Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
File: luWtU7_HOEDEJXEcAQRTVxBX3CM.mft (raw, json)
Hash identifier: g/ABHoaVV8LH+nh5T8R8A0REPY7TxXttNKteLwsdvsI=
Subject key identifier: 26:99:AE:AE:90:2D:5E:C6:F4:78:C9:EF:E1:6A:04:A4:05:36:9A:04
Authority key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
Certificate issuer: /CN=96e5ad53bfc73840c425711c010453571057dc23
Certificate serial: 0198D69830A474D96A241EFA96262FCCAEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
Manifest number: 0533
Signing time: Sat 23 Aug 2025 11:02:34 +0000
Manifest this update: Sat 23 Aug 2025 11:02:34 +0000
Manifest next update: Sun 24 Aug 2025 11:02:34 +0000
Files and hashes: 1: luWtU7_HOEDEJXEcAQRTVxBX3CM.crl (hash: wxmTqc5q08yiKkr1cKHYqq1jb/KDbAyV+nH+/OFChis=)
2: vu4Plg05nKKxO7-zyqD-UVbYxtw.roa (hash: VNGXTJm2qjOCVOfzY/Ol932aR/HbK5RQpSPZuClIe/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:30:a4:74:d9:6a:24:1e:fa:96:26:2f:cc:ae:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e5ad53bfc73840c425711c010453571057dc23
Validity
Not Before: Aug 23 11:02:34 2025 GMT
Not After : Aug 24 11:02:34 2025 GMT
Subject: CN=2699aeae902d5ec6f478c9efe16a04a405369a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:23:99:d2:a9:19:44:dc:b8:52:6d:7a:b7:
b4:e3:d4:c5:73:91:01:af:1d:ae:d2:59:62:f0:49:
e9:61:b8:c2:bb:ac:d4:fe:f7:0e:07:33:79:67:36:
a8:3a:6c:3e:ef:9a:d1:3b:ed:45:5d:4c:fd:46:72:
e7:ac:87:50:e2:99:2d:c2:f4:75:bf:5e:a5:bb:d7:
61:0a:ab:db:d5:5a:58:1f:a0:8d:50:07:57:af:c8:
91:39:3e:35:fb:ce:c9:4f:2b:8d:b9:e4:e1:29:6c:
80:94:85:d8:86:86:f5:ea:da:bb:d1:ba:25:28:63:
ad:d6:61:01:96:79:00:04:be:a4:4d:c7:cb:b5:d2:
5f:be:45:01:3f:64:64:da:49:20:8e:a2:d3:d4:78:
9b:d2:52:f6:f9:de:bf:b4:ed:6d:f5:27:bc:b3:70:
02:f5:7f:14:b2:97:46:25:70:df:67:c9:85:ca:54:
66:13:f2:02:e0:c1:79:d5:18:22:4f:39:1e:4b:5a:
48:61:7e:22:4b:65:00:ad:b5:ff:d7:71:8a:60:b0:
b9:a8:4d:f7:7b:9b:4f:52:1f:71:4f:69:55:26:7f:
57:24:0e:fd:2c:a7:5a:19:b7:73:2a:7e:e7:df:45:
fc:37:54:d5:5c:24:35:ca:c1:b3:9a:90:2b:c9:f1:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:AE:AE:90:2D:5E:C6:F4:78:C9:EF:E1:6A:04:A4:05:36:9A:04
X509v3 Authority Key Identifier:
keyid:96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8f:ed:98:44:67:75:25:18:58:e1:ed:0b:21:ed:6f:06:b6:
0e:35:90:8d:21:fa:7d:c4:6f:c2:9f:35:73:00:63:8b:50:8f:
b2:5e:91:6f:e7:bd:34:18:ef:c1:b5:e8:98:ed:4c:f3:bc:31:
a5:c3:d3:fc:de:21:6a:4c:85:86:5d:5a:00:7d:3a:28:34:35:
d7:3b:01:42:ff:2d:8e:28:9b:0f:fe:fe:f2:7b:67:f2:36:c2:
32:25:8e:e1:ae:36:16:f3:42:94:ea:7b:d1:c5:54:f5:ed:ca:
d7:59:23:4d:1d:43:d3:16:24:82:27:77:b4:22:c3:04:60:6c:
83:92:a4:bf:50:3f:85:17:06:ce:24:1b:40:7c:c8:b3:65:c6:
c7:5a:5e:f8:37:43:82:e8:5f:c9:41:47:38:3d:05:13:04:c0:
88:dd:70:42:e0:6e:78:12:fe:1d:3c:8c:80:eb:c9:2f:78:b4:
23:4d:64:a7:6f:cc:be:84:75:d2:e0:a3:43:0e:5e:b4:b6:1e:
79:60:8f:ee:e4:8f:90:53:d9:a1:4f:8c:ef:2b:e1:08:08:41:
45:8e:9d:15:b0:cd:88:6a:4e:5a:8a:7a:16:ce:bb:4a:ca:00:
b4:4f:fa:e7:ce:27:e3:39:28:71:a0:98:bd:0e:33:dc:8f:fb:
ae:90:28:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:13 2025 by rpki-client