Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: ub91/WFc5yI55/ZNkgqlM1ZPnjyZKbnmU+xdTh40MRA=
Subject key identifier: E5:83:8F:95:1E:56:1B:6F:A9:94:8D:0A:66:1B:C1:12:15:52:F5:6B
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 019938708E9080A9FFA5E2034B813B3210E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0C68
Signing time: Thu 11 Sep 2025 11:02:04 +0000
Manifest this update: Thu 11 Sep 2025 11:02:04 +0000
Manifest next update: Fri 12 Sep 2025 11:02:04 +0000
Files and hashes: 1: F4j0SvgLwOArGutleMjOUsweLH0.roa (hash: rtZZS/ojxAM0GrxEZyr9Anac9IUDzruPbDxrnYwBPLQ=)
2: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: GY7/4CCQ9GnpFB5yu5PNYyXpohah47gkHUOSJkGDYno=)
3: ksKNJKdJkzArGKQ2ZNz2rCML8U0.roa (hash: 7wxM1aJdG+1AiLxgq7asY+xV1rv72VvK8vU9Va6cLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 11:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:70:8e:90:80:a9:ff:a5:e2:03:4b:81:3b:32:10:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Sep 11 11:02:04 2025 GMT
Not After : Sep 12 11:02:04 2025 GMT
Subject: CN=e5838f951e561b6fa9948d0a661bc1121552f56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:cc:de:ee:bb:4a:1c:16:6d:ae:05:4d:ec:
96:8e:a1:97:b1:b2:1b:05:85:25:09:4c:7c:c2:a9:
9f:b4:0e:ff:53:0e:16:25:1e:29:6a:d0:16:17:9c:
6b:61:3c:50:45:c9:db:38:57:19:c0:cf:73:59:fd:
7f:52:d1:c0:c2:df:d3:5f:43:44:bf:d1:45:92:e3:
90:1c:4c:7c:bd:35:8e:4d:a0:ac:a2:55:f7:3a:5a:
cc:59:bc:72:95:67:d3:bb:9b:44:93:1f:a5:2c:6b:
d3:03:1b:62:d8:b2:85:3e:fa:ac:95:29:1b:4e:aa:
13:e5:38:b0:c0:34:02:1c:0c:26:10:3a:48:9e:0d:
71:9b:2d:78:fb:77:84:bb:d9:f3:77:97:54:5f:eb:
aa:54:8d:bb:f2:77:45:d2:29:2c:09:5e:38:c4:e8:
54:a7:b1:77:0d:8b:45:cf:c1:3a:05:bd:15:a4:76:
2e:97:af:03:aa:91:59:e5:88:f7:d3:10:14:5a:fa:
b4:b5:8e:2a:55:00:c5:9d:6e:45:0f:32:72:cd:5e:
c4:98:69:fb:1b:0b:5e:fe:7d:c9:10:b7:39:ed:05:
88:48:4a:bd:76:41:97:85:22:66:8f:69:68:48:b4:
b3:68:0e:93:4b:d0:44:ce:9f:fa:a7:8d:f8:b8:03:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:83:8F:95:1E:56:1B:6F:A9:94:8D:0A:66:1B:C1:12:15:52:F5:6B
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:75:95:d6:69:67:15:61:20:b9:fd:41:7a:d5:97:79:d1:c5:
8e:97:48:82:05:57:21:e5:7a:1a:8c:82:72:c1:6a:3a:62:4d:
f5:9b:30:b3:be:63:20:d6:49:02:93:9f:73:83:96:f4:c3:0a:
67:3d:f2:e5:44:d4:bb:51:f7:b2:77:5e:77:3b:4e:56:85:5d:
69:7a:d0:20:70:e6:4c:5f:85:d2:9a:64:a9:3b:67:8f:1d:6c:
ed:45:c2:4c:4a:94:90:0a:5d:a0:90:51:fe:e2:cb:4d:a9:0d:
da:c1:ba:88:56:19:19:2f:c1:38:e2:f4:30:40:70:7f:d2:c1:
3d:d4:49:2e:fc:0c:14:fb:08:e4:2a:73:21:2b:c6:44:c1:2e:
4a:91:46:09:6b:14:c3:4d:62:43:82:1f:ef:fd:25:a2:7b:92:
0b:dc:5f:a6:63:62:8f:ce:a9:f7:d5:e5:c8:cf:20:2b:dc:83:
34:2d:b6:80:ae:c7:d3:4e:43:a8:7e:69:90:2a:32:6b:6f:d5:
33:a3:fb:f3:35:b7:b9:0d:f8:9e:30:7d:d0:7a:ce:2f:bd:a9:
fe:64:1c:73:b9:e3:1a:c4:6f:00:96:fe:31:86:60:60:b9:5b:
b5:a9:9e:a5:8b:e6:af:31:0e:dc:c6:3a:ee:26:a3:ce:26:11:
ef:93:d4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 17:31:01 2025 by rpki-client