Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: BzQ5VZp+0DI9Cc+Wr5OYSnSaldxBjt/3df9X8ajN58o=
Subject key identifier: B4:4A:3B:CD:63:22:69:24:65:40:81:B0:0C:17:21:76:90:F5:C3:CA
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 0196C4CC0909FC1FBE5BE0DAB8442C6E9A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0B23
Signing time: Mon 12 May 2025 14:00:27 +0000
Manifest this update: Mon 12 May 2025 14:00:27 +0000
Manifest next update: Tue 13 May 2025 14:00:27 +0000
Files and hashes: 1: F4j0SvgLwOArGutleMjOUsweLH0.roa (hash: rtZZS/ojxAM0GrxEZyr9Anac9IUDzruPbDxrnYwBPLQ=)
2: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: 9TKisKFU9zTkljtIikob6OdZRkUQwQuGpKax4dYVt0I=)
3: ksKNJKdJkzArGKQ2ZNz2rCML8U0.roa (hash: 7wxM1aJdG+1AiLxgq7asY+xV1rv72VvK8vU9Va6cLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:09:09:fc:1f:be:5b:e0:da:b8:44:2c:6e:9a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: May 12 14:00:27 2025 GMT
Not After : May 13 14:00:27 2025 GMT
Subject: CN=b44a3bcd63226924654081b00c17217690f5c3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:b1:de:c7:c5:16:45:fa:e2:cc:8d:27:85:
a7:8f:34:42:8c:ad:8f:a6:96:b2:f4:00:96:a5:b5:
d9:3f:9b:0a:4c:1d:23:2b:de:20:c8:73:3d:34:54:
80:79:1f:56:ad:b3:9b:ad:42:93:86:99:91:84:c1:
44:60:4d:80:41:1b:97:91:0b:74:67:a3:a3:b5:9a:
75:cb:9c:e9:8d:72:c3:dd:39:d4:ab:0e:04:ae:c8:
9d:b7:3c:9d:a5:f8:f5:f6:06:24:63:e3:1f:b3:e3:
92:03:63:ed:e1:9d:4a:e7:95:a1:a7:74:74:88:aa:
67:90:0a:21:02:b6:c2:23:ce:e5:f8:21:35:f3:63:
0f:6e:4a:96:4e:61:76:f9:f4:1a:10:36:6b:9a:17:
6c:f6:1e:74:46:11:19:d4:51:3d:62:c2:ae:dc:4c:
b0:9d:d0:44:14:db:67:f5:2d:1c:94:52:64:f5:42:
98:bd:ef:27:e6:fb:31:41:9f:b6:1a:de:87:d4:2e:
5d:2f:b8:c6:00:d6:10:53:8a:41:d9:30:96:5d:3d:
5e:cb:93:23:44:67:7b:ae:16:8f:8f:f8:76:14:57:
90:18:ef:a8:b8:a3:a9:51:e9:46:75:e6:1f:ee:b8:
92:a8:61:c9:bf:8d:fd:4c:dd:f1:64:0c:8a:27:0e:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4A:3B:CD:63:22:69:24:65:40:81:B0:0C:17:21:76:90:F5:C3:CA
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ab:10:79:4f:58:5d:40:dc:08:9f:de:a7:25:5d:38:21:7b:
89:48:65:d7:a6:83:68:8f:f3:08:7b:55:a8:bc:43:f1:0f:53:
37:57:1d:bb:71:33:be:86:98:9a:26:71:53:73:0a:26:85:eb:
f1:5b:20:f8:4e:d9:32:2f:05:25:0b:4d:82:45:ae:e4:2a:08:
9f:e3:5b:78:8d:21:06:58:01:4c:58:d7:a1:24:2b:37:4d:23:
e6:94:70:6e:77:59:89:d3:eb:15:cc:a9:11:3e:c3:67:8a:e9:
b5:98:dc:f0:31:38:7a:aa:dc:a8:a0:39:df:d5:01:f6:bd:dc:
33:85:8b:92:91:ce:98:12:d0:cd:5b:0f:68:ee:dd:b6:f5:39:
fe:da:41:38:4c:1e:a8:5a:10:f5:5e:fd:cb:f3:25:06:2c:00:
81:af:ea:04:56:36:b0:a4:d4:11:18:59:48:10:23:1d:4e:3f:
06:af:ad:96:da:03:33:b3:0d:d9:9e:c0:84:34:e3:2f:f3:08:
01:1f:d2:45:a2:fc:89:ce:47:7b:86:f4:99:6a:ff:b0:08:3f:
c9:a7:81:52:d1:c5:ec:dd:30:5e:b0:b7:fa:d4:66:dc:23:77:
72:af:59:f2:56:cb:44:3e:b3:03:f7:dc:d7:1c:f6:38:b1:56:
fe:45:94:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:44:42 2025 by rpki-client