Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
File: LMubibwLwhdSR05lDcNPBp2lwLM.mft (raw, json)
Hash identifier: ltPAB2VjgNajrYYHM1lx9b5vSJLA1ROKzc0isVvC3JI=
Subject key identifier: F6:76:79:CE:B3:B0:9A:72:E2:48:D8:01:97:C2:4A:98:45:64:20:A3
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial: 019747E721DDF63340763CADB8F03EF6ECE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 01:00:19 +0000
Manifest this update: Sat 07 Jun 2025 01:00:19 +0000
Manifest next update: Sun 08 Jun 2025 01:00:19 +0000
Files and hashes: 1: LMubibwLwhdSR05lDcNPBp2lwLM.crl (hash: aE/Zvcv0eoEX6rzZG+9PJzsqgFQnSzRkb4wB2KVCEps=)
2: iT3aXvbqCSM8C0EOtQbsrIdF3MI.roa (hash: kG4itny14VuG2q0hBxrlUoWDGWiOU+QhP7GyoEwImNs=)
3: s4sWrAYojXr7xfsAzWwtDRAyflg.roa (hash: UbGNGNDrvi8NvpaemW5oXC+8HmQiZipid6oKa91jckA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:21:dd:f6:33:40:76:3c:ad:b8:f0:3e:f6:ec:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Validity
Not Before: Jun 7 01:00:19 2025 GMT
Not After : Jun 8 01:00:19 2025 GMT
Subject: CN=f67679ceb3b09a72e248d80197c24a98456420a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:db:30:c2:b1:43:c3:f1:28:ce:46:08:a8:c8:
31:38:59:be:a7:01:79:b6:6d:74:9e:cd:38:8a:2e:
b6:e6:0e:4e:8b:51:53:17:62:26:a8:9e:f9:76:91:
9f:e5:d0:67:f3:ac:7a:5c:a0:b7:44:46:eb:7c:c1:
69:9d:84:62:9a:e3:a4:cb:44:83:0f:d9:11:91:74:
f6:f5:43:55:5c:11:6e:b1:f5:f7:ff:bd:cc:e2:63:
f0:e8:15:ac:b5:c5:f4:ab:e5:ec:91:4e:44:c5:de:
c8:78:40:2b:83:74:4e:88:9d:b0:29:7c:3f:f8:60:
00:38:2a:55:1a:c9:8d:ae:02:41:10:d8:b1:22:1c:
4d:13:18:ac:06:23:38:16:e4:83:29:0e:18:74:20:
d3:1d:38:14:1e:8a:91:18:e2:31:90:d5:2d:e9:40:
ca:b6:51:09:d6:96:df:27:6b:b1:2e:34:89:ed:76:
70:78:fb:39:1f:9f:14:4a:ea:d2:d8:15:2f:0a:02:
4e:48:36:3d:c3:bb:db:54:1d:7a:23:03:55:1d:a6:
35:05:6d:29:fe:21:e7:05:3e:da:2a:4e:38:c9:01:
a3:a4:d0:27:58:29:c7:7d:a3:ab:db:51:b3:8c:0a:
79:63:16:24:3c:27:ff:8f:45:da:18:61:19:d5:8e:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:76:79:CE:B3:B0:9A:72:E2:48:D8:01:97:C2:4A:98:45:64:20:A3
X509v3 Authority Key Identifier:
keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1a:b0:95:df:1f:d6:ac:2e:ae:28:38:82:8d:ca:03:c2:a5:
75:30:e0:7f:02:57:a6:7a:d0:3c:36:31:08:f3:46:56:e9:4a:
7e:c3:80:07:6f:ef:b5:76:fa:bb:b9:3e:28:7f:4c:d7:c5:05:
f6:38:b2:f6:47:e7:c8:31:7c:7f:68:cb:79:ab:df:27:24:7d:
21:22:5d:f3:44:67:2c:d4:81:e4:1e:b0:cd:d5:bb:bd:6a:26:
28:91:93:a3:0c:16:57:51:e6:93:c9:36:b7:62:1a:2b:58:9b:
6d:d7:6c:0d:fa:66:1a:ef:3c:d0:2f:c2:78:28:82:c4:58:91:
6c:dc:6a:6e:38:55:be:17:6d:b6:7a:6f:8c:92:20:b5:3f:08:
df:6c:04:77:63:81:ef:9f:85:d9:fb:b9:94:e0:f5:a8:20:30:
d3:53:d5:f4:0b:42:ac:c0:b9:c1:b6:7b:aa:a7:4b:26:d5:21:
8e:96:fe:34:d1:eb:a8:d4:03:56:98:a6:da:81:9e:50:9c:0e:
bb:82:0d:72:ed:96:5a:b7:b1:25:67:c1:70:04:61:98:19:e8:
2b:fb:92:5b:21:07:1f:d9:bb:dc:d3:f8:a8:46:9a:2b:8b:f2:
8c:b7:3b:5d:dd:7f:6b:db:96:de:38:89:a3:ec:75:6d:56:1b:
1f:34:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:53:10 2025 by rpki-client