Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier: Vij12h4xVbOQxoL/AaansPOnkLBc9gZbhe9enzFFN5U=
Subject key identifier: A3:A8:68:17:26:07:4B:56:8F:23:63:B3:97:CD:15:F7:D4:F2:95:A7
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial: 019893A3E1A7B1C2DD8E7EA1B17EFFE29EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number: 162B
Signing time: Sun 10 Aug 2025 11:00:47 +0000
Manifest this update: Sun 10 Aug 2025 11:00:47 +0000
Manifest next update: Mon 11 Aug 2025 11:00:47 +0000
Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: bec0jgiX9QezWGY+ZSRy2+XW2NwYs0k5/mi4Of3fsHQ=)
2: YnocbPb6eCTl7D0AAtuW-w6T8XI.roa (hash: 0/3lBvSnn24lW/dA1E4Lwb6/p+92YZin4bwE+8xDWMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:e1:a7:b1:c2:dd:8e:7e:a1:b1:7e:ff:e2:9e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Validity
Not Before: Aug 10 11:00:47 2025 GMT
Not After : Aug 11 11:00:47 2025 GMT
Subject: CN=a3a8681726074b568f2363b397cd15f7d4f295a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:86:1b:1c:53:cb:72:15:29:ea:93:62:1f:
8f:91:10:71:e4:a7:07:56:be:08:24:8c:f2:ff:27:
7f:b8:b7:70:96:0c:9e:ae:2f:f8:86:d7:88:6d:73:
77:9f:52:e8:60:10:4d:a2:bb:1d:2e:f0:d9:ec:c2:
d0:29:4d:63:26:d4:cf:66:27:95:9f:79:01:72:e5:
b4:50:d7:2f:6c:ca:c3:0e:35:9b:e2:dc:4d:9b:1a:
0e:6f:b9:68:f0:bf:ad:5e:c4:60:45:d0:ff:fb:b0:
21:0f:17:af:99:87:9c:46:6c:5c:3f:37:01:25:16:
f1:4e:7d:0c:dd:8a:e5:28:9d:56:2f:b9:d4:17:da:
7c:23:f1:50:db:91:b4:44:a4:d9:36:e5:e7:19:c3:
8e:9e:ee:ca:d1:97:96:10:23:dd:7c:5c:b9:33:56:
b4:92:07:6b:ae:fc:79:7a:d6:ea:2d:39:12:7c:34:
a5:71:b5:8b:dc:18:f3:48:5f:07:9d:87:8f:62:05:
b3:7d:9c:f9:93:f5:d0:9d:27:73:60:88:7d:1a:8b:
e5:a0:61:05:5e:dc:2e:31:3f:da:eb:b0:b8:b6:12:
8e:75:34:3f:ce:81:cd:3b:b2:49:a1:b9:d0:a1:2d:
5d:49:70:8c:06:9f:20:1d:56:b6:c7:4b:cd:fb:a4:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A8:68:17:26:07:4B:56:8F:23:63:B3:97:CD:15:F7:D4:F2:95:A7
X509v3 Authority Key Identifier:
keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bb:bd:85:5c:d1:d9:2d:fd:72:9a:d5:f9:86:40:6d:0c:02:
57:62:0d:fd:0c:0d:c0:95:fe:a5:2d:bb:e8:a4:4f:a9:82:e9:
d8:44:28:57:ce:cf:d2:ed:67:ac:57:c9:d9:cc:e8:da:fb:29:
f7:27:90:0c:ec:a2:79:3f:b2:19:16:4d:2e:4c:a1:42:f8:50:
ad:58:13:c9:10:a5:ee:53:5d:1d:ad:78:b1:36:04:50:01:bb:
81:b2:ba:2b:44:e4:03:4a:29:11:b0:ef:03:4c:9d:a3:0a:fe:
7d:96:e7:ad:d8:39:d6:46:4b:0a:38:c5:cf:fc:81:86:ab:e3:
a5:fe:bb:f7:17:cf:f6:c8:fc:95:0e:9d:47:45:85:ec:20:47:
b0:b0:0e:52:7f:02:e3:60:54:f4:37:f8:2c:34:1d:b5:7c:43:
b2:33:da:99:26:e9:9e:f7:99:5c:a7:ba:4e:a0:b4:6c:91:ab:
99:ea:3e:71:14:7f:3f:a0:aa:9a:b6:44:80:dc:ee:3b:42:25:
1d:4d:4d:bc:de:8a:8e:18:ae:1d:af:4e:8f:fc:68:fc:03:7d:
15:23:b0:89:f0:7f:46:66:b4:6a:8d:5c:ad:aa:a7:9e:96:3e:
36:38:24:ce:f0:41:be:65:ba:c0:72:f8:1d:b9:9b:05:53:09:
dd:54:0b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:07 2025 by rpki-client