
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier: ND/ODwa99nrdFff38XamusmeMa8j3b/nAKv2Ay7W5wI=
Subject key identifier: AA:DE:D8:3C:94:87:81:19:BC:21:74:21:74:CE:ED:14:81:4C:18:2E
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial: 0198880E19C8CC4C8A529A0BCB770BAAB4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number: 161F
Signing time: Fri 08 Aug 2025 05:01:22 +0000
Manifest this update: Fri 08 Aug 2025 05:01:22 +0000
Manifest next update: Sat 09 Aug 2025 05:01:22 +0000
Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: GsBsHKN4lITO2BcKydL+jQUJ0SLMuUj/X/1kTaRT2NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0e:19:c8:cc:4c:8a:52:9a:0b:cb:77:0b:aa:b4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Validity
Not Before: Aug 8 05:01:22 2025 GMT
Not After : Aug 9 05:01:22 2025 GMT
Subject: CN=aaded83c94878119bc21742174ceed14814c182e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:85:be:fb:71:63:6f:f0:cc:fa:a2:7d:e3:
46:16:10:51:de:21:0f:3d:4b:59:1f:41:44:dc:4d:
d3:86:1d:8f:d8:da:90:f5:93:68:96:1c:37:5d:d7:
6c:5d:7f:ab:c2:a2:6a:3b:20:c5:c7:15:cc:8e:4c:
28:cd:12:19:46:03:de:d7:a0:f5:12:f9:c5:1f:56:
a9:cb:f7:84:15:31:3a:9d:10:89:a4:1c:d2:84:b1:
c6:55:99:9e:61:6c:db:76:52:4f:ed:fa:76:05:c6:
41:b9:e1:64:82:20:a7:fa:7d:35:b2:15:30:4e:85:
b3:e2:20:b5:5e:70:75:bc:0b:13:8a:14:e8:d0:cb:
b6:59:b3:4c:20:f5:2a:df:ac:d5:2d:85:c9:90:ca:
33:7b:cb:5b:94:7e:36:73:96:1e:58:eb:40:04:42:
00:cf:d6:77:04:2c:38:54:06:96:1a:b5:ca:62:73:
71:62:73:5a:9a:bf:bd:8a:ac:00:1b:52:83:05:c0:
63:e7:94:f0:d0:18:a6:e9:5f:7c:b5:a3:02:9d:b5:
3c:98:09:06:29:ea:af:ee:65:ee:ed:3c:97:cb:a8:
52:47:2d:77:38:1e:ef:d2:9b:a0:fa:6b:be:82:ff:
04:74:83:59:31:09:06:99:77:bc:ff:11:a8:26:49:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DE:D8:3C:94:87:81:19:BC:21:74:21:74:CE:ED:14:81:4C:18:2E
X509v3 Authority Key Identifier:
keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fd:90:0e:13:75:59:bc:9f:76:51:5f:52:78:ff:bb:da:4a:
79:96:61:9c:8b:9a:34:a6:bb:ab:70:57:2d:8b:02:70:80:e6:
28:da:1b:aa:87:ab:00:a6:14:50:0d:ea:46:e7:33:c5:2c:31:
75:95:94:05:6e:e3:7c:6f:fc:2c:cd:55:3d:16:93:88:8d:a6:
eb:f6:65:fa:02:6a:ee:87:24:01:05:63:59:0e:52:4b:ee:45:
8e:2e:f1:ec:3c:d7:7e:ea:51:f8:c2:5a:02:c3:63:69:b0:d5:
47:fe:91:77:50:3f:d1:e6:7f:8f:1c:2d:c4:1b:ba:fa:5a:54:
6a:1b:de:64:1e:6d:b9:98:ce:03:71:8e:f5:31:0b:b3:3e:25:
e8:f8:25:ee:3f:67:49:2d:0e:55:01:50:f5:13:a1:07:de:fa:
38:4c:57:11:4a:ca:e6:b7:44:67:42:3e:f9:4e:20:a2:57:c0:
aa:d3:f0:73:7c:55:2d:3c:c2:1b:d0:8d:e5:b6:e7:c1:b9:51:
89:e5:fd:3c:e2:9e:11:98:0a:b7:cc:46:00:84:70:9e:3c:cd:
b2:cb:98:b6:f4:30:d1:5d:f7:7c:eb:40:eb:3f:c8:2c:a5:e2:
59:ac:29:ab:a7:70:65:29:05:04:67:e9:d1:4b:17:a2:61:0b:
de:49:83:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:08:54 2025 by rpki-client