Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: EXj5phE8gsP6cgAJ4yX7iElYufEqQYgacwIYSTw4oJc=
Subject key identifier: 00:B8:A7:D9:A5:9A:63:17:86:77:52:EA:EE:53:D0:A3:F0:35:AD:3C
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 01976D3DD4FE6EE52B73FDA4810B51051BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 07:00:58 +0000
Manifest this update: Sat 14 Jun 2025 07:00:58 +0000
Manifest next update: Sun 15 Jun 2025 07:00:58 +0000
Files and hashes: 1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: 0dacY9MeU57L+OiXMxcUt8nkxayz2pzT3BNHKgnnmsw=)
2: dr9TUWCMOOrZgw4ya4BHH6Fl9S4.roa (hash: MHmzUWCdf8/9JI0888l1CY7P5xnPYz06hMJxDs/OenM=)
3: g5NXYnWEAdkaK-Lr_Xc0-zmGZq0.roa (hash: iRJFMsAKyY3mWv0ViO4zwD2HGWC+kyCn/YQlP9uYKFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:d4:fe:6e:e5:2b:73:fd:a4:81:0b:51:05:1b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Jun 14 07:00:58 2025 GMT
Not After : Jun 15 07:00:58 2025 GMT
Subject: CN=00b8a7d9a59a6317867752eaee53d0a3f035ad3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:e1:c4:7d:2c:05:ed:be:ac:3c:37:80:0a:
d8:0b:6c:2a:d6:45:ac:48:a2:16:83:f5:45:c2:dc:
33:25:bb:a6:80:6b:07:74:ee:36:2d:c1:0f:bb:be:
8b:c7:6a:1b:7e:d2:50:92:b0:e4:05:4e:68:76:e1:
8a:c5:78:39:8d:a3:de:ea:56:fb:65:e0:15:1f:d5:
e4:97:11:5f:45:66:72:63:b2:be:a6:8b:91:39:5d:
d4:77:eb:35:52:9f:fa:e9:f2:06:a4:bb:dd:86:da:
58:94:c3:65:53:1e:18:6a:a2:8f:9f:16:bd:81:b9:
11:fe:8a:81:2a:3d:97:73:5b:3f:60:f8:c7:11:a1:
15:2d:af:e0:eb:86:4e:1b:4e:ae:a0:80:5a:91:c6:
21:27:f1:a7:21:06:2c:07:0d:e9:d4:eb:1e:39:bf:
80:70:f3:e9:be:b3:63:fd:28:e5:fc:15:36:b6:df:
42:58:0a:b3:f7:99:90:72:9e:68:cb:bc:69:00:ec:
1e:e6:66:e1:5b:be:85:7e:40:93:41:a6:af:16:0b:
6a:91:16:84:a9:70:e7:7d:26:2c:ca:f4:55:1f:ce:
50:fc:a9:69:d8:97:83:4e:96:dd:3b:71:e7:32:98:
19:4b:25:ff:ff:bf:4a:b8:fd:c2:1d:10:ef:8e:b3:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B8:A7:D9:A5:9A:63:17:86:77:52:EA:EE:53:D0:A3:F0:35:AD:3C
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:50:a7:aa:94:1c:30:a2:40:39:0a:e1:5f:47:6f:fc:f3:d8:
16:48:14:5f:05:08:8a:b2:8f:f9:cf:4f:08:04:53:4f:98:a3:
bf:b3:9d:24:ac:d8:b8:97:c0:81:d5:ed:05:0f:4a:02:f6:36:
dd:03:d3:da:96:30:ea:47:79:d3:46:37:9a:2c:e1:31:f8:af:
cf:b0:80:14:e6:e9:0e:9c:18:4b:b1:ef:08:1b:28:4b:1b:7a:
a5:0e:ec:80:75:98:fb:68:91:ae:65:19:44:13:3a:65:e1:39:
7e:c0:d3:0b:78:43:7f:4e:8f:92:bc:0f:dd:08:8f:de:2b:7f:
35:ae:32:ef:58:cc:b2:b3:58:7e:67:23:4a:6c:d3:d0:dc:b4:
b2:05:1b:e4:9f:23:13:d2:b7:f7:60:9b:ed:c4:63:78:c2:08:
e2:09:86:6f:ec:42:cc:03:2d:02:66:c9:5b:28:4e:be:46:cd:
66:b5:2c:29:cb:3c:dc:ec:8d:2b:81:b0:a0:c9:7c:75:e6:e1:
ee:1c:c1:0f:d5:cb:01:92:e5:52:7a:84:fc:d0:35:0c:8b:5f:
b8:30:5e:73:11:aa:98:53:11:a0:42:3b:d7:ce:62:5f:d9:e5:
7d:d1:dc:9b:75:15:04:2e:43:14:e4:27:1a:05:0c:e8:8a:db:
87:ab:c9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:08:24 2025 by rpki-client