Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: CO2APCbtBp6lpb2u37NytuYUgI8vg6R2Qss7fWcDyzE=
Subject key identifier: C9:32:61:C2:2D:29:72:3E:BE:40:E3:CB:16:7C:11:DD:C9:2C:55:03
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 01993B39E568BFC1DE3335B7B76417B98DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 1611
Signing time: Fri 12 Sep 2025 00:01:13 +0000
Manifest this update: Fri 12 Sep 2025 00:01:13 +0000
Manifest next update: Sat 13 Sep 2025 00:01:13 +0000
Files and hashes: 1: blyZeWce4rBJhg8ME28pqKDnfCo.roa (hash: pmP+XETNQkgSAUy5VzGeDOXPtY/M0adsiUhjlBBfT5Y=)
2: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: p7iOOelYQSuECujtiH16+aP24FMK0vmkIfytKcbqDvo=)
3: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (hash: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:39:e5:68:bf:c1:de:33:35:b7:b7:64:17:b9:8d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Sep 12 00:01:13 2025 GMT
Not After : Sep 13 00:01:13 2025 GMT
Subject: CN=c93261c22d29723ebe40e3cb167c11ddc92c5503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:00:63:ae:5b:6c:8b:dd:a0:36:9b:07:ab:4b:
89:6d:6a:30:3f:50:ff:3a:5a:fe:15:6e:8b:ea:1b:
a7:a0:6c:fa:dd:63:96:04:1b:41:41:44:d3:20:b8:
64:26:94:1f:59:9a:68:a5:49:ac:c7:63:8d:4b:41:
4b:ec:c5:26:e1:b0:2e:0a:43:01:c8:8d:52:34:7d:
08:23:7e:b5:02:12:33:a7:00:36:58:ae:10:c2:75:
57:09:fc:d1:b5:8d:e0:1a:f2:08:32:d8:84:57:00:
4d:b0:63:d6:b1:ea:e3:1f:e5:16:93:61:94:75:c6:
88:32:ae:b4:c6:f0:94:97:0f:d7:0f:9f:7d:4b:e2:
0d:e4:64:88:11:21:df:4d:33:74:94:a1:5d:4e:3d:
f1:6c:53:b1:b9:1d:da:f5:a7:72:ad:3b:52:77:db:
98:d0:e5:1e:27:34:bc:4a:02:d7:55:71:08:b3:24:
d7:49:17:07:8d:6c:4f:f0:1e:63:5e:30:99:08:74:
df:76:5e:8b:4b:91:97:56:99:4b:35:ba:22:da:e3:
dd:6f:18:05:a1:d2:2d:26:c6:f0:43:e9:b5:14:87:
7f:ef:d4:ae:6f:ea:17:da:99:1c:25:cb:7d:2c:57:
81:3b:c4:bd:f3:a6:63:f8:af:26:95:02:a9:ac:d1:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:32:61:C2:2D:29:72:3E:BE:40:E3:CB:16:7C:11:DD:C9:2C:55:03
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:73:00:8e:c5:cd:b3:81:34:bd:26:0a:0f:55:e4:84:41:8f:
65:ca:3f:04:43:c6:30:a1:4b:12:5f:39:29:a8:e1:a3:c4:96:
fa:2d:89:28:33:e7:09:0e:e9:2b:6a:8d:a1:04:97:a4:01:35:
d0:2e:c5:d4:60:05:c3:bb:64:59:49:f9:4b:42:c1:54:4b:20:
62:f9:e9:d2:4c:b1:34:eb:c4:ff:9b:e4:9d:c2:f8:0e:4d:d5:
1a:09:0f:06:ef:ca:87:ae:3b:f1:ba:9a:c5:98:59:e8:39:30:
10:91:14:bc:92:2b:6c:6c:f8:0a:cf:74:ed:1f:88:e6:70:a4:
64:7f:99:97:71:99:c4:1f:ba:9e:a4:28:76:27:bb:4a:4f:76:
d9:0d:3b:28:10:e8:d5:3a:a2:13:0d:33:2e:da:92:e9:0d:3f:
cd:6d:2c:e0:2d:4f:6d:dc:3f:90:d8:f3:95:6d:55:70:44:1b:
10:bd:45:2f:35:f0:b0:63:29:0a:96:8e:e0:06:b2:fc:0e:d2:
c5:c0:81:25:98:8d:cc:bc:69:c5:15:72:52:cd:ef:c5:36:6c:
81:c0:f3:2d:82:ab:e4:f0:a8:99:78:39:af:23:59:3f:be:dd:
15:e1:b0:26:45:47:38:d3:27:51:1c:7c:66:70:88:3a:9f:38:
45:5d:95:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk7OeVov8HeMzW3t2QXuY2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZWFiMTliZWMyMjJjNzA1YTFlYjAzYTgwZGYzNDE1Mzlk
OTdmMTQwHhcNMjUwOTEyMDAwMTEzWhcNMjUwOTEzMDAwMTEzWjAzMTEwLwYDVQQD
EyhjOTMyNjFjMjJkMjk3MjNlYmU0MGUzY2IxNjdjMTFkZGM5MmM1NTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ABjrltsi92gNpsHq0uJbWowP1D/
Olr+FW6L6hunoGz63WOWBBtBQUTTILhkJpQfWZpopUmsx2ONS0FL7MUm4bAuCkMB
yI1SNH0II361AhIzpwA2WK4QwnVXCfzRtY3gGvIIMtiEVwBNsGPWserjH+UWk2GU
dcaIMq60xvCUlw/XD599S+IN5GSIESHfTTN0lKFdTj3xbFOxuR3a9adyrTtSd9uY
0OUeJzS8SgLXVXEIsyTXSRcHjWxP8B5jXjCZCHTfdl6LS5GXVplLNboi2uPdbxgF
odItJsbwQ+m1FId/79Sub+oX2pkcJct9LFeBO8S986Zj+K8mlQKprNEPSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkyYcItKXI+vkDjyxZ8Ed3JLFUDMB8GA1UdIwQY
MBaAFJbqsZvsIixwWh6wOoDfNBU52X8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmIt
NDEwMDYxZTM1NzZhLzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmItNDEwMDYxZTM1NzZh
LzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnMAjsXN
s4E0vSYKD1XkhEGPZco/BEPGMKFLEl85Kajho8SW+i2JKDPnCQ7pK2qNoQSXpAE1
0C7F1GAFw7tkWUn5S0LBVEsgYvnp0kyxNOvE/5vkncL4Dk3VGgkPBu/Kh6478bqa
xZhZ6DkwEJEUvJIrbGz4Cs907R+I5nCkZH+Zl3GZxB+6nqQodie7Sk922Q07KBDo
1TqiEw0zLtqS6Q0/zW0s4C1Pbdw/kNjzlW1VcEQbEL1FLzXwsGMpCpaO4Aay/A7S
xcCBJZiNzLxpxRVyUs3vxTZsgcDzLYKr5PComXg5ryNZP77dFeGwJkVHONMnURx8
ZnCIOp84RV2VSw==
-----END CERTIFICATE-----
Generated at Fri Sep 12 03:41:41 2025 by rpki-client