Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: FbcZcYjIyxOZgcIM9ic9645JavTL1IjJGngwVkmpjCw=
Subject key identifier: 1B:AB:48:B0:F9:3F:9F:42:C2:69:FD:20:68:B0:04:50:09:8B:A6:30
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 01987D8B51ECB7CAF767DB40BD901C9828EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 04:02:19 +0000
Manifest this update: Wed 06 Aug 2025 04:02:19 +0000
Manifest next update: Thu 07 Aug 2025 04:02:19 +0000
Files and hashes: 1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: 82T5G6qrQwW+Ye4KoiiKotp9EcefeeRCaPcbiZekbuc=)
2: dr9TUWCMOOrZgw4ya4BHH6Fl9S4.roa (hash: MHmzUWCdf8/9JI0888l1CY7P5xnPYz06hMJxDs/OenM=)
3: g5NXYnWEAdkaK-Lr_Xc0-zmGZq0.roa (hash: iRJFMsAKyY3mWv0ViO4zwD2HGWC+kyCn/YQlP9uYKFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:51:ec:b7:ca:f7:67:db:40:bd:90:1c:98:28:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Aug 6 04:02:19 2025 GMT
Not After : Aug 7 04:02:19 2025 GMT
Subject: CN=1bab48b0f93f9f42c269fd2068b00450098ba630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:70:61:b0:fe:e2:e3:c4:4b:25:ab:ec:c3:
5c:b1:c6:7a:9c:ff:1c:bb:73:1c:f4:9b:47:88:47:
b1:26:ff:60:6d:0a:0d:84:7b:6b:6d:bd:24:ac:25:
6c:3c:88:61:93:13:86:b2:21:b7:6f:3a:2a:d6:d0:
b2:1f:d5:2f:07:cb:a1:d4:2d:d0:2c:69:73:f4:d6:
55:cc:a0:c1:b1:b6:77:ed:e7:50:9d:87:5d:72:b8:
91:e1:3b:08:a5:91:21:9f:42:9a:70:62:8b:4c:03:
68:4d:4c:08:a8:e6:39:2e:4b:f4:59:80:83:3e:a8:
a8:99:45:df:70:54:8d:58:94:13:e3:fa:84:68:25:
dd:9b:bd:05:d7:6c:64:0d:a5:54:01:5e:29:68:63:
45:15:f2:e0:14:fb:bb:dd:ec:f3:55:d1:a3:00:9a:
c5:ae:2e:d2:fb:4e:09:16:a2:de:cb:35:03:b4:1e:
f6:91:ff:33:01:3e:50:6d:7f:f2:dd:db:57:5e:9e:
e1:19:25:37:7e:e8:98:44:fb:91:ee:dd:3d:60:31:
29:37:ae:5e:7f:06:aa:dc:f5:36:a8:d9:5d:2f:28:
08:9b:25:4f:81:36:a4:ea:ee:c3:5d:8e:a3:38:63:
e9:b5:86:e6:82:c7:dd:f3:b7:46:49:b3:8c:d7:b5:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AB:48:B0:F9:3F:9F:42:C2:69:FD:20:68:B0:04:50:09:8B:A6:30
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ed:58:c9:b5:cd:16:6b:ed:ba:f3:71:14:38:f0:1e:67:0d:
9b:cd:c7:5b:8f:b3:33:7d:f1:44:84:09:da:20:49:7d:1d:5a:
80:72:6d:7c:db:eb:13:2a:c0:a6:de:14:6b:e3:af:e4:d4:d5:
1e:39:46:a0:5e:cc:e7:82:ac:66:30:18:d7:50:0b:25:7a:25:
97:af:42:88:c5:d6:b2:1d:8a:c9:7c:e8:6a:fa:c3:9e:aa:2b:
6c:21:89:d2:f8:3d:6c:d7:7a:e9:7c:fa:ee:46:d1:a8:4f:39:
bd:e0:42:02:50:fd:c1:1e:6a:e4:1d:62:3c:a0:89:a5:af:4f:
dd:14:36:5c:ea:56:52:8f:ea:ba:a0:8a:85:ae:0b:82:8e:62:
7c:be:9d:f7:54:2d:91:06:46:ba:b9:c3:9c:95:e7:90:59:c6:
35:17:a4:27:13:48:8b:c3:cc:65:bf:d4:4f:91:49:d2:2f:2b:
2b:47:eb:88:d9:c9:3b:23:90:5d:9f:52:38:35:3a:90:e4:6f:
5e:df:57:18:53:21:4c:77:29:97:46:75:14:17:a1:25:33:26:
1a:e5:d7:4b:ee:45:7a:8b:dc:65:a7:1b:74:10:ee:4f:b0:c2:
a6:3b:47:6f:b6:6d:35:76:8a:c2:7a:89:27:c6:32:c9:3f:2a:
ea:88:52:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:16:41 2025 by rpki-client