Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
File: lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json)
Hash identifier: KJNHo/L8hOXHt5PafAKlOGYCQWOpV6pZ37Q2fXiXw/0=
Subject key identifier: 3A:A7:D2:38:4B:41:05:58:54:C7:5E:B6:79:55:4C:C1:64:CF:E6:F1
Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a
Certificate serial: 01976BF47330FB4337D32FDF2D3508974D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
Manifest number: 0483
Signing time: Sat 14 Jun 2025 01:01:11 +0000
Manifest this update: Sat 14 Jun 2025 01:01:11 +0000
Manifest next update: Sun 15 Jun 2025 01:01:11 +0000
Files and hashes: 1: GuRsW05KP8iWPMSp7vb_kToeinc.roa (hash: xtfuu25jYNsHOYwVnrJ3v+/nadbPfCZESTGZfRgdXIM=)
2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: QIdIlT1XCyJWnx7tBgVTSkpZRXktp1XZr8dWMYoqFJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:73:30:fb:43:37:d3:2f:df:2d:35:08:97:4d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a
Validity
Not Before: Jun 14 01:01:11 2025 GMT
Not After : Jun 15 01:01:11 2025 GMT
Subject: CN=3aa7d2384b41055854c75eb679554cc164cfe6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:92:ab:ab:b3:e7:23:73:28:b7:c1:5f:a1:c3:
6a:ed:9f:df:6d:d2:16:0e:db:0f:9d:36:14:79:cb:
58:56:50:20:a4:a7:6f:dd:eb:8f:a2:29:bf:c7:6c:
4e:0d:97:a5:ee:91:09:c9:e9:2a:b5:6c:c9:5f:02:
25:dd:4e:a1:0a:84:59:ce:6e:e0:dc:1d:0a:95:da:
e1:0e:e4:a9:d7:20:a3:c9:70:67:bf:ae:4f:de:eb:
1d:cb:32:8f:7c:0c:a2:29:ad:8c:91:e2:f0:ea:99:
ee:9a:dd:6b:f2:88:84:60:80:3d:88:c0:9b:f3:ef:
83:9f:4a:55:f2:0f:b5:b6:4f:66:3c:bf:02:32:6f:
cc:83:95:56:38:cc:66:d0:c6:9b:b0:6c:10:e7:35:
de:e7:f7:3a:ec:33:b4:94:05:57:53:de:0e:ac:ea:
f8:c6:f8:93:c9:d6:d2:f8:97:a0:aa:d3:3a:c0:35:
3d:f0:5c:6e:31:70:09:d2:ec:6a:f2:8b:4d:19:f7:
5b:80:45:3e:bf:2c:6f:c5:da:03:ee:bf:b9:84:40:
d3:f7:5a:d6:c4:9b:02:5a:0a:84:33:20:57:75:4a:
85:10:29:90:ce:06:d4:90:6b:08:82:1e:1a:7f:95:
ef:37:41:0d:3b:b8:0b:ee:13:52:9f:90:eb:8d:1a:
f5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A7:D2:38:4B:41:05:58:54:C7:5E:B6:79:55:4C:C1:64:CF:E6:F1
X509v3 Authority Key Identifier:
keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:39:f8:e9:78:8e:d0:45:98:ce:69:91:a8:07:02:c1:20:03:
96:43:c0:5d:49:dc:59:fc:d2:1c:e3:b8:17:8d:65:e5:71:10:
7a:ac:1b:c3:ac:04:1c:52:57:e8:b9:ae:24:f9:1c:5c:43:bb:
6b:bb:63:c9:2c:eb:e0:25:1a:8a:2e:3f:ea:0e:b6:e5:bf:b4:
52:1d:85:ab:f1:1c:80:77:5b:9a:4c:46:4a:31:44:5c:ad:cd:
3c:78:82:d3:64:e6:1f:f6:0e:9a:fe:33:3a:7c:8d:5b:97:59:
8e:a3:02:2d:e0:90:ac:28:50:d9:03:3a:c9:1b:ed:8f:16:2c:
84:ec:18:b6:c6:5a:91:73:dd:bb:86:1b:dd:11:41:56:5e:16:
68:33:5f:ff:48:bb:bb:45:76:6a:fb:9e:8a:d3:c1:20:ad:31:
a3:5f:a5:7d:5d:d2:c1:03:2a:85:f3:b8:8e:06:e0:41:63:75:
42:32:39:05:41:75:b4:67:a7:ee:a1:57:fe:8e:2e:74:a7:d3:
11:73:9b:e4:5f:18:34:14:a2:78:d5:67:8b:5a:44:6e:23:f5:
4e:f1:68:da:13:a9:9d:59:f0:48:2d:d5:0e:f4:f1:7c:2c:c4:
67:0b:eb:68:02:9b:12:d1:4c:91:4d:7f:f1:0f:90:a8:8d:bc:
84:a9:b8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:27:58 2025 by rpki-client