Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
File: luWtU7_HOEDEJXEcAQRTVxBX3CM.mft (raw, json)
Hash identifier: tjr4L4MfYPNDhIdWy3NUis+G5uO4SWyqMAGuUMcwYu0=
Subject key identifier: 9E:B6:77:9F:65:D4:77:36:49:22:0D:D8:6A:C7:41:15:AB:0F:AB:2A
Authority key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
Certificate issuer: /CN=96e5ad53bfc73840c425711c010453571057dc23
Certificate serial: 019896DBFE99A4D22D7BB2CF22869642E25B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
Manifest number: 0512
Signing time: Mon 11 Aug 2025 02:00:56 +0000
Manifest this update: Mon 11 Aug 2025 02:00:56 +0000
Manifest next update: Tue 12 Aug 2025 02:00:56 +0000
Files and hashes: 1: luWtU7_HOEDEJXEcAQRTVxBX3CM.crl (hash: qPtHtdgiKkAIhCK5nChVWjxZHvugaIEXPZHT4WtMWJ0=)
2: vu4Plg05nKKxO7-zyqD-UVbYxtw.roa (hash: VNGXTJm2qjOCVOfzY/Ol932aR/HbK5RQpSPZuClIe/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:db:fe:99:a4:d2:2d:7b:b2:cf:22:86:96:42:e2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e5ad53bfc73840c425711c010453571057dc23
Validity
Not Before: Aug 11 02:00:56 2025 GMT
Not After : Aug 12 02:00:56 2025 GMT
Subject: CN=9eb6779f65d4773649220dd86ac74115ab0fab2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:e3:de:df:e9:b1:4e:45:82:2a:76:85:a9:
37:fd:31:52:1e:3b:66:70:9a:c8:72:8e:e2:88:3a:
7c:09:fc:17:92:be:d7:fa:ee:b2:f9:09:4c:fb:df:
68:3a:b8:39:de:c1:ca:e0:12:13:eb:53:47:d5:c6:
04:8f:e6:6d:7b:f6:1e:72:ca:00:d2:e0:86:f8:56:
1e:c2:5a:09:8c:89:4b:7b:dc:48:29:8f:6b:2d:22:
ac:27:fb:9a:f9:33:af:da:71:35:0a:42:08:2a:a6:
6a:ee:d5:5c:85:63:1b:c2:99:c9:20:ed:b9:07:24:
35:16:65:1a:88:f1:38:34:2f:55:21:27:50:36:c8:
7e:08:a6:57:e1:07:94:7b:58:5e:93:65:13:bc:b4:
9b:c1:86:2b:fd:30:13:1b:b4:6a:f1:2e:c1:a2:4c:
f0:55:75:a8:af:ad:69:6b:67:d6:60:f5:34:db:c5:
ea:07:44:a1:6d:16:4c:c8:fd:4c:8f:ed:f9:ba:6a:
e3:fe:4e:c3:e5:ce:aa:cb:66:2e:12:7b:6a:ce:e7:
41:0f:3b:b0:50:20:36:2f:61:94:db:e2:24:ad:62:
17:36:21:9c:f2:92:d3:31:cf:50:bf:b7:a0:20:bb:
1e:28:7c:91:c4:66:7d:39:d8:e9:b8:20:a5:98:6d:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B6:77:9F:65:D4:77:36:49:22:0D:D8:6A:C7:41:15:AB:0F:AB:2A
X509v3 Authority Key Identifier:
keyid:96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6f:33:47:10:7f:cd:a8:31:a9:94:e9:9b:03:e3:c2:a4:38:
1f:f9:0b:85:58:3a:6e:27:32:a1:01:d4:2a:7d:b7:d6:11:e9:
17:34:ee:97:24:15:b5:d4:d9:a3:c2:aa:63:f6:eb:d5:64:84:
f9:28:80:ea:3c:18:d1:f1:0d:38:28:66:39:86:6b:05:68:b4:
16:ce:28:02:78:5b:f3:cc:55:c4:78:52:fc:26:2a:0e:a5:8c:
39:54:a1:5a:f4:6b:f9:e0:02:98:c5:c7:a6:d8:3b:77:65:93:
5d:c5:d2:be:49:f1:27:5b:83:a2:66:ff:6c:a0:7b:7d:01:4c:
ff:c4:2f:b2:01:0c:d6:57:23:e4:13:74:59:67:81:1b:cc:0b:
fe:ee:e8:21:65:bb:b1:e9:25:4f:b3:18:64:58:f1:86:c1:2a:
88:04:4f:6c:d1:8c:ff:43:7f:00:d0:3b:b7:ea:b7:53:a1:3b:
31:4b:ac:a3:8c:88:cd:ec:11:43:1a:03:5b:45:67:c6:92:53:
91:2e:29:4f:eb:aa:80:b0:bd:b2:44:41:08:f2:6a:b1:9d:0a:
5e:30:26:74:11:fe:56:e7:c9:cc:f5:9a:20:9a:95:cc:fe:02:
9f:ec:be:40:36:7a:23:3e:f3:26:8c:6b:bb:c4:42:2f:f3:3b:
d6:e1:a1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:09:14 2025 by rpki-client