Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
File: LUFhUhEtrymCRCUnsPlE5IKFgy4.mft (raw, json)
Hash identifier: wS52mjl9kBdFoFXJp/fYd3+liv8fQBuGtj6j4tQxojk=
Subject key identifier: A2:8E:56:16:6A:A4:08:7E:F9:91:38:D8:E8:D3:F7:16:99:81:0A:7A
Authority key identifier: 2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
Certificate issuer: /CN=2d416152112daf2982442527b0f944e48285832e
Certificate serial: 019A503E41109D58895C7F2D6DB7B43B8D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
Manifest number: 0691
Signing time: Tue 04 Nov 2025 19:00:48 +0000
Manifest this update: Tue 04 Nov 2025 19:00:48 +0000
Manifest next update: Wed 05 Nov 2025 19:00:48 +0000
Files and hashes: 1: LUFhUhEtrymCRCUnsPlE5IKFgy4.crl (hash: oYaM9+zTsLvyzGFXlRe8wwqgaH2bpHHFO/9V6zN5jLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:41:10:9d:58:89:5c:7f:2d:6d:b7:b4:3b:8d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d416152112daf2982442527b0f944e48285832e
Validity
Not Before: Nov 4 19:00:48 2025 GMT
Not After : Nov 5 19:00:48 2025 GMT
Subject: CN=a28e56166aa4087ef99138d8e8d3f71699810a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:05:94:32:72:d1:ea:3d:31:30:3c:a7:8f:
20:18:bd:26:f1:c0:c2:84:00:5d:c7:98:53:75:a3:
b5:0d:07:b6:0f:04:74:1e:b2:9c:38:4d:99:9c:4e:
eb:26:ec:22:21:4c:04:9a:81:d9:7c:26:61:32:76:
c1:56:0b:1a:44:66:06:3b:de:5f:72:31:74:66:69:
e1:eb:45:25:2b:81:1e:68:57:9e:bd:b0:65:a9:0c:
60:7e:23:84:db:b8:a5:0e:aa:8a:81:df:34:7c:96:
c5:e6:4a:6d:67:f8:43:18:17:0f:f8:94:67:93:c1:
b5:95:e0:79:a1:4f:45:dc:f8:63:04:36:38:68:cd:
d6:5a:50:3c:90:3f:bf:f7:67:18:d3:d4:ad:fc:5c:
e3:4c:f9:a7:fe:a8:77:f1:80:e1:68:a4:fb:21:5d:
82:7e:a4:fe:cf:25:3d:c9:cc:2d:2e:a2:c7:23:4b:
b5:d0:75:c6:a9:43:31:43:a9:eb:31:59:13:e4:7c:
ac:f9:73:ca:1a:d7:2a:61:75:75:fe:0a:82:1b:12:
02:23:e1:d6:5f:c7:bd:7b:e8:23:44:b1:8b:8d:42:
07:bf:06:12:55:80:e4:a9:94:65:ab:73:ab:20:65:
77:33:4f:c8:66:17:26:90:f6:c5:66:f1:45:9c:80:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8E:56:16:6A:A4:08:7E:F9:91:38:D8:E8:D3:F7:16:99:81:0A:7A
X509v3 Authority Key Identifier:
keyid:2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6c:bf:2f:7b:9d:6d:27:1e:96:72:dc:51:d2:b7:64:7e:25:
aa:83:93:08:3e:85:fd:7c:2e:1a:b9:27:51:10:4e:21:b2:8e:
6d:7c:72:0e:e4:1d:4e:6c:a8:c1:33:8c:8f:cb:a3:7e:eb:48:
86:32:c2:51:d1:fd:f3:e0:c0:b3:b7:d8:50:63:04:a1:eb:e5:
5d:4c:f7:f8:a5:ff:cb:71:63:e7:ef:d0:53:40:44:b6:78:80:
c7:d5:04:a4:ad:87:cd:a1:24:aa:45:40:7c:b7:8e:dc:a0:61:
9f:42:38:5d:45:6b:a0:83:53:54:c5:9e:af:6c:20:4c:d1:c2:
51:bc:ef:1f:c3:b4:37:01:51:e6:da:17:a0:9f:18:6e:92:d2:
12:32:bf:5b:3e:e6:af:b3:6a:92:90:7b:a5:75:4e:ee:b5:fc:
11:72:1e:48:63:8b:91:9c:fc:c6:90:6b:d6:9c:2a:d1:95:97:
66:7e:a7:3c:04:bb:1d:d0:ed:7f:eb:0c:78:46:6b:e5:26:5e:
70:3f:7b:2b:61:47:04:ab:40:16:64:97:01:68:1f:48:6e:e4:
13:68:56:c6:60:5d:c5:b8:89:d9:95:6c:09:b8:9c:5e:3e:bc:
cb:9c:49:5d:09:59:d7:d1:8d:ba:94:85:9d:1b:c0:a2:bd:c4:
e7:ef:a2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:26 2025 by rpki-client