Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
File: LubVYKCKAT8_4OZtra9v0Cvq9D8.mft (raw, json)
Hash identifier: 0AgbkcWXVSjP2qpHEGlQEV7upjnwIB/pEkyeihspGnQ=
Subject key identifier: 5D:75:77:79:68:84:59:17:9D:29:7A:1A:9B:96:07:10:B6:4A:2A:72
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 01987418B74EE2E848B4E60FD504DECB6232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
Manifest number: 1653
Signing time: Mon 04 Aug 2025 08:00:33 +0000
Manifest this update: Mon 04 Aug 2025 08:00:33 +0000
Manifest next update: Tue 05 Aug 2025 08:00:33 +0000
Files and hashes: 1: LubVYKCKAT8_4OZtra9v0Cvq9D8.crl (hash: e+XJY38870m70cUY/YcCKhD3gF2LgnW3Gi3UL7E19ao=)
2: xfTt7QwtZDYwpOqt-xtQurA5I0c.roa (hash: ZlEBp7t71aNEAPDDQ8kVF7//cmlxkwRPGVq3nvU6tPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:b7:4e:e2:e8:48:b4:e6:0f:d5:04:de:cb:62:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Aug 4 08:00:33 2025 GMT
Not After : Aug 5 08:00:33 2025 GMT
Subject: CN=5d757779688459179d297a1a9b960710b64a2a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9a:c7:60:e0:3a:a7:ed:06:71:0f:72:d0:6e:
2e:36:f3:b2:4a:11:50:6a:83:05:bc:36:61:4d:ef:
e3:83:a4:d6:ea:e7:8f:c4:f0:76:2f:45:64:12:9a:
4d:76:1c:d0:b4:94:57:af:27:f9:da:fe:5a:1c:cc:
91:f6:7c:50:e5:24:f9:c5:93:e4:1d:f8:30:ad:82:
45:9a:7e:39:2a:1a:f4:be:54:c2:9e:75:3b:c7:64:
5c:20:09:1c:9a:dc:b1:29:4e:75:c0:f7:fb:e2:e7:
fa:2d:2a:d4:cf:3c:fe:97:a2:b3:04:f6:a7:1a:61:
70:ce:0e:61:f2:58:3a:43:02:1e:af:f5:c1:7c:fc:
cb:be:73:af:7a:39:24:f8:76:09:b7:14:ee:c8:4d:
c3:44:c5:c1:93:27:25:ff:63:18:26:2e:4b:28:04:
ac:94:9f:3f:b4:43:4d:d5:81:af:25:62:03:ed:c5:
9b:2b:00:2f:c6:ae:ec:a7:4c:b8:c6:63:c4:42:fd:
3c:52:75:52:b5:20:e7:6f:b1:f0:f7:fd:54:e3:53:
af:26:2f:5b:87:78:c4:bb:4b:8f:f3:7c:5a:af:44:
8a:24:28:d3:22:43:57:8f:e8:82:e0:32:31:db:e6:
c2:20:e1:5a:da:36:17:41:18:69:01:2d:04:d0:3f:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:75:77:79:68:84:59:17:9D:29:7A:1A:9B:96:07:10:B6:4A:2A:72
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:eb:d7:c4:b7:c9:e4:2c:9a:88:e4:83:06:eb:19:f0:50:97:
73:f0:b2:19:13:c2:e9:cc:28:ee:90:a3:1e:d1:ee:7a:17:ee:
90:65:e8:9a:7f:8e:84:30:b3:0d:09:5f:35:bf:9a:4c:38:f8:
f3:d6:d9:39:51:88:6f:e3:d0:fe:d1:e9:e7:a4:2b:8f:c8:08:
60:e2:68:ce:a9:fc:b1:ba:88:9f:a3:2d:17:d5:d5:a0:49:7b:
a0:90:9d:92:c7:7c:4c:0a:e9:4e:6c:1f:68:da:d9:0f:d2:db:
24:32:bf:6d:49:c9:3a:e3:bd:4d:22:6b:cb:68:db:c6:07:a8:
53:d9:6b:b2:47:f7:04:59:d0:11:be:4b:80:10:77:b4:9a:62:
61:50:e7:4a:91:17:9d:51:44:03:c0:fd:54:01:aa:7a:b9:5c:
1e:e6:0e:4f:a6:af:84:8e:65:c2:d5:41:c7:1f:07:c7:7b:54:
eb:cd:b0:c7:77:b4:38:ea:97:b7:0d:67:9d:ae:0e:8d:5c:20:
3c:3b:05:ae:7f:f2:3a:5f:99:70:90:04:15:d1:d0:ad:d7:a8:
bd:74:80:75:82:5a:2e:4e:3a:7b:bb:29:0d:f1:88:c6:e8:1d:
89:54:42:08:99:df:e1:d1:7c:e7:f3:bd:2e:89:11:36:56:c5:
7d:09:04:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:08 2025 by rpki-client