Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
File: lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json)
Hash identifier: RJvzc2mK7PP7dvv7j+TUZaVgRTUB+p3NknyaNbW2cGo=
Subject key identifier: 89:B1:78:AA:24:A0:EB:6E:B7:FE:D7:EA:CF:8A:CE:B0:CF:34:16:9A
Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a
Certificate serial: 0198D515F53BE89D0B91E972EA303C0AFB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
Manifest number: 053E
Signing time: Sat 23 Aug 2025 04:00:42 +0000
Manifest this update: Sat 23 Aug 2025 04:00:42 +0000
Manifest next update: Sun 24 Aug 2025 04:00:42 +0000
Files and hashes: 1: GuRsW05KP8iWPMSp7vb_kToeinc.roa (hash: xtfuu25jYNsHOYwVnrJ3v+/nadbPfCZESTGZfRgdXIM=)
2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: HVXrDUD7c4TroDRmVmjjFun4NG13nrDa+jdR4W3wALM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f5:3b:e8:9d:0b:91:e9:72:ea:30:3c:0a:fb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a
Validity
Not Before: Aug 23 04:00:42 2025 GMT
Not After : Aug 24 04:00:42 2025 GMT
Subject: CN=89b178aa24a0eb6eb7fed7eacf8aceb0cf34169a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c5:75:64:c7:60:6c:c8:a7:3b:06:82:ae:33:
82:e0:cb:80:ac:cc:35:09:6e:f0:eb:01:d4:7f:38:
f8:b5:b4:f5:df:c0:fb:c1:44:b9:c8:ac:6f:65:64:
72:de:c8:41:67:21:db:55:b8:5f:e5:9d:18:06:27:
15:d3:5f:78:39:28:ba:a4:6e:6d:e2:4d:1f:2d:c8:
dd:70:47:7b:e4:cd:45:97:ca:bc:dc:e0:33:5c:7f:
2f:8f:02:1f:a2:ad:1e:1f:ac:4a:78:be:e9:6e:cb:
7f:52:6e:6d:15:a4:88:06:01:b5:16:f0:5b:d6:3c:
a0:96:77:bd:99:dc:58:c8:0d:7d:e3:89:71:ae:d8:
70:f4:a9:21:16:b2:e8:8a:dc:0d:57:6b:54:84:e5:
ad:43:fe:6a:be:6b:df:02:f1:f9:a0:ca:29:90:ea:
97:a9:80:ee:c1:a3:e2:7b:08:ce:42:e8:d9:aa:e9:
f7:75:b2:81:23:0b:a3:08:87:c8:69:19:e3:cf:8a:
3e:1c:23:c2:82:2e:92:70:bf:cf:5d:a8:ae:a7:e9:
1f:a4:73:c5:82:96:63:c4:f6:8e:51:f7:ef:85:d1:
7e:62:b5:5a:19:50:be:61:79:1d:25:01:72:53:76:
66:2e:f8:44:42:51:2b:61:d2:fd:bb:4e:b3:d7:ec:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B1:78:AA:24:A0:EB:6E:B7:FE:D7:EA:CF:8A:CE:B0:CF:34:16:9A
X509v3 Authority Key Identifier:
keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:97:4a:ac:b9:57:21:6b:dd:ba:76:6b:64:0f:92:45:76:07:
b4:ad:cd:d6:f5:11:b9:30:c5:f4:b5:df:ce:90:33:93:61:7e:
5f:30:43:8b:17:82:3e:e2:65:1b:02:f2:11:b6:17:4f:45:db:
29:6f:98:6a:7b:6e:77:56:62:14:cd:30:bf:04:c9:79:5e:fb:
18:85:81:8b:f2:b2:65:b0:1b:15:0d:ff:4d:43:c7:cf:71:8b:
8c:53:21:73:0b:9b:00:0c:1b:6e:c4:f2:27:23:fc:24:d9:1b:
87:98:7f:82:42:21:37:43:c8:3f:62:56:f4:72:fc:83:db:f3:
8c:9b:30:96:9c:57:f6:08:46:b2:58:1e:d2:2c:1f:2d:97:1f:
3b:e4:66:e0:67:3c:a5:31:a3:27:91:18:01:d0:12:2e:91:59:
cb:5b:54:ea:66:ca:bc:67:aa:7d:97:e3:dc:9c:09:e8:4f:df:
9e:92:55:78:a4:5d:12:e1:cf:c1:88:38:8c:39:3f:4c:ec:80:
9e:94:12:4d:a0:9e:a9:1a:bf:fc:6e:a1:e6:47:ca:51:16:e2:
f6:49:04:2b:6e:3f:cb:1d:2f:63:2b:2f:21:91:96:8b:7e:85:
e8:17:02:93:4b:b2:e1:1b:fc:c8:f9:25:8b:9f:d8:fb:1f:06:
2a:1b:c8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:34 2025 by rpki-client