Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: T5dpgjrrYIZ3rsLC7ArU+yJFhikj82PJV2GFHClmImw=
Subject key identifier: 11:54:1F:32:E7:85:59:B2:0B:1A:5B:DA:C0:1D:92:01:B0:6A:70:B0
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 019A25F858FF51263C7E44CCC95BF1DF6D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0CE3
Signing time: Mon 27 Oct 2025 14:00:23 +0000
Manifest this update: Mon 27 Oct 2025 14:00:23 +0000
Manifest next update: Tue 28 Oct 2025 14:00:23 +0000
Files and hashes: 1: F4j0SvgLwOArGutleMjOUsweLH0.roa (hash: rtZZS/ojxAM0GrxEZyr9Anac9IUDzruPbDxrnYwBPLQ=)
2: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: lPQWYwUZy5rCPuT8wIUREoKQ9FL6eWuuuIjKPloQ06o=)
3: ksKNJKdJkzArGKQ2ZNz2rCML8U0.roa (hash: 7wxM1aJdG+1AiLxgq7asY+xV1rv72VvK8vU9Va6cLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:58:ff:51:26:3c:7e:44:cc:c9:5b:f1:df:6d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Oct 27 14:00:23 2025 GMT
Not After : Oct 28 14:00:23 2025 GMT
Subject: CN=11541f32e78559b20b1a5bdac01d9201b06a70b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:c8:9d:d4:c5:ab:dc:e2:36:ac:0f:69:bc:
7c:07:68:0e:ad:fa:9c:7d:c2:73:d9:90:09:cb:9e:
a2:a5:3f:9e:92:cc:b0:00:64:66:1c:cc:e1:4c:a1:
8c:2f:54:0f:36:94:ef:20:5a:b0:e4:d0:e5:a7:f4:
35:9b:6c:b8:53:48:49:f4:ca:df:9b:52:32:fb:d3:
d1:68:5f:08:56:59:d1:93:a9:31:4a:bb:37:71:45:
74:44:b0:e9:c2:7a:53:6d:30:e2:17:ff:e2:7a:57:
71:d6:8d:0c:94:13:81:bf:9f:43:ab:a0:66:e3:e4:
eb:10:9f:37:2f:22:c7:2d:44:12:12:d9:b9:63:97:
4b:37:de:5f:5e:d1:10:61:9c:26:f6:7c:46:5b:1b:
66:6a:84:be:2a:0a:c4:a0:cf:4d:f9:fb:fe:69:4c:
ae:0c:73:83:a6:fe:8f:42:81:25:da:ab:93:c9:d6:
63:4b:3b:09:d7:51:7d:e0:4a:01:b4:19:d7:70:21:
98:ce:50:6f:1b:5f:d4:6a:a4:b1:f1:0b:47:b9:32:
a5:2f:99:e1:61:de:c2:55:00:78:54:28:e2:65:e1:
1a:b9:cb:8c:1f:35:d4:cc:12:86:51:7b:bf:d9:ea:
2a:85:dc:1d:9f:38:23:43:ab:b1:6a:37:3b:46:e1:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:54:1F:32:E7:85:59:B2:0B:1A:5B:DA:C0:1D:92:01:B0:6A:70:B0
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4a:c4:f6:56:4f:20:da:ee:04:34:50:26:c2:c6:0f:f4:8c:
7c:39:8d:28:f9:a2:b0:ee:f1:d5:92:7e:89:2a:db:2e:21:77:
02:77:f2:3e:6d:d3:cb:7b:e7:24:18:1a:2b:0c:68:d0:ba:7b:
80:dc:c2:c7:8a:05:73:59:35:60:4f:58:87:8d:88:11:ba:e3:
75:e7:de:4c:b2:6b:a2:9c:2f:2d:76:53:08:13:53:6d:88:05:
cb:ee:31:bb:55:34:da:8a:05:2d:e9:f0:e7:71:b4:d0:89:a0:
1e:13:60:cb:44:32:b0:9d:88:b7:67:87:b5:9c:47:f2:91:bd:
9c:1b:53:99:c8:c2:a8:34:08:1c:d4:47:6f:43:e7:74:c3:7c:
5f:53:4e:ad:10:6b:27:45:89:38:51:66:f9:2b:16:c1:7d:6b:
10:b4:56:29:96:d0:ae:dd:99:bb:6d:ce:af:55:fd:40:b3:58:
78:30:d3:16:3a:a4:9b:90:ee:35:61:f1:85:13:29:f1:84:6e:
9a:f6:c1:dd:e0:ed:cf:ef:7b:dd:b1:c8:92:5e:6b:12:fe:a0:
c3:87:cd:95:f3:da:42:db:79:c7:93:5f:38:77:ba:54:9a:59:
d9:c3:cd:7a:b2:7d:03:ab:dc:c1:f4:f0:a2:32:31:1f:12:52:
eb:c5:52:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZol+Fj/USY8fkTMyVvx320MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNDg3M2U2ZThiZTRmOWQzNzY0MTg0ZjEzZTU3NTBmOGM2
MWY2OGIwHhcNMjUxMDI3MTQwMDIzWhcNMjUxMDI4MTQwMDIzWjAzMTEwLwYDVQQD
EygxMTU0MWYzMmU3ODU1OWIyMGIxYTViZGFjMDFkOTIwMWIwNmE3MGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryzIndTFq9ziNqwPabx8B2gOrfqc
fcJz2ZAJy56ipT+eksywAGRmHMzhTKGML1QPNpTvIFqw5NDlp/Q1m2y4U0hJ9Mrf
m1Iy+9PRaF8IVlnRk6kxSrs3cUV0RLDpwnpTbTDiF//ieldx1o0MlBOBv59Dq6Bm
4+TrEJ83LyLHLUQSEtm5Y5dLN95fXtEQYZwm9nxGWxtmaoS+KgrEoM9N+fv+aUyu
DHODpv6PQoEl2quTydZjSzsJ11F94EoBtBnXcCGYzlBvG1/UaqSx8QtHuTKlL5nh
Yd7CVQB4VCjiZeEaucuMHzXUzBKGUXu/2eoqhdwdnzgjQ6uxajc7RuGLHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFUHzLnhVmyCxpb2sAdkgGwanCwMB8GA1UdIwQY
MBaAFC1Ic+bovk+dN2QYTxPldQ+MYfaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEt
NjU5NmQ1MDM2MzYyLzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEtNjU5NmQ1MDM2MzYy
LzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0rE9lZP
INruBDRQJsLGD/SMfDmNKPmisO7x1ZJ+iSrbLiF3AnfyPm3Ty3vnJBgaKwxo0Lp7
gNzCx4oFc1k1YE9Yh42IEbrjdefeTLJropwvLXZTCBNTbYgFy+4xu1U02ooFLenw
53G00ImgHhNgy0QysJ2It2eHtZxH8pG9nBtTmcjCqDQIHNRHb0PndMN8X1NOrRBr
J0WJOFFm+SsWwX1rELRWKZbQrt2Zu23Or1X9QLNYeDDTFjqkm5DuNWHxhRMp8YRu
mvbB3eDtz+973bHIkl5rEv6gw4fNlfPaQtt5x5NfOHe6VJpZ2cPNerJ9A6vcwfTw
ojIxHxJS68VSVA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 19:53:31 2025 by rpki-client