Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
File: LUrgdxLkhC-A-oEAnTNbxICeZB0.mft (raw, json)
Hash identifier: 5HSeDGxxTmUUDpmbepjZ7E+bHHM4iGIjZN8CQM9ae24=
Subject key identifier: 3E:95:C1:57:B4:8A:41:27:45:87:44:CA:B8:4C:EC:1A:40:C8:2D:79
Authority key identifier: 2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
Certificate issuer: /CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Certificate serial: 0199FD343D879E6F9EB1599A68B7D07D5641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
Manifest number: 074F
Signing time: Sun 19 Oct 2025 16:01:23 +0000
Manifest this update: Sun 19 Oct 2025 16:01:23 +0000
Manifest next update: Mon 20 Oct 2025 16:01:23 +0000
Files and hashes: 1: LUrgdxLkhC-A-oEAnTNbxICeZB0.crl (hash: pr9lunjXsS1J/zoCMGTUhgq9UOUVKHUT+rmnUM3Ms40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3d:87:9e:6f:9e:b1:59:9a:68:b7:d0:7d:56:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Validity
Not Before: Oct 19 16:01:23 2025 GMT
Not After : Oct 20 16:01:23 2025 GMT
Subject: CN=3e95c157b48a4127458744cab84cec1a40c82d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:9c:b3:50:ee:4e:cc:df:4d:4d:71:ef:79:
3f:11:fd:70:3f:fb:5d:38:1c:7e:66:b7:1d:11:c6:
9a:d1:e6:8f:d7:54:8e:21:ac:b2:a2:e3:4e:3e:bf:
e2:d0:34:0f:bb:fe:9c:ea:e0:9d:65:a6:e4:c3:c8:
c0:b1:57:04:b7:07:53:c9:14:e7:b8:d2:37:95:66:
c0:de:eb:06:2e:c6:9a:9d:6a:75:1e:9c:4d:92:41:
14:e8:5b:52:52:ea:db:36:66:9b:79:c0:55:0c:72:
56:3b:01:92:20:3b:d0:65:71:47:af:d5:ad:0b:05:
f3:68:37:68:63:69:92:46:ab:5d:b6:09:31:85:ca:
7a:59:31:b4:0f:5d:7d:74:68:70:ea:6c:77:0e:4b:
18:4f:35:8e:5d:f9:c6:de:06:88:26:89:30:f8:75:
81:f0:bd:6d:04:74:0b:2a:e4:ab:20:c8:97:8f:56:
41:9a:5d:82:81:1c:19:3e:1a:48:fd:00:6b:44:5b:
4d:c6:00:b6:e5:0f:94:a2:58:a5:f8:dc:64:6f:45:
0a:67:c4:e8:09:db:35:31:c9:d2:3a:fb:6d:07:6a:
1c:b5:8a:97:49:72:52:95:de:95:ea:7c:c9:8e:1f:
c2:8b:c9:8c:d7:d0:87:18:5d:b9:4b:9e:d6:01:ee:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:95:C1:57:B4:8A:41:27:45:87:44:CA:B8:4C:EC:1A:40:C8:2D:79
X509v3 Authority Key Identifier:
keyid:2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ec:d3:e6:9f:6f:0f:85:3c:f1:43:e8:06:0b:20:85:e5:db:
fe:19:6e:18:58:dd:13:cf:9c:bd:c3:15:97:c7:93:93:bb:56:
08:d5:f2:5e:eb:ab:f4:4c:78:71:42:be:91:12:4a:ce:c1:26:
c5:a4:ec:0e:85:71:79:a7:30:49:b5:80:53:37:98:ce:47:91:
08:8e:74:79:61:ae:b6:49:40:65:42:9e:60:c8:c5:67:d4:1a:
c9:66:50:45:03:21:21:9c:cb:c8:35:4f:83:ef:19:41:4b:97:
2b:19:be:ec:d5:93:0a:46:3e:b0:3c:2c:df:4d:af:0b:18:72:
9d:52:6c:ba:79:45:d8:e8:45:65:50:33:c5:57:46:42:7c:cb:
5f:25:e8:47:49:52:31:d0:70:3a:29:84:9a:7c:e7:d5:7e:36:
7d:fe:04:e9:31:c2:89:03:44:3a:ff:51:4b:e7:ac:30:8f:23:
88:bf:61:a6:32:8b:60:89:f5:64:37:7f:71:4c:d8:ec:2b:25:
fa:97:d2:1f:e9:44:a6:51:ed:d0:59:ca:3e:11:11:b5:a3:c0:
32:2b:48:da:09:43:e3:95:d7:a2:59:4e:68:16:8b:a5:59:66:
1b:c8:e3:49:5e:80:30:53:1e:b0:e5:74:53:ac:e4:44:31:79:
6e:67:ef:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:11 2025 by rpki-client