
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
File: lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json)
Hash identifier: dYDMJkwRZ3VreFwcF4bTGVgxNHRfcvDgQXJBlI3asp8=
Subject key identifier: 98:52:FA:F5:64:42:0D:70:D2:F0:0B:18:C4:F9:E5:4B:CD:FC:1D:25
Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a
Certificate serial: 0198729839EABE562B4016827E2D3B8B74D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
Manifest number: 050B
Signing time: Mon 04 Aug 2025 01:00:35 +0000
Manifest this update: Mon 04 Aug 2025 01:00:35 +0000
Manifest next update: Tue 05 Aug 2025 01:00:35 +0000
Files and hashes: 1: GuRsW05KP8iWPMSp7vb_kToeinc.roa (hash: xtfuu25jYNsHOYwVnrJ3v+/nadbPfCZESTGZfRgdXIM=)
2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: LfBaDZjPsBH6tJVk1MJn2AT7dVnIMWPcsjGHlSYamTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:39:ea:be:56:2b:40:16:82:7e:2d:3b:8b:74:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a
Validity
Not Before: Aug 4 01:00:35 2025 GMT
Not After : Aug 5 01:00:35 2025 GMT
Subject: CN=9852faf564420d70d2f00b18c4f9e54bcdfc1d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:c9:74:26:98:a2:e6:f0:3f:e6:95:d4:ef:
1a:74:72:c0:8a:97:71:a1:23:9d:b8:6d:f2:c3:61:
8f:02:09:be:5b:8e:ab:44:e9:04:f1:5d:26:39:4e:
92:47:e5:54:af:11:20:3f:55:b4:98:b6:83:86:f8:
46:60:ef:00:a9:e6:b6:e2:02:a2:db:4d:40:87:7f:
f3:b6:0a:9b:e5:0f:4e:52:e4:70:2e:0c:bc:ef:8a:
60:d3:9e:a6:de:59:7d:df:d0:32:86:5b:00:d4:74:
5b:2e:b6:d3:69:53:3e:bc:d6:db:ac:a0:96:a5:8e:
1f:cd:ac:8b:f9:78:39:6f:3b:79:1b:06:15:ec:cf:
75:37:79:93:d2:b0:97:dd:b6:a6:c3:22:fa:22:98:
4a:33:fc:58:58:a4:cb:2e:13:02:94:a9:0e:81:91:
10:27:08:68:0c:ce:66:01:bd:65:a3:8a:8a:f3:a7:
45:17:e7:b2:2d:5f:29:e4:4e:82:34:27:9a:ad:77:
52:1a:ce:1a:d1:9a:8a:7c:6f:8c:15:99:82:c6:07:
3a:9f:f7:89:af:99:c8:96:c0:93:fd:4f:c6:9f:79:
1d:8a:7f:5a:4f:88:f5:4b:48:20:f8:72:ef:da:2b:
1a:9c:08:96:cf:8b:fa:ff:f8:8a:ad:60:49:bd:b2:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:52:FA:F5:64:42:0D:70:D2:F0:0B:18:C4:F9:E5:4B:CD:FC:1D:25
X509v3 Authority Key Identifier:
keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3d:07:8b:50:7a:a8:75:c3:f3:98:fa:d3:28:38:8b:c2:3f:
b4:08:0b:b7:6d:2e:ad:8b:94:0a:14:08:1e:05:23:56:46:3e:
8b:57:d9:d6:5f:a0:d6:2f:7a:2d:a3:74:af:6f:6c:cf:f4:b3:
22:d3:d2:e6:86:27:0d:d0:57:cb:86:96:18:51:df:6c:16:f2:
77:7b:74:5f:21:30:0d:9a:cc:a4:01:56:50:6b:cd:05:8b:86:
9d:e2:77:15:46:d7:ad:64:da:31:f2:09:9c:d3:ad:9f:7e:b5:
85:64:2b:d9:ed:1b:04:9b:8d:e2:59:8e:e9:18:7b:a9:10:9f:
79:6c:2c:9c:6b:21:66:d9:ee:84:02:e6:4c:ca:4e:1d:88:1b:
b3:46:88:d3:59:71:cd:43:3b:8f:a3:8f:0d:ef:cd:9d:69:a0:
7e:9a:a4:b2:07:0e:0f:c8:83:13:dd:48:ef:b3:37:1d:2f:65:
a3:81:4a:61:93:4a:be:bc:51:a5:bd:4c:bd:6e:7c:c7:fc:97:
bf:0b:3f:e2:8a:0f:c8:bb:db:0a:93:83:f4:e4:b1:8f:78:64:
ec:fc:83:e3:74:6e:2f:51:fa:69:82:40:ed:8e:de:51:3f:78:
4f:f4:aa:85:1f:a6:b3:28:9f:de:99:e0:ca:14:0f:c4:a4:a7:
cb:7f:58:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:22 2025 by rpki-client