
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
File: LUrgdxLkhC-A-oEAnTNbxICeZB0.mft (raw, json)
Hash identifier: gbitdH0X275w9axicPwqWCFxAhhPqZmRsF+FOINQC8A=
Subject key identifier: 1B:41:CD:31:A5:83:7F:D2:DC:B9:D6:29:11:7C:18:C7:E6:97:57:76
Authority key identifier: 2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
Certificate issuer: /CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Certificate serial: 0198733DD88EFBD7081E984662975302B3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
Manifest number: 0683
Signing time: Mon 04 Aug 2025 04:01:29 +0000
Manifest this update: Mon 04 Aug 2025 04:01:29 +0000
Manifest next update: Tue 05 Aug 2025 04:01:29 +0000
Files and hashes: 1: LUrgdxLkhC-A-oEAnTNbxICeZB0.crl (hash: xe0SqouB4hKb4vOOsKZnleHkmpOaVeF2w8lO0JvDjyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:d8:8e:fb:d7:08:1e:98:46:62:97:53:02:b3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Validity
Not Before: Aug 4 04:01:29 2025 GMT
Not After : Aug 5 04:01:29 2025 GMT
Subject: CN=1b41cd31a5837fd2dcb9d629117c18c7e6975776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:f4:b5:8f:73:ea:83:da:c1:1c:d0:0e:56:
fe:c2:7e:73:97:b0:76:5c:15:54:71:a1:94:23:8e:
33:b5:21:cb:a1:a7:4b:c3:ae:68:ca:eb:4c:02:cc:
58:c5:0d:0c:88:3b:06:94:44:b1:08:e6:4c:85:30:
1e:5b:c4:54:fc:5c:3f:c3:00:d8:53:e2:d2:6c:4f:
74:f9:88:93:3e:b9:d5:50:86:85:8a:48:01:29:77:
a5:8c:a9:be:7b:71:84:31:ce:81:ad:a9:dd:9a:a4:
63:6a:e9:a3:00:49:4d:b3:ad:ca:d0:11:04:6e:fd:
b3:b3:be:bf:ae:76:92:63:40:d8:ce:5c:2a:b2:3a:
b4:21:9e:20:52:64:d3:c4:6f:86:a8:24:e8:f0:ff:
f7:c0:dd:47:5f:f8:1a:1e:dd:13:8f:75:4f:c8:47:
3d:bc:e1:e2:5b:3b:30:eb:0e:5c:4f:fa:88:c4:2d:
8e:33:0d:ed:20:10:41:25:90:5b:31:41:e1:fb:14:
80:f9:d3:4d:71:6e:0a:26:78:6f:88:e1:b2:15:23:
5d:33:ed:ac:62:af:ee:df:6f:ee:d0:ba:df:5d:c8:
65:bb:84:e1:87:87:0d:2a:2c:81:65:5b:c7:6e:69:
08:26:2e:e5:d4:21:db:5d:8a:2f:c9:21:f4:66:47:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:41:CD:31:A5:83:7F:D2:DC:B9:D6:29:11:7C:18:C7:E6:97:57:76
X509v3 Authority Key Identifier:
keyid:2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:74:09:7e:cb:63:f3:11:67:22:95:58:fb:2e:a2:86:f9:76:
6e:0f:85:c5:05:b4:4c:07:09:93:ab:76:22:7f:14:0a:b4:f4:
ec:b0:31:af:08:f4:2d:6c:ff:81:74:99:2b:11:47:bc:dd:fd:
0b:93:c1:d9:2b:23:64:40:ed:b2:48:08:1f:d0:64:63:f2:af:
5a:53:83:58:3e:3d:55:40:c5:43:ef:e4:21:a6:cc:f6:39:fd:
33:b3:7b:f9:39:90:91:4c:27:70:5c:ec:29:0c:35:e3:a2:ad:
99:f1:da:62:f9:45:fb:58:0c:56:29:31:18:38:b9:1d:29:39:
06:12:14:19:aa:67:f3:16:e2:a5:b8:96:4b:9a:5a:a9:02:eb:
14:06:30:95:c6:54:05:3c:42:92:eb:df:6c:19:b0:ec:f1:a8:
bb:1e:67:e3:ab:37:98:97:89:5f:ab:9d:08:04:de:ab:2b:e2:
9a:14:ae:0c:6a:f5:fc:80:f9:90:f2:e1:0b:98:43:cc:8f:ab:
65:f4:3b:1f:b5:c8:35:08:01:4b:3e:d6:03:4f:1b:bb:79:cc:
4f:d1:39:4e:e5:50:3d:f8:e1:f8:3f:7c:41:b4:d3:cb:f2:94:
e6:02:ca:db:9f:84:e3:09:74:8e:35:34:9e:d4:7b:6a:1d:af:
62:b9:24:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:26 2025 by rpki-client