86:d4:25:4b:c5:27:5e:1d:84:4d:
12:c4:1a:d5:68:8f:b9:99:8f:7a:92:19:8d:8b:16:
23:40:10:f0:12:ac:31:1f:3f:74:b8:e2:6c:e3:45:
4c:58:be:fc:bb:ef:65:26:e4:75:87:2e:66:99:50:
3b:87:07:ae:c1:5d:62:cc:02:90:53:be:90:e7:11:
09:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3A:0F:F8:F2:9D:AA:8B:AD:E2:3B:CA:90:28:D1:36:C5:09:4D:1C
X509v3 Authority Key Identifier:
keyid:2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c3:01:3a:41:ef:e2:7f:26:46:ec:45:e9:d3:82:a3:38:d0:
dd:8c:37:f5:05:cb:e4:f6:f6:e2:db:7c:b7:2c:71:a4:e8:36:
93:63:a6:5b:9f:79:a7:0a:5b:3b:3f:14:a1:6e:8e:d5:f8:a5:
2f:a4:1f:16:2a:fe:cf:97:8a:dd:78:df:42:dd:df:cb:c1:ec:
30:74:85:0c:35:3a:ab:37:1c:9a:85:4d:e2:1a:8b:46:98:fc:
0a:64:a4:eb:97:d8:34:b0:4d:9b:ad:80:7a:0c:a2:67:f5:42:
fb:2e:a5:47:c1:d1:27:63:f1:ee:14:ba:89:88:1f:ea:27:90:
db:3c:1c:17:c0:f2:97:92:1e:91:cb:82:69:3e:8b:d9:93:69:
c4:e2:e7:4f:7f:a8:31:c5:91:78:61:75:f1:af:de:50:3e:0b:
7e:f1:7d:b0:18:61:a5:1c:88:da:77:9d:5b:25:2e:fc:86:09:
e3:aa:2a:86:cc:73:d2:61:e1:07:33:45:3d:52:37:21:26:2b:
44:a7:b2:2c:20:d2:5e:cb:1a:6d:d3:16:de:dc:bd:a9:bd:d2:
ff:d4:c8:38:ae:10:1f:3d:80:79:30:f9:28:0e:12:df:e2:00:
90:94:f8:d6:6a:91:f2:04:7f:c6:42:46:2c:11:73:18:24:73:
e8:db:3b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:31 2025 by rpki-client