Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: xLcNKLOuB+0sUh6oMmJPt8HlRZ1JTbKx8g6lS9bpF4Y=
Subject key identifier: 0E:F7:85:6D:B8:38:18:D5:07:7F:4C:E5:59:8A:25:DD:62:D0:E8:C0
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 019A22F74399D1BE62D86A28ED81E7DF43EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 1689
Signing time: Mon 27 Oct 2025 00:00:21 +0000
Manifest this update: Mon 27 Oct 2025 00:00:21 +0000
Manifest next update: Tue 28 Oct 2025 00:00:21 +0000
Files and hashes: 1: blyZeWce4rBJhg8ME28pqKDnfCo.roa (hash: pmP+XETNQkgSAUy5VzGeDOXPtY/M0adsiUhjlBBfT5Y=)
2: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: G5gSEGlHQfAF5g9LCWcDviWsDZaDFsVZj2W5dkusU9E=)
3: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (hash: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:43:99:d1:be:62:d8:6a:28:ed:81:e7:df:43:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Oct 27 00:00:21 2025 GMT
Not After : Oct 28 00:00:21 2025 GMT
Subject: CN=0ef7856db83818d5077f4ce5598a25dd62d0e8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:be:c1:34:61:2b:75:36:35:0e:9f:b5:fd:
83:9d:19:2b:b9:3c:fa:32:c2:24:7b:1d:d5:50:1b:
ab:e9:c7:53:3c:8e:cd:be:4d:32:67:1a:d0:79:35:
39:bb:5d:e7:f1:f8:fc:a1:ec:cf:13:c9:00:3a:1a:
31:e5:0b:37:da:cd:c6:7a:95:69:de:75:54:21:b7:
e4:f3:6c:72:0d:84:27:4d:6b:ea:b7:90:48:be:1f:
04:9d:cf:cc:bf:8e:59:7e:68:cb:ab:f9:0f:ec:b2:
fc:cf:33:6c:ba:8c:63:c7:3d:ca:17:df:c1:be:08:
01:44:86:44:29:aa:2c:be:44:a5:a2:56:d3:64:16:
99:fe:2e:bd:c4:83:7c:f0:79:20:84:93:46:dc:73:
ac:e5:63:5b:2b:a0:1f:4f:bd:5f:de:49:1e:71:1e:
b7:39:99:be:7a:bf:d6:63:1d:ac:08:9b:ff:1a:59:
83:0a:c0:06:39:57:61:ed:52:76:fa:16:af:f5:cc:
12:a6:d4:e8:50:a6:ba:70:c0:76:d2:f8:de:f4:17:
e9:fa:7a:1a:7c:2e:59:cd:2e:36:ea:92:1e:58:9b:
9e:45:eb:77:f4:6c:aa:36:30:d8:a3:53:b8:66:71:
4b:65:27:02:0c:a6:af:52:99:45:9c:33:d5:59:98:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F7:85:6D:B8:38:18:D5:07:7F:4C:E5:59:8A:25:DD:62:D0:E8:C0
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b5:12:9a:21:a6:41:5b:65:2f:24:2c:83:27:98:22:3d:73:
44:64:52:8d:43:47:e3:8e:7a:26:d5:bf:f3:f6:da:08:7b:a0:
8e:ea:db:16:88:13:58:e2:b8:f2:99:ae:f4:50:b7:b1:ef:65:
09:53:cc:2d:57:7a:c9:e6:ca:c8:8e:d9:f9:81:b8:06:69:65:
01:a2:f3:2d:54:f9:ba:2c:db:4e:10:83:9d:a7:4a:d7:e2:f6:
dd:c8:33:b5:13:76:7c:74:6a:34:7c:32:dd:96:5f:11:3a:b1:
55:8c:d4:3f:6d:f2:56:29:5d:e1:56:54:9e:03:3b:e1:e2:fa:
04:1d:e1:48:41:09:8d:b6:bb:1c:41:06:87:73:20:f3:94:fb:
f5:0d:35:eb:46:0e:37:89:14:48:4e:e8:42:1d:3f:dc:5c:0b:
9e:b2:52:2d:a0:4b:ca:62:3c:69:a0:0b:9d:53:de:95:00:52:
98:0c:1b:2b:b0:03:c4:e2:1b:f8:29:6f:99:03:0d:e1:c4:18:
eb:69:94:8d:8c:1d:73:03:d1:3e:25:09:04:5f:0e:3f:3d:19:
62:e5:a0:9f:35:a0:b9:3f:86:ac:be:4c:67:49:25:0c:51:3a:
cb:3f:0f:3f:03:5d:fd:12:83:ee:ee:ec:a7:cf:20:6e:2f:41:
7b:a5:7d:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoi90OZ0b5i2Goo7YHn30PuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZWFiMTliZWMyMjJjNzA1YTFlYjAzYTgwZGYzNDE1Mzlk
OTdmMTQwHhcNMjUxMDI3MDAwMDIxWhcNMjUxMDI4MDAwMDIxWjAzMTEwLwYDVQQD
EygwZWY3ODU2ZGI4MzgxOGQ1MDc3ZjRjZTU1OThhMjVkZDYyZDBlOGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsi+wTRhK3U2NQ6ftf2DnRkruTz6
MsIkex3VUBur6cdTPI7Nvk0yZxrQeTU5u13n8fj8oezPE8kAOhox5Qs32s3GepVp
3nVUIbfk82xyDYQnTWvqt5BIvh8Enc/Mv45ZfmjLq/kP7LL8zzNsuoxjxz3KF9/B
vggBRIZEKaosvkSlolbTZBaZ/i69xIN88HkghJNG3HOs5WNbK6AfT71f3kkecR63
OZm+er/WYx2sCJv/GlmDCsAGOVdh7VJ2+hav9cwSptToUKa6cMB20vje9Bfp+noa
fC5ZzS426pIeWJueRet39GyqNjDYo1O4ZnFLZScCDKavUplFnDPVWZjJHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA73hW24OBjVB39M5VmKJd1i0OjAMB8GA1UdIwQY
MBaAFJbqsZvsIixwWh6wOoDfNBU52X8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmIt
NDEwMDYxZTM1NzZhLzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmItNDEwMDYxZTM1NzZh
LzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbUSmiGm
QVtlLyQsgyeYIj1zRGRSjUNH4456JtW/8/baCHugjurbFogTWOK48pmu9FC3se9l
CVPMLVd6yebKyI7Z+YG4BmllAaLzLVT5uizbThCDnadK1+L23cgztRN2fHRqNHwy
3ZZfETqxVYzUP23yVild4VZUngM74eL6BB3hSEEJjba7HEEGh3Mg85T79Q0160YO
N4kUSE7oQh0/3FwLnrJSLaBLymI8aaALnVPelQBSmAwbK7ADxOIb+ClvmQMN4cQY
62mUjYwdcwPRPiUJBF8OPz0ZYuWgnzWguT+GrL5MZ0klDFE6yz8PPwNd/RKD7u7s
p88gbi9Be6V9mg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 09:23:40 2025 by rpki-client