Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: 5i28fm4AAojYMCw0Q3NCnjqWxlydCcHdpvLO+7acLXU=
Subject key identifier: 81:36:33:27:33:56:AF:29:9C:5B:42:7A:14:D8:7B:EC:C1:AB:1D:B5
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 01984AE5AACAEC7129B4F2A4C7863665F312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0BED
Signing time: Sun 27 Jul 2025 08:00:22 +0000
Manifest this update: Sun 27 Jul 2025 08:00:22 +0000
Manifest next update: Mon 28 Jul 2025 08:00:22 +0000
Files and hashes: 1: F4j0SvgLwOArGutleMjOUsweLH0.roa (hash: rtZZS/ojxAM0GrxEZyr9Anac9IUDzruPbDxrnYwBPLQ=)
2: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: lGO9hMvFJVnx4r1gTF9FWO5XLFzzTQDOap1wkhtwhyc=)
3: ksKNJKdJkzArGKQ2ZNz2rCML8U0.roa (hash: 7wxM1aJdG+1AiLxgq7asY+xV1rv72VvK8vU9Va6cLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:aa:ca:ec:71:29:b4:f2:a4:c7:86:36:65:f3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Jul 27 08:00:22 2025 GMT
Not After : Jul 28 08:00:22 2025 GMT
Subject: CN=813633273356af299c5b427a14d87becc1ab1db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:20:8e:91:bd:08:1e:85:6c:62:22:47:76:
c2:6d:8a:2c:af:2c:79:64:72:31:70:71:2d:d1:ac:
f1:e5:9a:44:ef:22:91:ce:92:22:bf:3b:bc:84:3c:
ef:ac:54:2b:4f:12:04:7e:bb:8c:9c:6c:f6:07:e5:
3f:04:9f:95:24:05:b4:4d:0c:44:36:ff:ca:88:f3:
59:0b:7e:c6:c4:23:15:45:66:13:ed:7e:5f:a0:58:
67:85:0f:74:d7:37:b8:78:99:2f:c0:c6:c7:0c:fd:
7c:31:a2:19:3c:12:54:b9:41:76:64:bf:63:d6:38:
92:da:57:70:77:d8:c6:b1:ae:3e:a1:66:7a:70:67:
3a:9a:a6:2d:71:94:d5:d4:cd:45:07:26:78:cb:34:
75:0f:79:f5:89:de:52:6a:9d:72:53:b3:07:a5:f7:
f1:c3:af:d2:d8:59:cf:c9:31:f1:06:5d:3a:86:05:
43:2f:67:5b:d8:3c:26:2a:d7:d8:99:b0:db:b7:95:
6a:29:01:83:a2:d1:01:06:0e:ca:09:39:85:d6:1c:
13:bd:85:07:83:77:27:47:4e:32:d1:ec:60:49:6e:
a0:4f:90:7b:2e:15:5b:60:b3:ff:d4:88:76:95:5f:
5c:0f:63:aa:a1:b6:f6:fd:01:9b:cd:88:3d:f6:87:
df:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:36:33:27:33:56:AF:29:9C:5B:42:7A:14:D8:7B:EC:C1:AB:1D:B5
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:88:bf:9c:9a:5e:f4:06:d3:db:e6:fd:48:80:63:9f:f1:ce:
e2:99:e3:90:56:e0:3e:20:d6:51:f9:d2:ab:a2:cd:fe:46:2b:
0e:46:2f:47:b7:97:9b:de:ba:51:5d:63:e7:bd:c8:ce:38:c3:
f6:f2:d9:40:0f:d1:fd:19:d6:a6:1d:2f:ea:06:a5:99:4f:15:
20:95:f8:8a:0f:26:db:a3:64:1a:5c:38:6a:31:06:16:e4:9b:
5a:b8:a8:9f:ff:57:b7:30:7f:da:c1:ab:f8:82:e1:37:e4:95:
58:c9:a5:66:6f:64:0e:96:8a:99:0c:9c:a7:fc:ff:81:8c:16:
d4:d2:34:38:83:37:1f:d5:7d:ff:93:23:82:ce:b7:c6:ea:e3:
e1:96:0a:70:24:a3:f2:54:dc:72:8c:1e:55:aa:ee:60:a5:04:
e5:8f:4e:7b:5a:92:d3:eb:3d:86:8a:43:e5:62:7d:1e:81:45:
83:b5:48:52:76:c9:03:75:f5:22:dc:ce:16:e0:0f:3e:ae:5e:
64:26:b7:8f:57:6d:69:1f:a5:92:be:1d:e9:77:70:8e:e5:84:
fd:10:ee:1f:2b:97:c1:2f:f9:b4:2b:af:28:51:de:2d:87:fd:
c3:e1:3c:29:5b:94:23:86:0f:35:48:61:92:99:4f:50:02:05:
ab:9f:db:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5arK7HEptPKkx4Y2ZfMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNDg3M2U2ZThiZTRmOWQzNzY0MTg0ZjEzZTU3NTBmOGM2
MWY2OGIwHhcNMjUwNzI3MDgwMDIyWhcNMjUwNzI4MDgwMDIyWjAzMTEwLwYDVQQD
Eyg4MTM2MzMyNzMzNTZhZjI5OWM1YjQyN2ExNGQ4N2JlY2MxYWIxZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+8gjpG9CB6FbGIiR3bCbYosryx5
ZHIxcHEt0azx5ZpE7yKRzpIivzu8hDzvrFQrTxIEfruMnGz2B+U/BJ+VJAW0TQxE
Nv/KiPNZC37GxCMVRWYT7X5foFhnhQ901ze4eJkvwMbHDP18MaIZPBJUuUF2ZL9j
1jiS2ldwd9jGsa4+oWZ6cGc6mqYtcZTV1M1FByZ4yzR1D3n1id5Sap1yU7MHpffx
w6/S2FnPyTHxBl06hgVDL2db2DwmKtfYmbDbt5VqKQGDotEBBg7KCTmF1hwTvYUH
g3cnR04y0exgSW6gT5B7LhVbYLP/1Ih2lV9cD2Oqobb2/QGbzYg99offrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIE2MyczVq8pnFtCehTYe+zBqx21MB8GA1UdIwQY
MBaAFC1Ic+bovk+dN2QYTxPldQ+MYfaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEt
NjU5NmQ1MDM2MzYyLzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEtNjU5NmQ1MDM2MzYy
LzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIi/nJpe
9AbT2+b9SIBjn/HO4pnjkFbgPiDWUfnSq6LN/kYrDkYvR7eXm966UV1j573IzjjD
9vLZQA/R/RnWph0v6galmU8VIJX4ig8m26NkGlw4ajEGFuSbWrion/9XtzB/2sGr
+ILhN+SVWMmlZm9kDpaKmQycp/z/gYwW1NI0OIM3H9V9/5Mjgs63xurj4ZYKcCSj
8lTccoweVaruYKUE5Y9Oe1qS0+s9hopD5WJ9HoFFg7VIUnbJA3X1ItzOFuAPPq5e
ZCa3j1dtaR+lkr4d6XdwjuWE/RDuHyuXwS/5tCuvKFHeLYf9w+E8KVuUI4YPNUhh
kplPUAIFq5/bMg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:05:52 2025 by rpki-client