Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: 4rCZ9ON3FAiM7psMjqogXKqKI/iXaDyL2mN+tU1gPCQ=
Subject key identifier: 5C:D5:B9:57:46:A8:CA:64:0E:CD:83:F6:A3:32:A3:5B:33:B7:20:76
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 01988C8EFD166C8FA63152C8312ACB99D1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0C0F
Signing time: Sat 09 Aug 2025 02:00:37 +0000
Manifest this update: Sat 09 Aug 2025 02:00:37 +0000
Manifest next update: Sun 10 Aug 2025 02:00:37 +0000
Files and hashes: 1: F4j0SvgLwOArGutleMjOUsweLH0.roa (hash: rtZZS/ojxAM0GrxEZyr9Anac9IUDzruPbDxrnYwBPLQ=)
2: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: gHrcIzz7STov3On4JAkailnztBp2OameyKYKRKMAP0s=)
3: ksKNJKdJkzArGKQ2ZNz2rCML8U0.roa (hash: 7wxM1aJdG+1AiLxgq7asY+xV1rv72VvK8vU9Va6cLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8e:fd:16:6c:8f:a6:31:52:c8:31:2a:cb:99:d1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Aug 9 02:00:37 2025 GMT
Not After : Aug 10 02:00:37 2025 GMT
Subject: CN=5cd5b95746a8ca640ecd83f6a332a35b33b72076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:2e:62:c7:50:ef:c3:38:1b:fc:c2:3b:26:
1a:8f:c5:30:23:ef:07:d2:a2:76:75:d3:12:cd:c7:
ea:93:47:e4:28:8a:57:cc:8d:2e:47:b8:65:b0:64:
a4:04:e3:6f:f2:8c:20:ab:09:8e:5e:de:81:1b:93:
8d:c5:9a:61:8e:e1:c6:90:56:da:b5:3a:1e:b3:79:
1b:31:cc:10:cf:a6:73:0e:31:78:f3:07:d3:64:84:
35:00:fd:af:1f:cd:1d:bd:15:84:5d:ea:ba:03:29:
da:35:03:39:45:1f:40:6f:89:bc:f1:d4:02:9f:55:
e6:55:75:36:f1:7d:4f:10:e0:e4:79:1e:57:d4:6a:
ef:b7:d0:23:98:72:32:d3:78:8b:a1:1f:97:b3:a2:
fe:b5:52:7d:c8:a9:15:8b:83:ad:11:60:40:4c:83:
4c:15:69:2a:72:64:13:14:a3:4a:aa:e5:8b:7f:70:
ca:23:9f:48:f7:94:0c:04:fc:b3:0b:8d:1e:a2:42:
b5:9f:7f:a8:cf:ec:46:af:1e:2f:b1:3e:81:91:20:
e4:19:20:17:b6:6d:29:e9:59:03:82:e3:ca:40:e2:
06:1b:5a:cd:0d:0c:74:0d:23:7e:e6:2d:a6:74:a0:
26:e9:56:79:7d:f3:40:97:e9:0e:f5:91:37:ec:3f:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D5:B9:57:46:A8:CA:64:0E:CD:83:F6:A3:32:A3:5B:33:B7:20:76
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9b:38:7d:cf:8a:ec:48:a5:42:6a:83:d3:0b:5e:af:b2:ca:
50:9d:9e:ae:12:21:40:68:05:44:9f:08:ee:3a:36:dd:97:75:
18:63:10:17:4f:38:6a:c8:87:3f:ac:46:cf:85:38:cb:bb:7f:
36:b1:c1:7e:68:0e:45:d8:2b:66:e5:db:e8:c7:c8:70:04:f1:
fb:81:8b:28:ff:21:b6:2b:6a:55:59:b4:1e:a5:5e:c3:56:44:
00:e5:1a:75:cb:5d:76:f9:93:a2:98:0b:90:31:77:0f:cf:95:
62:e0:81:96:ff:d8:ee:09:6d:e6:a3:ee:55:18:0c:ec:4b:e5:
f6:00:5a:da:f4:12:9c:8f:52:9a:b6:46:c9:c5:4d:de:7d:56:
c3:73:9e:b3:aa:6d:d8:ef:33:ff:db:87:7f:76:4b:58:c4:4e:
db:87:f3:b0:00:ac:b5:0a:90:6e:b8:f2:8d:01:9e:44:64:ee:
f8:dd:e8:c4:e9:d8:6f:6f:bd:ea:5b:6d:6b:ca:65:82:51:f7:
85:1a:3a:44:98:8e:7a:f0:99:82:a5:cb:6a:14:f0:d6:64:b9:
71:b0:1c:53:a8:d3:a3:2f:c3:05:b8:d3:1f:3e:30:93:e1:2c:
44:7f:f1:48:aa:f6:07:d2:27:ba:27:7f:af:8a:d0:0d:d9:af:
a5:03:16:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMjv0WbI+mMVLIMSrLmdHrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNDg3M2U2ZThiZTRmOWQzNzY0MTg0ZjEzZTU3NTBmOGM2
MWY2OGIwHhcNMjUwODA5MDIwMDM3WhcNMjUwODEwMDIwMDM3WjAzMTEwLwYDVQQD
Eyg1Y2Q1Yjk1NzQ2YThjYTY0MGVjZDgzZjZhMzMyYTM1YjMzYjcyMDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVwuYsdQ78M4G/zCOyYaj8UwI+8H
0qJ2ddMSzcfqk0fkKIpXzI0uR7hlsGSkBONv8owgqwmOXt6BG5ONxZphjuHGkFba
tToes3kbMcwQz6ZzDjF48wfTZIQ1AP2vH80dvRWEXeq6AynaNQM5RR9Ab4m88dQC
n1XmVXU28X1PEODkeR5X1Grvt9AjmHIy03iLoR+Xs6L+tVJ9yKkVi4OtEWBATINM
FWkqcmQTFKNKquWLf3DKI59I95QMBPyzC40eokK1n3+oz+xGrx4vsT6BkSDkGSAX
tm0p6VkDguPKQOIGG1rNDQx0DSN+5i2mdKAm6VZ5ffNAl+kO9ZE37D+inQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzVuVdGqMpkDs2D9qMyo1sztyB2MB8GA1UdIwQY
MBaAFC1Ic+bovk+dN2QYTxPldQ+MYfaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEt
NjU5NmQ1MDM2MzYyLzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEtNjU5NmQ1MDM2MzYy
LzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIps4fc+K
7EilQmqD0wter7LKUJ2erhIhQGgFRJ8I7jo23Zd1GGMQF084asiHP6xGz4U4y7t/
NrHBfmgORdgrZuXb6MfIcATx+4GLKP8htitqVVm0HqVew1ZEAOUadctddvmTopgL
kDF3D8+VYuCBlv/Y7glt5qPuVRgM7Evl9gBa2vQSnI9SmrZGycVN3n1Ww3Oes6pt
2O8z/9uHf3ZLWMRO24fzsACstQqQbrjyjQGeRGTu+N3oxOnYb2+96ltta8plglH3
hRo6RJiOevCZgqXLahTw1mS5cbAcU6jToy/DBbjTHz4wk+EsRH/xSKr2B9Inuid/
r4rQDdmvpQMWTQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:41:27 2025 by rpki-client