Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: M0s1S7QPdUKlAQxsTFY9gjwzjPNR/OnkCEtZtPppiBQ=
Subject key identifier: D0:B5:8F:1A:43:E7:37:96:B3:5E:10:FF:98:A0:18:84:77:A2:C4:4C
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 0197B632714F8D07D697632B236C0B5933B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0BA0
Signing time: Sat 28 Jun 2025 11:00:48 +0000
Manifest this update: Sat 28 Jun 2025 11:00:48 +0000
Manifest next update: Sun 29 Jun 2025 11:00:48 +0000
Files and hashes: 1: F4j0SvgLwOArGutleMjOUsweLH0.roa (hash: rtZZS/ojxAM0GrxEZyr9Anac9IUDzruPbDxrnYwBPLQ=)
2: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: KPLxdKTU21cc1HB0qgaIe5XWsSGCZBvqciqs6GOcEFo=)
3: ksKNJKdJkzArGKQ2ZNz2rCML8U0.roa (hash: 7wxM1aJdG+1AiLxgq7asY+xV1rv72VvK8vU9Va6cLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:71:4f:8d:07:d6:97:63:2b:23:6c:0b:59:33:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Jun 28 11:00:48 2025 GMT
Not After : Jun 29 11:00:48 2025 GMT
Subject: CN=d0b58f1a43e73796b35e10ff98a0188477a2c44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:bd:62:84:20:96:b2:89:b5:39:5b:ef:b0:
59:89:eb:0e:ec:6a:f1:81:d3:0d:14:c0:00:2d:50:
36:a8:09:c0:f0:01:6d:e6:02:af:4c:cd:2c:27:27:
9f:68:bb:c4:89:2f:af:b0:0f:d9:32:de:58:38:3b:
4f:e3:06:f1:30:52:19:07:70:cf:38:49:21:b1:a1:
d8:5b:38:78:64:1f:ee:41:21:58:44:57:b4:5c:dc:
90:ba:38:68:97:66:a9:7b:39:ed:73:d8:7b:86:4c:
de:ed:8c:c3:cb:8f:1d:d2:b2:0e:d8:8c:2c:83:fc:
34:af:ef:2c:77:04:c9:8b:bd:d5:47:6a:64:fd:1e:
2d:83:41:60:9c:0c:3b:4f:0a:80:78:33:da:82:eb:
55:26:0a:c5:cb:f0:5b:a9:e7:a6:4b:e3:33:85:d0:
3e:10:0b:58:ef:ef:cc:7d:d7:59:66:77:ce:f4:1e:
0c:98:80:64:75:34:87:46:06:3d:ed:a4:ef:ef:c6:
8b:fe:d8:d3:13:e5:f3:56:90:d3:76:1f:43:ad:1c:
83:cc:93:26:02:60:22:18:f8:b4:fc:3a:0f:79:96:
a4:8b:bc:e7:3b:fa:58:6a:38:54:2d:e5:0e:72:50:
36:f1:ae:a2:df:aa:7a:0a:51:35:55:48:55:aa:55:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B5:8F:1A:43:E7:37:96:B3:5E:10:FF:98:A0:18:84:77:A2:C4:4C
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:65:fa:f5:d0:03:da:0c:c4:18:1f:46:a7:9a:8e:74:7d:bf:
5a:19:2e:f6:0f:24:57:36:33:9c:5a:9c:66:a1:51:71:ef:79:
52:1a:82:c2:c2:69:1e:00:12:c3:90:61:5d:ae:f7:d4:76:9b:
40:83:31:9a:ae:6c:8e:59:54:c7:e3:0d:d1:3e:f9:c5:85:d8:
70:92:8a:32:d9:0b:51:2f:92:b2:90:80:b5:2a:5b:ce:1c:51:
2c:8e:18:36:fb:4e:f4:01:7f:b4:a3:5d:5d:b8:05:23:8d:a8:
47:26:51:29:ea:02:21:10:7a:80:54:0a:5e:b1:dd:1f:67:76:
de:db:00:99:31:30:2b:e1:fc:76:11:53:e0:27:3d:1c:e6:d7:
c4:5c:ec:23:be:14:f1:08:67:62:e4:48:ea:5a:1f:fd:c3:c8:
f4:04:eb:6d:9a:19:09:e1:1d:aa:ab:5e:85:4d:cf:73:fc:4f:
6b:cc:d1:a0:2f:c8:f3:2b:06:80:47:ba:19:12:73:c7:60:fd:
4c:c9:77:88:ba:13:12:f4:c3:ae:a6:5c:0e:ed:02:d5:56:9d:
06:54:8e:36:42:0b:64:9d:03:27:ad:7d:c2:11:ea:27:b4:b8:
4d:aa:73:c9:5d:3a:7f:80:b0:d8:e0:ad:ac:13:bf:e6:d0:e0:
7a:1b:bb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:18 2025 by rpki-client