Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json)
Hash identifier: 96wci/6NscXiAuJwb33cbr7rE7CdRgxiguOPkdsUA/E=
Subject key identifier: A6:40:58:2C:86:EA:73:F0:2D:67:55:AD:9B:58:E0:93:55:BB:10:69
Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Certificate serial: 019687DBA455711716A412596D0FD960B22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
Manifest number: 0B03
Signing time: Wed 30 Apr 2025 18:00:40 +0000
Manifest this update: Wed 30 Apr 2025 18:00:40 +0000
Manifest next update: Thu 01 May 2025 18:00:40 +0000
Files and hashes: 1: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: XZfS2d069XNzG1QZQhHbmTEp7K1stNSrShRU0xI8UdI=)
2: aj0WVl4e2z2ZBYCahhraDL8ORdI.roa (hash: F73B/tSwqY+Pedxj19hK+zjEl11bKyVtrVcIkgShsak=)
3: ksKNJKdJkzArGKQ2ZNz2rCML8U0.roa (hash: 7wxM1aJdG+1AiLxgq7asY+xV1rv72VvK8vU9Va6cLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:a4:55:71:17:16:a4:12:59:6d:0f:d9:60:b2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b
Validity
Not Before: Apr 30 18:00:40 2025 GMT
Not After : May 1 18:00:40 2025 GMT
Subject: CN=a640582c86ea73f02d6755ad9b58e09355bb1069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:cc:55:99:b4:09:62:cf:56:a5:df:e5:e9:
7d:cc:32:d9:9f:de:57:24:29:87:73:8a:f3:0e:b7:
d3:df:4d:bc:73:22:1c:1b:8f:d0:e0:3d:8e:f2:13:
cd:b8:e1:6a:ca:a3:c9:8e:f6:ec:19:47:3c:b9:5c:
09:07:9a:25:d5:a2:61:48:bc:68:df:3e:f5:9e:0c:
eb:58:4f:c2:e9:d4:3e:eb:19:2d:e8:ee:d6:8e:3a:
f9:20:e3:37:f6:9c:31:5a:14:ca:86:f0:0a:3f:95:
cb:85:82:0b:f1:d6:5a:0d:64:67:da:43:c5:b9:09:
41:0b:5a:03:78:78:2e:08:a9:c2:62:31:f4:f6:c1:
09:e0:16:55:08:88:55:25:c1:b9:9d:2c:15:38:6b:
b7:18:4b:08:c0:c5:72:3b:82:88:58:4d:bf:19:9f:
c2:8c:76:15:e0:6a:87:07:8c:96:d1:0c:f5:82:7e:
e5:ce:cc:ea:97:27:c1:8a:10:d2:e6:c7:d3:f6:52:
34:00:89:7e:0a:e8:71:e3:03:fe:eb:68:a5:84:a1:
1c:35:f8:7d:c0:0e:da:70:a8:f2:64:c0:e6:8f:bb:
96:b4:b0:16:41:b6:6e:65:49:56:3e:c6:4a:31:ca:
00:ee:ce:a4:5b:5a:0b:e9:01:9c:21:01:41:2b:47:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:40:58:2C:86:EA:73:F0:2D:67:55:AD:9B:58:E0:93:55:BB:10:69
X509v3 Authority Key Identifier:
keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:65:e1:f4:ac:b2:12:48:f7:86:4c:b2:fc:f6:d5:d3:16:cf:
f9:67:b5:76:aa:f1:ce:ae:57:8f:84:00:00:43:af:02:31:cb:
22:f8:63:d9:dc:a0:df:c9:49:87:d4:20:de:6b:22:93:d7:7d:
ed:8b:78:7a:d8:ae:cd:2b:af:84:2c:4d:53:68:4e:57:1d:ca:
a4:70:e2:95:f2:1a:6c:76:5c:61:52:8d:84:c6:f9:a4:75:bb:
fb:8c:c3:82:01:30:ae:76:c6:cf:8e:59:c4:a2:8b:3f:4b:7a:
95:c2:b3:20:ca:3c:4b:c1:f2:29:db:c8:e3:6e:19:b2:ce:af:
7c:80:d6:8d:c5:76:39:94:74:8d:81:e5:f5:9a:58:71:82:0f:
d5:56:ee:b7:5f:25:cd:35:b3:db:ba:df:38:c7:8c:d6:11:02:
18:62:94:d1:5a:82:61:15:8b:d5:25:18:d6:21:7b:09:6f:cf:
76:cc:5d:aa:27:45:85:a3:47:6e:5f:5c:a7:71:2b:db:34:3f:
2c:1d:cf:9a:18:c9:82:a8:cf:ae:1d:0c:77:df:1b:08:4e:17:
e9:7f:ee:54:5e:31:38:a2:09:04:b4:13:02:ac:d5:87:ce:95:
46:da:93:61:d3:f2:a0:63:b6:7c:76:86:14:38:b0:94:13:2f:
c8:fe:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:42:27 2025 by rpki-client