Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: ODbVjMLt4OI+ffdmd8RAdcstM7BCeEfzQ4vtn9LynpA=
Subject key identifier: E5:67:3F:62:F8:5D:D9:F9:D7:8D:77:AC:32:2B:4F:CA:EC:B0:44:94
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 0199FC5826157B850D349913494C669110D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 12:00:59 +0000
Manifest this update: Sun 19 Oct 2025 12:00:59 +0000
Manifest next update: Mon 20 Oct 2025 12:00:59 +0000
Files and hashes: 1: blyZeWce4rBJhg8ME28pqKDnfCo.roa (hash: pmP+XETNQkgSAUy5VzGeDOXPtY/M0adsiUhjlBBfT5Y=)
2: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: 3snz5hQgF9OL9Wfcyt5TQc6IQkpF/y5eDMhcW6StdO0=)
3: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (hash: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:26:15:7b:85:0d:34:99:13:49:4c:66:91:10:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Oct 19 12:00:59 2025 GMT
Not After : Oct 20 12:00:59 2025 GMT
Subject: CN=e5673f62f85dd9f9d78d77ac322b4fcaecb04494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:75:12:b7:8b:97:d8:c9:c9:6e:f0:a0:72:a9:
1b:0e:8b:6b:ae:33:b4:15:90:1b:e4:e9:ef:72:a2:
24:68:92:66:35:36:c7:91:d8:bf:a6:86:ae:f8:44:
a9:82:88:fe:0c:9d:dc:39:26:b3:ea:64:4e:d8:32:
a0:43:ad:bb:f0:2b:77:79:3a:df:54:f3:b9:4d:9b:
84:ce:b9:8e:f5:8b:0a:1f:aa:89:ad:8e:ec:4b:4f:
d3:f4:db:2b:5f:9e:e3:88:14:c5:02:54:db:20:9c:
c7:80:db:52:4c:cc:4e:80:36:d1:9c:8b:9c:61:2d:
c1:84:93:b2:7b:f1:05:d0:e3:3e:f4:e7:cc:1e:8a:
ca:31:94:43:81:ba:e7:21:54:26:39:9c:ce:c3:a5:
67:7f:bc:36:91:6c:9c:bb:ae:ed:87:42:23:2a:dd:
d3:3c:7b:1a:ce:a2:2d:5e:f5:77:e8:a1:88:26:c4:
0b:b5:37:4c:5a:6e:a2:63:2b:66:15:5c:5f:d6:b1:
c6:e6:0c:a5:a6:c2:41:2e:d6:20:6d:0e:11:a5:a5:
72:4d:27:11:8c:5c:17:b4:f4:c9:7d:f6:5f:dd:6d:
b8:ca:d9:fa:ce:e4:51:58:75:72:f8:31:ce:3a:bf:
72:d4:6a:c0:bf:90:6e:d1:1a:47:ca:f5:c0:52:19:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:3F:62:F8:5D:D9:F9:D7:8D:77:AC:32:2B:4F:CA:EC:B0:44:94
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7f:20:85:2e:d3:e9:8a:e7:86:c0:cc:8a:d2:9c:c9:61:95:
f1:fb:4e:68:b8:3b:a5:8f:2b:ad:a0:34:62:e2:71:92:85:ca:
d7:13:c7:83:53:3d:7f:a8:fe:11:61:d7:24:34:bf:20:c6:5a:
38:69:95:01:79:d2:f0:b8:4b:e0:80:3c:ca:6f:fe:f1:fe:80:
e0:4c:4e:8f:b9:f5:9e:ba:97:a4:72:81:92:6f:98:eb:0f:0b:
90:8e:92:ca:aa:fa:5f:6f:5d:e2:5b:93:2c:ed:da:5c:35:4d:
cb:0c:da:82:6f:9c:c4:c4:ce:63:04:5f:fc:14:09:d0:1e:c5:
cc:bd:ae:72:63:ce:58:c5:44:22:36:97:7b:7e:c8:2a:49:a1:
24:90:80:47:b1:2d:fa:8f:7c:c1:f5:0c:40:b0:df:9f:bd:a3:
cf:e2:fb:90:84:06:b3:0a:2a:c2:7c:6a:fa:dc:1b:2f:1c:06:
9e:4e:2f:6c:6e:ed:8a:fd:73:4f:f9:e0:67:26:69:eb:30:c3:
b6:e1:e1:02:a6:88:44:fb:70:d7:68:8a:16:00:26:6b:98:b3:
bf:31:35:90:7b:e1:f1:57:6e:84:9a:2e:3b:23:56:ad:ba:7d:
b4:87:44:09:71:5b:d1:dd:93:27:5b:62:9f:5c:7c:85:b9:26:
22:d0:06:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:13 2025 by rpki-client