Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
File: lmbCOPf_2s8VyALjILUuCYCGnOw.mft (raw, json)
Hash identifier: gmKcshMM/AGF4/Z9c97uSbGFjps4xJ4c7XY2m6t129A=
Subject key identifier: 51:77:93:09:5B:68:3B:28:04:ED:F0:E0:75:E8:B5:E7:DB:8E:53:B3
Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
Certificate issuer: /CN=9666c238f7ffdacf15c802e320b52e0980869cec
Certificate serial: 01984A77F1FAEF4A3FE0CFA2DE45BA14A48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
Manifest number: 0F40
Signing time: Sun 27 Jul 2025 06:00:31 +0000
Manifest this update: Sun 27 Jul 2025 06:00:31 +0000
Manifest next update: Mon 28 Jul 2025 06:00:31 +0000
Files and hashes: 1: jlwHUlpX8poK-lsEjw4bFjVjclo.roa (hash: 7wHJRVYqlI2qLXTgACst4p/Vf4MlPLZtc3YhuGhcwsY=)
2: lmbCOPf_2s8VyALjILUuCYCGnOw.crl (hash: 8igyQbSqsjeyZmCThw/ZYf0oeeq9oQZJEJnpEFVPJdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:f1:fa:ef:4a:3f:e0:cf:a2:de:45:ba:14:a4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec
Validity
Not Before: Jul 27 06:00:31 2025 GMT
Not After : Jul 28 06:00:31 2025 GMT
Subject: CN=517793095b683b2804edf0e075e8b5e7db8e53b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:89:bf:68:e2:df:19:df:38:92:9b:53:1e:
14:18:5c:a6:89:f8:02:7d:01:8e:bf:c5:67:59:07:
51:d6:de:58:48:e3:48:4c:2b:c3:d6:cf:ec:ab:62:
f2:35:53:f0:ee:8f:c8:cb:bb:2b:c1:df:b6:4d:bd:
0d:a0:e3:37:1d:bf:1f:99:6e:14:b3:d0:22:67:5b:
02:30:42:58:b9:f1:64:dc:63:94:85:eb:7e:cb:c4:
bc:35:7c:61:93:e7:8e:00:6d:e3:5d:41:8f:13:77:
d0:72:1b:5a:f7:4b:44:ab:11:08:62:1f:d5:76:ad:
c1:03:6f:8d:14:dd:cb:24:4f:86:ba:67:6f:84:15:
63:f3:20:a3:7b:c4:f0:24:6d:f1:50:2c:fe:b5:48:
e2:7d:1a:80:31:5c:e7:ee:5c:ee:66:22:21:df:59:
38:9a:0d:e8:71:0a:d1:d2:01:e7:fb:e4:9a:64:df:
4d:f0:0f:47:be:c8:c3:7d:5b:38:eb:c4:3c:a5:77:
a4:a4:24:c1:92:40:12:ed:ba:0e:be:19:1a:68:1c:
33:da:e4:42:40:ee:9b:36:79:c3:dd:2f:90:2e:4c:
7a:2e:28:2d:4a:df:7c:cf:0a:8b:e3:20:72:e8:13:
77:63:a9:b9:f3:0d:39:32:d2:72:98:11:e6:7a:e0:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:77:93:09:5B:68:3B:28:04:ED:F0:E0:75:E8:B5:E7:DB:8E:53:B3
X509v3 Authority Key Identifier:
keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:41:50:76:45:94:52:99:ee:64:db:8c:cf:16:c4:77:fd:04:
7e:c1:43:96:05:95:1c:bf:99:b7:bd:c2:cf:43:e1:d1:bb:f1:
cc:f7:3a:42:60:41:8d:69:41:6d:1f:67:45:ea:9b:5c:8c:43:
b9:7a:a5:c9:09:21:54:99:ea:fe:39:d3:50:12:58:80:cb:b3:
0a:1c:45:f5:d8:68:d8:e7:da:0b:75:54:0e:e5:8c:1d:83:02:
3e:0d:f7:7b:0f:b1:23:13:90:50:79:9a:10:61:78:78:e2:26:
b9:ce:84:7f:6d:cc:69:80:34:65:c3:a6:2f:38:07:b4:92:dd:
3d:c5:db:ec:8e:9a:10:39:b9:d7:f1:06:75:55:39:2b:a8:bf:
50:8d:df:6a:df:18:68:12:89:a2:28:8e:13:7a:e5:d4:f0:7e:
2d:8d:b3:ca:89:85:8f:e3:1f:95:d9:94:69:cc:eb:82:09:29:
4a:d7:4d:83:13:41:fa:83:c4:a4:44:77:45:83:52:fa:ed:77:
ab:ab:c5:4b:56:d1:3d:18:61:0f:21:97:22:91:02:95:c4:59:
df:52:98:48:24:cb:5f:32:04:fd:4d:fc:7c:88:0a:80:17:c3:
10:3e:69:03:db:ce:f9:90:3e:27:d7:92:09:67:d6:84:c8:2e:
00:f4:39:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:40:27 2025 by rpki-client