Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
File: luWtU7_HOEDEJXEcAQRTVxBX3CM.mft (raw, json)
Hash identifier: z2a2OZfpQnfIOKi2xHH41OOVQka8LbDktfzGFKdpzDc=
Subject key identifier: A6:5F:68:69:67:5B:A6:9D:E7:9F:19:45:F7:AB:EA:C5:58:22:54:BD
Authority key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
Certificate issuer: /CN=96e5ad53bfc73840c425711c010453571057dc23
Certificate serial: 0199FC2198D4CFB0F06AF1EE8B71D2DE2B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
Manifest number: 05CB
Signing time: Sun 19 Oct 2025 11:01:24 +0000
Manifest this update: Sun 19 Oct 2025 11:01:24 +0000
Manifest next update: Mon 20 Oct 2025 11:01:24 +0000
Files and hashes: 1: luWtU7_HOEDEJXEcAQRTVxBX3CM.crl (hash: DIHFEsMHQHSoqg48W/xx/kyc5lrD6/DcaklwAbdtCLE=)
2: vu4Plg05nKKxO7-zyqD-UVbYxtw.roa (hash: VNGXTJm2qjOCVOfzY/Ol932aR/HbK5RQpSPZuClIe/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:98:d4:cf:b0:f0:6a:f1:ee:8b:71:d2:de:2b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e5ad53bfc73840c425711c010453571057dc23
Validity
Not Before: Oct 19 11:01:24 2025 GMT
Not After : Oct 20 11:01:24 2025 GMT
Subject: CN=a65f6869675ba69de79f1945f7abeac5582254bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b2:48:ba:0d:29:63:6d:24:4a:2a:e8:66:00:
8f:7c:46:d8:ca:b5:86:4a:1c:8e:fe:fe:86:3a:b1:
a1:d0:f8:31:fd:27:0e:9a:03:c0:33:a5:80:7a:59:
26:0b:d6:35:cd:86:07:24:51:a9:75:92:b5:d5:b7:
94:fd:77:7f:ce:76:cd:ab:dc:fe:65:95:d1:8f:1b:
51:c6:26:e2:a8:14:14:f5:cd:2d:4b:2c:c1:15:9e:
02:d7:de:3d:f6:1e:25:4b:cf:61:2d:06:5c:7c:bd:
db:83:7c:a8:55:aa:39:3f:4d:e5:68:9c:9c:4b:f7:
d6:06:14:aa:54:56:39:1d:c3:f5:56:41:02:39:08:
4c:bc:9e:e1:5f:07:b5:dd:63:2e:76:da:9a:97:cc:
21:f1:e1:a1:fb:ef:23:8f:5d:44:eb:ab:e1:16:f1:
34:5b:6a:1c:af:ab:14:8a:4e:74:f6:2b:db:c9:dc:
f6:0e:f9:94:97:32:6a:ec:80:8c:64:7e:4f:ef:c9:
8a:86:26:f4:ce:40:63:40:8d:70:c3:77:dd:64:98:
60:79:73:94:24:b7:c2:e3:e6:ae:ef:64:e6:d9:aa:
72:0b:c7:0a:7c:3e:d1:ef:64:6a:43:3c:af:e8:04:
93:d7:f6:2b:c8:03:ad:18:8d:30:bd:c6:bc:ff:af:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5F:68:69:67:5B:A6:9D:E7:9F:19:45:F7:AB:EA:C5:58:22:54:BD
X509v3 Authority Key Identifier:
keyid:96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:36:d3:a0:0e:fd:76:9b:35:de:f3:83:98:67:d5:90:ee:19:
c8:e8:9d:90:73:66:42:36:72:a8:a1:95:c6:8f:fa:5d:96:9d:
22:f9:fc:f9:02:9f:89:6f:89:f5:b9:1c:4a:4d:cd:60:a6:9f:
2d:89:03:c3:9e:ab:4e:b5:2b:78:d8:4e:a1:33:16:a5:76:ee:
3b:76:70:23:74:2a:24:60:55:38:87:cf:3e:19:23:a8:41:d0:
4f:10:82:c6:36:ea:75:71:c7:b8:a4:21:77:41:be:fa:a4:9c:
7e:af:00:70:b1:34:43:4f:d4:d8:2f:ee:f2:e6:19:95:08:7c:
3f:a1:06:93:af:08:d1:e0:02:e3:e6:e7:8c:3b:cd:d2:91:b7:
40:c0:ff:5c:ed:a4:23:f6:dd:41:12:fe:34:65:fd:25:c6:b8:
15:dc:20:58:dd:89:da:d1:b4:57:35:38:9e:ce:e4:c1:ae:55:
68:4a:23:cd:63:9b:66:ba:e9:91:f6:59:f8:be:90:bc:2b:af:
16:93:64:a3:5a:67:6f:7b:d8:14:68:f5:96:3d:55:6c:37:61:
e7:87:d4:9d:a1:70:11:91:e2:29:e5:68:7e:61:6e:40:32:94:
8f:9f:cb:73:f5:3e:09:87:b5:19:3c:67:cf:c5:b0:93:31:f6:
36:fa:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:50 2025 by rpki-client