Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: nvv2gO+jaJ+831zsmb+QhtGQaNLY+dJclWnKaw1Q3wQ=
Subject key identifier: 2A:6D:21:47:59:6D:D5:D0:F3:2F:4F:AE:5F:4E:1A:B8:21:5D:14:DB
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 0197481E694A2106F4720A8F6BF365B2BDE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0B67
Signing time: Sat 07 Jun 2025 02:00:41 +0000
Manifest this update: Sat 07 Jun 2025 02:00:41 +0000
Manifest next update: Sun 08 Jun 2025 02:00:41 +0000
Files and hashes: 1: F4j0SvgLwOArGutleMjOUsweLH0.roa (hash: rtZZS/ojxAM0GrxEZyr9Anac9IUDzruPbDxrnYwBPLQ=)
2: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: Gfa/n26cZywDQMPtvpshdrFludL0MYSXfgtVXoTjwDY=)
3: ksKNJKdJkzArGKQ2ZNz2rCML8U0.roa (hash: 7wxM1aJdG+1AiLxgq7asY+xV1rv72VvK8vU9Va6cLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:69:4a:21:06:f4:72:0a:8f:6b:f3:65:b2:bd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Jun 7 02:00:41 2025 GMT
Not After : Jun 8 02:00:41 2025 GMT
Subject: CN=2a6d2147596dd5d0f32f4fae5f4e1ab8215d14db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:15:71:5c:29:30:64:fb:cd:26:31:be:36:
48:eb:ec:67:6e:a1:e0:18:cf:b4:06:68:82:d9:23:
26:fd:74:3e:65:27:05:86:01:76:35:eb:60:3f:b1:
6a:c4:d8:e4:6c:b4:b7:24:81:ab:1e:e6:9b:8d:e2:
8f:cc:96:9d:25:60:bf:fe:c8:eb:a2:38:96:4e:15:
e0:7b:29:db:13:82:fa:7e:61:73:c5:fc:32:09:21:
a6:9c:e7:66:27:5a:24:5e:05:24:a0:8d:71:41:c5:
e3:8a:a8:81:19:19:79:4e:2a:d3:b2:bf:bb:21:e6:
f4:ff:f3:b7:84:f0:16:99:53:41:6a:c1:db:97:91:
ca:7c:b5:4d:af:f7:19:98:ca:e9:ca:16:c6:68:f3:
4b:9b:75:68:95:97:92:a6:da:df:f7:a5:4a:03:e2:
72:3c:b6:9b:93:67:3c:2b:ff:13:19:0d:e3:7e:ba:
c3:c8:69:21:92:04:33:fc:9d:57:a3:43:e0:8c:dd:
71:26:d1:7e:3a:0c:cf:b4:0e:1a:b0:c2:65:bb:19:
fe:96:37:68:54:2a:20:bf:43:c0:33:50:7b:34:31:
2e:11:e7:86:c1:4c:59:87:28:87:5a:04:4a:82:11:
cc:bb:f9:f8:7d:a6:87:98:d3:4f:2c:22:bd:4e:50:
13:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:21:47:59:6D:D5:D0:F3:2F:4F:AE:5F:4E:1A:B8:21:5D:14:DB
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:43:4d:63:f6:8c:1b:7c:9a:81:f9:c8:bd:26:57:01:23:5d:
ef:ed:0a:1c:34:e9:a3:f5:15:40:fc:9d:2f:95:b5:3e:70:54:
3d:a5:b9:ab:2f:a4:73:13:11:9b:72:a9:0a:c4:c3:2a:0a:60:
17:60:7a:d5:9a:4b:16:ed:b8:fc:a4:f9:7e:c0:3d:81:a7:95:
5a:5f:89:b2:8e:68:0c:70:47:af:3b:f2:45:70:f6:e1:29:83:
ca:50:80:11:c2:c6:56:a1:f0:68:67:bb:ee:16:74:e0:79:73:
06:a0:06:94:0c:8a:1c:ea:f8:96:f1:e6:43:8f:74:b1:1b:c0:
40:54:b9:fa:a6:f2:de:62:de:22:c7:9c:a1:8a:97:57:84:f8:
2d:5f:7a:ef:bf:5e:df:4c:87:25:b7:de:a3:8d:6e:4d:f5:14:
5f:30:a7:5c:12:94:51:8c:e6:5d:32:48:39:7b:56:e8:4a:de:
2f:1a:6b:7a:e1:49:10:48:f8:cb:79:17:14:6b:c1:54:ae:e0:
f4:fb:d8:b8:a8:f1:3e:12:82:79:16:88:ba:87:ac:30:18:57:
1a:6d:31:f9:14:f6:7c:61:91:4b:b3:85:2c:57:01:0b:70:ad:
2f:95:8f:34:fc:bc:c2:ab:a8:13:0b:27:78:56:da:59:cb:e1:
18:f6:57:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:54:05 2025 by rpki-client