Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
File: lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json)
Hash identifier: k6ZWR2wSbjLGVBB95nyjcqnaEWyty6am1Lx2LKZlXPQ=
Subject key identifier: 9B:5C:53:62:D2:A9:DA:95:0C:36:66:D7:94:52:E5:9D:95:F1:84:05
Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a
Certificate serial: 0199FC8F7636FB0A2544CC0E4903244EF759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
Manifest number: 05D7
Signing time: Sun 19 Oct 2025 13:01:24 +0000
Manifest this update: Sun 19 Oct 2025 13:01:24 +0000
Manifest next update: Mon 20 Oct 2025 13:01:24 +0000
Files and hashes: 1: GuRsW05KP8iWPMSp7vb_kToeinc.roa (hash: xtfuu25jYNsHOYwVnrJ3v+/nadbPfCZESTGZfRgdXIM=)
2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: L81CP1o94yjQaUnQOtdz7YXrtTELs6SG4SqM7kVq1tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:76:36:fb:0a:25:44:cc:0e:49:03:24:4e:f7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a
Validity
Not Before: Oct 19 13:01:24 2025 GMT
Not After : Oct 20 13:01:24 2025 GMT
Subject: CN=9b5c5362d2a9da950c3666d79452e59d95f18405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:b3:8a:c9:ef:80:98:46:b4:6e:72:a1:33:
3d:45:b7:ae:3b:2f:53:ed:8c:21:fb:0d:78:a2:03:
00:1e:16:dc:5d:b2:73:b5:9a:21:16:53:dc:41:d9:
41:df:6f:77:dc:12:12:a2:ba:41:8b:02:8d:92:2d:
ad:e6:0e:5d:46:90:6e:ec:a8:92:0b:20:c3:4d:fb:
fb:64:63:6b:b6:95:7e:29:40:89:ae:d7:2a:e3:7f:
67:c0:8d:ab:61:8f:a5:5f:1e:2b:84:a3:b8:ce:fb:
19:cb:5d:b0:15:69:7f:6a:c4:5c:bf:84:b4:50:70:
a0:24:ae:75:46:37:b9:f1:df:38:8a:23:f0:d9:c9:
29:c6:6a:94:e3:19:88:18:98:2a:82:eb:cf:23:57:
63:50:b1:b4:d9:82:f0:ec:12:fd:0f:f7:b3:5b:23:
a7:d7:1d:37:46:b5:a5:01:da:36:ab:f1:1b:55:27:
36:82:1d:52:05:aa:62:2f:7a:a6:5d:77:7c:2e:f4:
ec:65:03:8f:3a:92:21:f6:0b:93:4a:42:06:5b:92:
09:3f:ef:f1:c5:f0:ac:99:e9:d9:ff:3f:bc:56:1f:
c2:54:24:e4:6d:c2:99:2d:79:ae:59:6e:a1:d2:50:
a3:0a:c6:7e:ca:76:d7:a7:1d:1c:bd:c5:b5:ff:c4:
d7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:53:62:D2:A9:DA:95:0C:36:66:D7:94:52:E5:9D:95:F1:84:05
X509v3 Authority Key Identifier:
keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8b:9c:6f:9c:df:91:40:b6:f5:52:08:00:df:63:7d:04:f0:
e3:e5:08:83:42:5e:46:45:12:1b:c8:ba:c5:ce:8f:90:3a:6f:
75:9b:15:e2:2c:70:25:88:d7:8d:32:59:52:cd:65:10:cd:cc:
f7:89:e8:4c:69:63:6c:43:f5:f9:75:27:b9:6c:55:a9:8e:1c:
98:82:88:bc:df:25:c3:54:32:a2:fe:e2:57:6d:25:19:03:90:
28:b7:45:ef:06:a3:68:4b:bd:25:cf:6c:ad:c1:3f:9e:ba:43:
a4:cd:f0:b4:b4:21:11:6a:4b:17:1b:90:24:aa:45:52:e7:9c:
46:bb:68:45:81:b0:22:ae:62:cb:03:8e:18:10:1f:07:7a:54:
d6:49:90:76:4b:ff:19:39:b1:61:df:76:8b:99:93:a0:9b:27:
35:07:ed:23:14:a7:b6:05:e7:7a:2f:73:e5:fe:ac:78:b7:7f:
f1:05:02:33:38:b7:39:f0:62:5d:af:3f:88:d3:b5:4e:45:39:
f8:ee:01:3e:f7:f4:07:ac:60:e7:e6:72:25:8e:4a:25:0d:63:
79:2f:a1:16:72:38:8b:f7:01:8f:1f:93:15:cd:27:48:c6:92:
1b:71:7e:36:6f:3f:01:97:cb:a9:f8:b9:b8:3b:e3:8c:f5:3a:
43:83:b4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:25 2025 by rpki-client