Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier: 57YKGLnrcPUsh5rb/3sh39xbvKA7yLH2txp4wWkeJ1k=
Subject key identifier: 7C:CF:56:F7:5C:13:B5:F7:4B:AD:BF:4E:0F:DA:44:60:C2:54:9E:6D
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial: 019A4FCFFAC8248892962922E2E6F03DD055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 17:00:21 +0000
Manifest this update: Tue 04 Nov 2025 17:00:21 +0000
Manifest next update: Wed 05 Nov 2025 17:00:21 +0000
Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: 6T/wQ96Nc5iSkjvQy9A70FaWPONjlEe4AxOr4yaRC1A=)
2: YnocbPb6eCTl7D0AAtuW-w6T8XI.roa (hash: 0/3lBvSnn24lW/dA1E4Lwb6/p+92YZin4bwE+8xDWMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:fa:c8:24:88:92:96:29:22:e2:e6:f0:3d:d0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Validity
Not Before: Nov 4 17:00:21 2025 GMT
Not After : Nov 5 17:00:21 2025 GMT
Subject: CN=7ccf56f75c13b5f74badbf4e0fda4460c2549e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:f3:d6:78:cc:3e:c7:ec:b2:64:f4:ee:38:
41:0b:6a:bc:3b:1d:7e:74:bb:25:ab:c7:8f:26:32:
e2:25:db:dc:b8:d3:30:47:6e:61:f9:f5:de:a4:66:
6a:0a:bd:d4:13:b2:55:b0:5c:2c:72:7c:59:85:e5:
f7:ea:48:64:0f:97:8b:75:02:ba:9c:2d:27:79:c0:
27:5b:af:fd:45:61:ca:05:68:c3:f3:26:d7:d5:c9:
f8:ba:6a:43:2e:28:e1:af:32:b8:64:0d:d9:69:c9:
2f:a6:10:67:d2:43:70:b5:ea:2e:cf:10:10:49:a4:
44:a7:72:72:58:8d:f3:81:e5:dc:fb:ba:34:ae:d1:
5a:89:9c:2f:ac:ca:01:f0:9d:25:60:38:ff:04:a7:
22:33:c6:da:02:56:03:f8:fb:c2:95:91:96:44:63:
4d:d3:de:a9:48:d0:10:b3:34:9b:e6:7e:bd:57:96:
24:07:42:e5:97:73:b0:08:fd:77:75:0e:4d:a5:1d:
ca:84:8a:ca:a6:11:01:7d:ed:3f:47:c0:1c:c6:67:
03:81:f5:30:b8:56:13:79:0a:63:76:cb:c5:78:cc:
d2:d8:5a:53:6f:ee:e4:12:a5:ef:34:82:ab:5a:81:
40:30:98:a4:8a:ac:36:d4:f9:31:b0:bd:86:12:44:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CF:56:F7:5C:13:B5:F7:4B:AD:BF:4E:0F:DA:44:60:C2:54:9E:6D
X509v3 Authority Key Identifier:
keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1a:dc:0a:1d:34:af:62:74:97:e9:1e:c0:4f:17:3d:99:2e:
7c:36:1e:38:6b:ba:ef:7c:cf:c3:e2:0c:12:86:c0:2e:3a:a5:
4d:f9:e2:03:a7:fe:a9:60:3c:17:1e:a9:db:9f:90:cc:fb:1d:
b5:88:37:3e:5a:2c:dc:b6:15:fa:e0:18:80:20:f3:bd:40:72:
a3:2a:69:27:53:a0:9c:80:5f:80:25:07:fa:f9:59:a2:c4:87:
79:8f:d9:45:44:75:43:5c:ba:59:5b:3a:0b:c9:b9:14:fb:eb:
eb:a7:02:d7:f1:05:97:ae:a1:47:3d:2c:f1:71:c7:77:41:65:
b7:d4:ac:dd:b7:f9:01:a2:8f:70:51:9a:8c:e6:45:21:53:9b:
b9:cd:b4:c8:13:17:f5:ea:b5:7f:a2:e3:17:73:8f:d6:bc:7c:
3d:06:40:4c:86:c5:47:9f:77:02:79:e6:6d:45:7a:fc:1b:e8:
11:3c:c8:79:29:1e:d9:9e:52:df:00:47:e4:3b:cf:7f:3b:80:
da:c3:9c:c1:38:8c:bd:77:2b:5b:62:6d:bf:a9:2c:33:e3:6f:
36:55:1b:19:f3:69:56:03:23:1a:13:62:ef:05:b5:d6:39:c0:
72:6f:a6:a7:92:0a:44:12:b7:13:98:c0:31:0c:01:d4:3e:86:
fd:f5:27:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:27:54 2025 by rpki-client