Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
File: LMubibwLwhdSR05lDcNPBp2lwLM.mft (raw, json)
Hash identifier: 7rN5cYcitC4S0OH66ZEhQG/Jl4IPbJQWeKk6Fl+3y7U=
Subject key identifier: AE:29:AE:5C:89:9A:19:6F:C7:A8:6E:85:9A:60:09:8D:D2:CD:D7:58
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial: 019A73017FF93EB72C1F7CA2FA500B63E986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 13:01:09 +0000
Manifest this update: Tue 11 Nov 2025 13:01:09 +0000
Manifest next update: Wed 12 Nov 2025 13:01:09 +0000
Files and hashes: 1: LMubibwLwhdSR05lDcNPBp2lwLM.crl (hash: jXBuLnbfr7HyqdrSpbq+qbBlR/mgxg54kmFvysfE8mM=)
2: iT3aXvbqCSM8C0EOtQbsrIdF3MI.roa (hash: kG4itny14VuG2q0hBxrlUoWDGWiOU+QhP7GyoEwImNs=)
3: s4sWrAYojXr7xfsAzWwtDRAyflg.roa (hash: UbGNGNDrvi8NvpaemW5oXC+8HmQiZipid6oKa91jckA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:7f:f9:3e:b7:2c:1f:7c:a2:fa:50:0b:63:e9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Validity
Not Before: Nov 11 13:01:09 2025 GMT
Not After : Nov 12 13:01:09 2025 GMT
Subject: CN=ae29ae5c899a196fc7a86e859a60098dd2cdd758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d6:f0:95:c7:d7:86:32:f1:52:74:e3:18:c1:
20:c4:cd:a8:1c:ce:91:6b:96:a5:90:65:60:76:a1:
f3:c7:9f:b0:16:8e:23:e9:cd:d0:81:b6:3e:4d:b4:
b4:bf:52:67:c7:be:20:f1:2a:17:49:83:49:c1:42:
0e:25:0e:96:94:8f:b2:bf:68:25:4d:8e:c4:ec:5a:
e7:f0:98:5e:46:4c:c9:71:72:cb:d3:37:6d:5d:b8:
7d:2d:c3:cb:b4:40:6a:ac:9f:3b:55:77:95:80:d0:
ad:2b:be:94:7f:19:c9:0d:4e:56:4c:83:3a:9c:57:
fa:9d:11:ee:a8:be:38:2e:b3:24:c8:32:ec:48:9c:
20:b3:33:2a:76:8f:16:1c:3b:6e:a6:54:5c:0e:e2:
19:04:6b:ec:c3:73:7f:c6:a1:86:30:5c:32:87:e1:
14:90:87:00:95:72:ef:3f:75:8d:fb:c2:97:c2:c6:
ea:35:7b:69:64:53:8e:78:23:1c:fd:ef:2d:5d:52:
15:62:7e:0c:f8:cf:1d:40:ae:c7:c6:46:d5:56:45:
5d:c8:47:f1:a0:2a:1b:77:72:b1:cd:0e:50:cc:c4:
f2:21:d8:af:02:55:8b:c0:e0:29:8c:ca:8a:56:aa:
56:17:30:5f:83:af:2c:d5:76:a1:59:e2:15:16:d7:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:29:AE:5C:89:9A:19:6F:C7:A8:6E:85:9A:60:09:8D:D2:CD:D7:58
X509v3 Authority Key Identifier:
keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bb:d7:4e:c6:dd:d7:3f:ca:5b:3a:37:bf:9d:3d:a7:3e:87:
a2:3c:6b:23:59:cd:cf:11:fe:50:16:60:91:08:d0:04:4f:ef:
1e:5a:7d:0a:d3:35:6b:0d:cb:9b:e7:8d:54:0b:61:a5:47:20:
d7:b6:90:d4:d3:a0:81:08:53:b4:13:93:15:86:ae:3f:f5:34:
46:26:ff:27:40:1c:3b:1e:96:a3:b5:58:6e:9c:78:37:6c:c0:
35:7b:d2:d9:7e:34:fc:70:f0:e1:c9:af:9e:6b:88:37:5f:23:
c0:7e:b2:56:c0:26:e5:93:f2:54:90:cf:21:34:4d:49:8e:42:
5b:d5:31:f5:41:30:ba:8e:0b:19:23:9b:7e:3f:fa:f3:f0:f5:
cd:62:8a:14:7b:1f:21:ad:9f:0b:98:4b:34:50:c8:83:b1:f2:
dd:dd:45:d5:0d:e8:2d:1c:1b:09:5f:45:1c:6a:c1:f3:14:6c:
4d:d4:90:c2:22:f3:2c:06:12:d7:41:83:2e:4c:af:70:5f:f5:
36:1b:38:0a:fd:6b:b5:ba:0e:a4:fb:2c:44:86:0e:b5:bf:bb:
03:18:39:82:9a:67:44:7b:82:99:83:1c:f6:31:24:f2:47:2e:
0e:32:b4:82:ed:da:ae:d5:60:23:e2:74:73:85:ee:04:41:68:
96:f9:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:12 2025 by rpki-client