Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
File: LUUkZslYX29anMHDDo17Fu1HSkg.mft (raw, json)
Hash identifier: m9/0xclNVkGneLDpchY6BlhqAQ+VdX0o3Hzix2mXbBE=
Subject key identifier: 7E:20:64:88:81:B3:3B:77:95:4C:2C:33:A6:6A:C2:25:C2:AC:9C:B3
Authority key identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
Certificate issuer: /CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Certificate serial: 01976BBCDCE36EA467D82B0F7C2078A8C215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
Manifest number: 0601
Signing time: Sat 14 Jun 2025 00:00:28 +0000
Manifest this update: Sat 14 Jun 2025 00:00:28 +0000
Manifest next update: Sun 15 Jun 2025 00:00:28 +0000
Files and hashes: 1: LUUkZslYX29anMHDDo17Fu1HSkg.crl (hash: +kfK+he5ZSa2AePTIlKVW3fSfjQ6mfdn/IfxResve6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:dc:e3:6e:a4:67:d8:2b:0f:7c:20:78:a8:c2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Validity
Not Before: Jun 14 00:00:28 2025 GMT
Not After : Jun 15 00:00:28 2025 GMT
Subject: CN=7e20648881b33b77954c2c33a66ac225c2ac9cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:06:04:0d:e8:de:9c:4e:49:94:20:84:af:cb:
0f:b9:05:4c:2a:3e:1b:b6:ad:81:b5:88:cf:b0:4c:
ab:a1:3d:63:82:26:42:d5:26:97:2b:48:d6:c6:e3:
f7:2f:09:c8:e1:ec:7c:41:cd:22:4a:c2:45:a2:c0:
1b:b0:a3:fa:25:26:11:a4:f0:07:0e:25:e6:61:e3:
9d:9c:7d:6b:96:06:8d:be:16:87:ea:6e:af:43:c1:
d9:f1:02:1c:2e:7c:c9:02:f6:45:2c:8f:f3:82:b2:
d5:f6:7b:d8:0e:91:6e:d9:72:ed:40:45:a3:1b:a1:
f1:36:eb:9b:87:70:7c:3b:ca:23:58:09:93:d8:fc:
eb:92:ef:90:92:32:f8:7d:e7:2b:9e:c3:60:ca:6d:
fb:d6:d9:d1:f7:ba:9b:91:bf:4c:b3:38:06:25:61:
df:38:81:3a:0b:01:5b:0e:03:5d:f2:d3:b7:9b:3e:
61:7f:84:9a:1b:97:59:3d:a6:53:0d:d6:04:75:01:
6d:27:e8:31:fa:c2:6b:3d:13:13:c9:0d:d6:59:b2:
5b:28:a2:fa:7e:e1:c0:97:31:dd:1d:bd:8f:bf:9e:
e9:0d:62:d1:02:da:08:57:f5:ba:95:59:14:10:cc:
a7:37:a3:ca:61:6b:49:91:ab:67:dc:0c:21:69:66:
fd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:20:64:88:81:B3:3B:77:95:4C:2C:33:A6:6A:C2:25:C2:AC:9C:B3
X509v3 Authority Key Identifier:
keyid:2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:22:9b:f7:b5:41:ec:85:97:11:45:15:50:a1:0e:9c:5c:1b:
51:c8:76:5e:4d:5f:a4:9e:02:49:9c:5a:1d:50:43:6a:2c:af:
30:e6:c2:33:08:b2:da:4e:19:66:c5:d3:be:2a:1b:7e:68:ee:
d2:c6:18:2a:96:00:17:03:36:7a:a4:80:bc:5c:f9:05:07:1d:
23:fb:d1:f3:8b:8f:c4:61:93:57:9a:68:93:e8:b5:97:95:e4:
89:a0:dd:7c:89:81:60:f2:64:b5:6e:6a:50:ca:c9:68:ca:b9:
d7:56:df:9b:21:58:e6:19:a5:38:e3:bc:d4:99:a6:65:3d:ea:
07:37:ac:5f:0f:20:07:88:0c:37:82:ec:9d:a0:e2:e5:69:c6:
e3:ab:a1:8e:d9:a5:bf:16:96:3a:fd:a8:4d:4e:1d:a2:3b:d5:
1b:80:b8:6e:fb:2f:c7:36:01:74:55:92:2f:2c:8d:42:d1:7e:
0d:b5:21:6b:c5:da:f7:39:db:7b:54:d1:ec:3e:40:62:80:7d:
07:6b:67:58:17:e7:03:80:d3:28:fe:37:ee:fb:52:01:42:ce:
dc:ec:63:a4:59:d7:4b:db:b9:e0:21:95:ed:e9:15:79:74:55:
af:4b:63:1b:30:7e:3b:73:86:82:5f:6e:0c:21:39:04:df:72:
fb:0e:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:46 2025 by rpki-client