Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: /fC+hzK4FXUUtSmCEaPcJW1M3IKGTxmNKBPrKFIcvOg=
Subject key identifier: 98:99:00:7F:89:20:6E:42:37:0A:9F:EB:DE:90:11:DA:D2:16:A6:71
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 019849D34609F784C9B6993DABC8E8BABB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 1594
Signing time: Sun 27 Jul 2025 03:00:39 +0000
Manifest this update: Sun 27 Jul 2025 03:00:39 +0000
Manifest next update: Mon 28 Jul 2025 03:00:39 +0000
Files and hashes: 1: blyZeWce4rBJhg8ME28pqKDnfCo.roa (hash: pmP+XETNQkgSAUy5VzGeDOXPtY/M0adsiUhjlBBfT5Y=)
2: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: IuERMIcBP6jQn1hWPqorOwzbRJCCixILdlfqlbTP6FA=)
3: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (hash: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:46:09:f7:84:c9:b6:99:3d:ab:c8:e8:ba:bb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Jul 27 03:00:39 2025 GMT
Not After : Jul 28 03:00:39 2025 GMT
Subject: CN=9899007f89206e42370a9febde9011dad216a671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:21:69:b9:83:b2:00:98:1c:e2:5b:34:75:
8d:4c:e3:e1:c7:15:59:0f:57:d5:13:b7:35:80:7a:
83:4f:da:ce:7a:6a:3b:45:4f:03:20:65:ca:84:34:
e2:6d:3e:87:a3:ad:9b:64:c3:f4:32:7b:7d:3e:54:
00:c5:a0:f8:0c:94:94:72:4d:cb:c6:d1:88:d0:77:
14:49:5e:06:9c:a9:af:e4:c0:32:22:51:d0:de:be:
d3:29:a1:ab:f3:39:14:23:98:cd:bf:dc:5d:20:23:
1a:65:0a:d4:bd:93:ab:6b:9a:b4:9b:aa:1b:c6:61:
75:62:37:d0:d1:8e:f1:8c:b9:f1:5a:35:34:12:ae:
15:fb:70:c0:12:2c:ce:6a:ab:ff:69:dc:7b:bd:5f:
d6:14:97:42:f9:1f:c1:d7:67:c2:d1:c7:d5:2e:91:
3d:f8:5f:ab:0a:b1:dd:91:d3:77:b6:4d:b2:84:69:
2e:1e:2e:00:04:48:6e:e3:c1:59:ad:bc:c3:a1:6a:
e6:44:e6:58:da:8b:ad:3d:59:48:5f:38:e0:49:d0:
34:90:8d:5b:84:c8:65:e4:b6:b6:95:c2:4f:91:1f:
c1:6e:28:e7:42:a8:cb:8c:44:7c:11:cb:9c:a2:50:
ed:bf:c3:51:e9:7b:93:90:d9:b2:e1:b5:70:82:33:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:99:00:7F:89:20:6E:42:37:0A:9F:EB:DE:90:11:DA:D2:16:A6:71
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fe:e2:c5:92:71:fd:f2:9e:3d:52:9f:c3:29:e8:c1:cf:b8:
ab:fa:0e:fa:8a:20:f3:a5:97:e0:4f:e6:87:fa:27:80:d2:24:
d3:df:9f:de:aa:de:38:d1:d5:25:67:02:8a:98:4a:18:f8:99:
b5:6e:ca:52:4c:1a:4e:cc:7e:62:77:4c:d2:59:42:69:96:3f:
f2:fb:19:44:b5:42:9e:d4:29:6c:c4:2c:e5:9b:8b:e6:94:a1:
cd:93:56:ca:66:3c:4f:48:71:a4:c1:20:8e:be:de:65:be:9d:
15:5b:f6:ad:45:bd:3e:92:3b:62:90:fe:5f:02:36:9c:ca:20:
80:f8:a7:fd:70:eb:27:1f:96:49:90:4f:c3:fc:3f:85:a9:22:
1d:33:f1:2c:90:31:e0:fa:6f:13:5a:76:48:b3:9d:7c:e7:0e:
f0:cb:d0:b3:41:04:d5:dd:5d:8f:5b:f6:5c:f1:fb:89:3a:a6:
bb:a4:38:f9:2b:b4:f1:6f:ee:b4:27:cc:32:72:b7:ca:cb:4d:
ba:49:6c:1f:46:e8:88:02:47:e5:ef:51:15:85:ff:8d:c1:7f:
15:70:8e:a8:48:20:53:09:17:52:1f:ab:15:3e:2b:6c:e0:86:
c4:dd:2a:c9:dc:6a:09:7b:86:5b:42:7d:bf:ff:2b:95:e4:17:
df:f9:86:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ00YJ94TJtpk9q8jourtYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZWFiMTliZWMyMjJjNzA1YTFlYjAzYTgwZGYzNDE1Mzlk
OTdmMTQwHhcNMjUwNzI3MDMwMDM5WhcNMjUwNzI4MDMwMDM5WjAzMTEwLwYDVQQD
Eyg5ODk5MDA3Zjg5MjA2ZTQyMzcwYTlmZWJkZTkwMTFkYWQyMTZhNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8QhabmDsgCYHOJbNHWNTOPhxxVZ
D1fVE7c1gHqDT9rOemo7RU8DIGXKhDTibT6Ho62bZMP0Mnt9PlQAxaD4DJSUck3L
xtGI0HcUSV4GnKmv5MAyIlHQ3r7TKaGr8zkUI5jNv9xdICMaZQrUvZOra5q0m6ob
xmF1YjfQ0Y7xjLnxWjU0Eq4V+3DAEizOaqv/adx7vV/WFJdC+R/B12fC0cfVLpE9
+F+rCrHdkdN3tk2yhGkuHi4ABEhu48FZrbzDoWrmROZY2outPVlIXzjgSdA0kI1b
hMhl5La2lcJPkR/BbijnQqjLjER8EcucolDtv8NR6XuTkNmy4bVwgjN6yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiZAH+JIG5CNwqf696QEdrSFqZxMB8GA1UdIwQY
MBaAFJbqsZvsIixwWh6wOoDfNBU52X8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmIt
NDEwMDYxZTM1NzZhLzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmItNDEwMDYxZTM1NzZh
LzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsv7ixZJx
/fKePVKfwynowc+4q/oO+oog86WX4E/mh/ongNIk09+f3qreONHVJWcCiphKGPiZ
tW7KUkwaTsx+YndM0llCaZY/8vsZRLVCntQpbMQs5ZuL5pShzZNWymY8T0hxpMEg
jr7eZb6dFVv2rUW9PpI7YpD+XwI2nMoggPin/XDrJx+WSZBPw/w/hakiHTPxLJAx
4PpvE1p2SLOdfOcO8MvQs0EE1d1dj1v2XPH7iTqmu6Q4+Su08W/utCfMMnK3ystN
uklsH0boiAJH5e9RFYX/jcF/FXCOqEggUwkXUh+rFT4rbOCGxN0qydxqCXuGW0J9
v/8rleQX3/mGWw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:57:06 2025 by rpki-client