Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
File: LUFhUhEtrymCRCUnsPlE5IKFgy4.mft (raw, json)
Hash identifier: UVDOlpdkpDcSSn9tGEWQT0/VzUWZeucX6gDE/Y44/xg=
Subject key identifier: DD:72:C9:C1:76:DC:DC:AB:7D:75:F8:B5:99:AC:E8:F6:6D:A3:93:2E
Authority key identifier: 2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
Certificate issuer: /CN=2d416152112daf2982442527b0f944e48285832e
Certificate serial: 01988E463F7F7423436373B533488F7AAE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
Manifest number: 05A8
Signing time: Sat 09 Aug 2025 10:00:24 +0000
Manifest this update: Sat 09 Aug 2025 10:00:24 +0000
Manifest next update: Sun 10 Aug 2025 10:00:24 +0000
Files and hashes: 1: LUFhUhEtrymCRCUnsPlE5IKFgy4.crl (hash: hc5Hq0o0eyJZMK645PwrjlaI1C0RxZ92LzqEx34kcwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:3f:7f:74:23:43:63:73:b5:33:48:8f:7a:ae:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d416152112daf2982442527b0f944e48285832e
Validity
Not Before: Aug 9 10:00:24 2025 GMT
Not After : Aug 10 10:00:24 2025 GMT
Subject: CN=dd72c9c176dcdcab7d75f8b599ace8f66da3932e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:a6:d0:d8:65:b0:c5:95:8a:02:37:a8:7d:
6c:ad:80:24:de:09:b0:86:0e:8e:69:a0:d0:6b:f7:
0b:48:3e:ae:4f:03:db:78:69:c4:d5:29:3b:bc:d4:
dc:25:1e:cb:94:07:08:07:13:18:49:f7:92:01:62:
4c:5e:0b:6f:93:d3:4f:a6:98:8a:4f:6b:e9:9d:eb:
f6:26:eb:cb:e4:e9:e1:d3:41:a5:c9:df:1c:dd:09:
46:7c:42:16:79:23:38:21:18:0f:27:cd:00:b4:50:
17:10:3a:3c:8f:8c:38:3e:9d:44:21:91:3a:83:ac:
ef:28:0f:7a:d9:0e:51:b4:a5:c6:b9:22:5c:f2:e1:
b7:51:2a:e9:35:ed:90:4a:72:e7:28:79:9f:16:cc:
ca:c1:86:3e:51:17:6c:21:b6:a8:68:64:e8:66:db:
ed:fa:3a:35:f7:96:d6:90:82:ab:f8:72:3c:90:38:
c6:89:b4:80:4c:3a:86:e7:ba:bc:d0:be:bf:a6:a0:
4d:3a:2c:31:a8:a6:b5:12:84:a2:a8:70:ac:4b:59:
d9:21:8e:bd:4f:c5:02:c7:d0:0d:88:90:d4:d0:a5:
e5:9e:76:ec:92:15:fa:2f:2e:0c:61:8d:62:96:9f:
60:ef:f6:cd:fe:1e:7f:83:fb:31:bd:85:63:26:a8:
e5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:72:C9:C1:76:DC:DC:AB:7D:75:F8:B5:99:AC:E8:F6:6D:A3:93:2E
X509v3 Authority Key Identifier:
keyid:2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f8:d8:82:bd:a4:b5:fb:95:40:27:8a:fc:51:e7:b6:82:94:
7d:2a:d6:3b:a8:11:88:44:64:ab:ca:a3:05:5d:57:9f:5d:91:
a7:f0:58:7c:26:07:44:77:af:b0:61:8a:49:c3:5f:a7:9d:70:
a9:97:1e:9f:d5:84:26:51:4a:07:70:51:13:b9:c1:18:f7:7d:
5f:49:a8:23:99:00:57:06:b4:ac:b9:09:1d:04:7d:1b:2e:5a:
13:74:34:fc:20:4e:10:67:2b:8d:08:38:fa:1f:93:f7:ef:70:
20:f2:d9:8c:68:5f:81:ed:c2:ff:ad:09:49:0e:e3:80:08:cb:
7f:22:d2:87:69:54:1f:e6:b2:80:0a:dc:3f:8a:c4:3a:fe:3a:
77:7f:7e:da:d4:09:37:85:4d:3b:11:7a:69:2f:b8:ac:73:39:
a4:27:ef:20:35:00:fd:21:00:c0:d0:e8:9f:59:29:b3:bc:64:
be:fe:b6:42:79:9c:7c:ee:07:2e:5b:89:5d:85:48:18:51:3b:
7c:82:cd:83:c0:95:6a:14:2c:56:46:ba:eb:da:1a:5b:b1:b0:
6c:c4:f0:55:86:73:64:c3:20:d3:d3:72:b4:67:f2:27:4d:8a:
64:ee:af:db:f6:07:51:c1:aa:83:0a:4e:41:da:dd:6c:64:ae:
c3:ad:bc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:35:18 2025 by rpki-client