Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: JFimKHvkmMJ6ldpRt7fxDAyFP3Ix0u+6takWVG8WceE=
Subject key identifier: E8:E1:2C:43:89:54:9F:D6:28:85:F3:94:9F:A6:DD:05:F4:4B:7F:EC
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 019A526319D84CE77A72AC601AEE6CF1DCCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0CFA
Signing time: Wed 05 Nov 2025 05:00:17 +0000
Manifest this update: Wed 05 Nov 2025 05:00:17 +0000
Manifest next update: Thu 06 Nov 2025 05:00:17 +0000
Files and hashes: 1: F4j0SvgLwOArGutleMjOUsweLH0.roa (hash: rtZZS/ojxAM0GrxEZyr9Anac9IUDzruPbDxrnYwBPLQ=)
2: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: +9vSl/3rVZCrzmp9c83kJqyJsT1VHttnvJJCYv0Dol8=)
3: ksKNJKdJkzArGKQ2ZNz2rCML8U0.roa (hash: 7wxM1aJdG+1AiLxgq7asY+xV1rv72VvK8vU9Va6cLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:19:d8:4c:e7:7a:72:ac:60:1a:ee:6c:f1:dc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Nov 5 05:00:17 2025 GMT
Not After : Nov 6 05:00:17 2025 GMT
Subject: CN=e8e12c4389549fd62885f3949fa6dd05f44b7fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:08:d1:ac:1d:32:4d:eb:7a:67:e8:8a:32:
95:a4:e1:8b:1f:d2:3c:5b:de:f9:1e:0e:0e:e6:ca:
a7:41:1f:60:fb:ba:a4:a8:c5:7b:ee:9d:55:62:77:
8a:3d:2c:50:45:28:18:0a:e4:2d:05:63:7b:cb:c3:
3a:65:c9:8e:42:f4:db:8b:1a:92:21:65:bc:d8:ea:
fb:46:e3:db:24:2c:1a:cc:96:65:8c:f7:a0:2d:ca:
4f:6b:0c:5e:c7:7c:ec:ff:5a:5d:5a:ca:b5:77:79:
68:93:33:20:24:c6:8e:30:47:77:d7:31:8a:10:33:
59:70:70:de:0e:a6:8f:1a:02:1e:be:58:24:9b:d9:
c4:ea:1c:b9:19:79:b0:86:6c:b2:e7:2c:72:c1:54:
25:6e:33:2c:91:4f:20:8d:bc:d3:21:6a:5c:34:1e:
36:b4:00:77:99:3f:7a:81:fc:03:46:de:4e:1a:d1:
58:2d:74:36:66:cb:c3:b9:47:db:7e:0a:95:d0:ea:
f1:b1:fc:18:de:0d:82:03:14:c6:88:7f:a6:8c:ce:
15:cd:05:c3:3c:ce:8e:0a:04:02:3a:39:98:76:55:
6b:e3:1e:e0:58:dd:d8:f1:76:fc:d0:c1:c6:65:49:
4e:cf:b2:f4:f3:08:55:20:84:61:c1:88:ca:df:45:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E1:2C:43:89:54:9F:D6:28:85:F3:94:9F:A6:DD:05:F4:4B:7F:EC
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7b:ad:7e:52:86:46:35:49:1f:c2:f0:0c:13:b4:a6:da:3d:
8b:57:15:ba:28:ea:c8:5b:2e:54:80:40:29:28:b6:71:7c:9b:
08:18:a7:16:96:99:95:4d:cd:dc:1a:27:1c:e3:5e:2f:12:c4:
d6:c1:73:a0:dd:ae:81:25:d4:b1:4a:ae:ac:13:2d:aa:40:cd:
ec:0f:db:03:90:67:00:b7:26:26:af:7f:e0:ff:31:f2:86:ad:
bc:78:d1:b3:21:eb:96:2c:32:2d:da:db:ba:6e:78:db:c8:7f:
ae:82:51:21:b9:4d:24:4f:0b:ff:1b:1b:70:bf:08:a5:a2:df:
ec:f3:cc:ff:d9:45:37:5d:0c:95:d6:26:ba:42:e1:ba:5f:15:
5a:19:29:28:fc:08:c7:78:a8:6e:64:85:b0:c8:c8:7e:93:cd:
02:51:94:1f:e9:aa:ed:b4:0b:34:a9:6a:70:f4:ba:e9:16:a6:
b4:14:85:ee:c2:5a:b3:7f:8a:25:93:b4:d9:f1:25:e7:fc:8d:
1e:23:4d:e9:48:ed:8b:07:41:56:de:d2:f3:73:cf:06:44:79:
77:c8:14:b8:4f:03:5d:96:b2:4a:19:65:72:5f:c7:2e:99:d0:
0f:7f:83:32:70:fc:2c:f3:a1:e1:4d:00:72:80:a8:e8:92:04:
63:84:cb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:57:49 2025 by rpki-client