Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: 4pJkcSqx15E0PrZrTxW0I5oICUon29RBcYGS16L5oEg=
Subject key identifier: 4D:54:CE:2C:14:48:6A:15:E7:55:CF:F1:1A:EC:94:4D:43:8A:68:AD
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 019A51513C724B490D6AA3CCA6AC370CC6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 16A1
Signing time: Wed 05 Nov 2025 00:01:09 +0000
Manifest this update: Wed 05 Nov 2025 00:01:09 +0000
Manifest next update: Thu 06 Nov 2025 00:01:09 +0000
Files and hashes: 1: blyZeWce4rBJhg8ME28pqKDnfCo.roa (hash: pmP+XETNQkgSAUy5VzGeDOXPtY/M0adsiUhjlBBfT5Y=)
2: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: ShKVNCnVlzZRF+pPS0ZVdtOhRZfyTtRJKj4I/N+6kJk=)
3: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (hash: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:3c:72:4b:49:0d:6a:a3:cc:a6:ac:37:0c:c6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Nov 5 00:01:09 2025 GMT
Not After : Nov 6 00:01:09 2025 GMT
Subject: CN=4d54ce2c14486a15e755cff11aec944d438a68ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:ac:f6:b9:4f:89:ad:f6:f7:3c:1a:d5:1f:
78:c9:d5:70:e7:b3:96:4b:ff:95:46:e4:0b:fc:1e:
a1:d2:ad:f8:53:5a:76:0d:93:a1:3f:15:bf:08:4f:
5d:f8:f9:5f:cc:eb:f7:28:50:e3:df:53:f3:d1:dc:
de:f4:11:82:79:83:ff:51:06:48:80:14:10:49:0c:
f9:ac:53:b2:a1:f0:b6:9d:99:c5:9f:66:2c:e3:b2:
4a:06:4e:09:42:29:96:89:a0:ba:f2:46:52:0b:a6:
b9:4c:e3:1a:27:17:30:da:88:05:c5:a4:d0:e8:80:
dc:6f:39:cf:11:c6:82:7b:26:3e:1c:01:74:4b:3d:
ca:da:4a:2d:4a:7a:7c:a0:2d:0b:fa:4e:60:cd:20:
3d:9b:93:cd:f4:2c:51:f1:f2:83:b0:20:91:c7:ee:
3d:08:bd:3e:dc:d7:9d:d3:6b:25:34:ad:e1:c2:b4:
3c:f6:7f:8d:fc:6f:bc:6c:d4:e8:fb:a3:5f:88:0f:
d2:e4:bf:87:20:93:04:79:b4:ab:5b:9b:5f:36:47:
87:aa:b4:a0:e0:35:a1:d9:6d:96:a5:8f:0c:d9:ba:
8c:79:6c:61:9b:20:37:40:df:55:14:ff:48:cf:8c:
24:cf:23:86:d8:64:ad:7e:2a:c8:1c:41:a0:f5:23:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:54:CE:2C:14:48:6A:15:E7:55:CF:F1:1A:EC:94:4D:43:8A:68:AD
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fc:9f:f5:ed:5c:85:3e:4a:08:69:9a:a1:c5:82:c3:bf:c6:
84:c3:1f:18:24:72:21:e2:bb:e8:59:a9:d5:45:04:76:b0:d8:
41:62:f8:d1:c6:11:53:90:92:ca:d3:82:7f:48:29:7e:64:38:
5d:1f:e9:4f:20:70:06:67:6c:fe:f1:2a:c8:1a:1a:df:92:80:
b5:d6:79:5e:bc:d1:8c:89:14:cb:f5:02:a6:06:60:9e:8d:7d:
de:4b:e6:ee:98:c3:70:f4:95:fc:f7:6c:6a:b1:60:6c:20:0e:
9d:b6:eb:86:9f:48:14:e7:79:dc:0c:97:a8:a8:b7:67:3c:eb:
a8:71:46:1f:cb:10:7f:c3:7d:ea:f2:96:b6:95:c8:41:30:2a:
bb:27:96:6b:84:3f:3b:26:5f:f6:8a:64:21:f5:99:33:fc:99:
88:08:5c:76:d3:50:bc:ee:d1:81:d0:94:11:60:fb:b7:fb:3a:
f4:7a:aa:e8:19:9a:a1:db:7a:27:45:30:79:5b:48:03:96:19:
56:b0:60:d3:44:32:3d:1d:f2:54:7d:ea:27:ad:72:30:58:34:
b2:55:b7:c1:f2:ab:0d:7f:8a:f8:50:ec:9e:8d:3a:e7:dc:af:
51:13:28:bd:9e:28:24:73:29:70:37:49:61:20:e2:59:6d:6b:
01:e9:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:42:31 2025 by rpki-client