Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
File: LMubibwLwhdSR05lDcNPBp2lwLM.mft (raw, json)
Hash identifier: Rfq34OxYvcgmCXuosEG6TbNqwHNbrWb+VV9UTAnAw7Y=
Subject key identifier: 98:72:3D:1A:EF:FA:C5:A9:F7:89:38:FD:28:0E:9F:57:1A:66:E9:2A
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial: 0196549342041386926124785C1B0406D513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 19:00:58 +0000
Manifest this update: Sun 20 Apr 2025 19:00:58 +0000
Manifest next update: Mon 21 Apr 2025 19:00:58 +0000
Files and hashes: 1: LMubibwLwhdSR05lDcNPBp2lwLM.crl (hash: FBgA45piAHcpiEQvtiOWIjurM5st+9f+xXIyZHWGxIg=)
2: iT3aXvbqCSM8C0EOtQbsrIdF3MI.roa (hash: kG4itny14VuG2q0hBxrlUoWDGWiOU+QhP7GyoEwImNs=)
3: s4sWrAYojXr7xfsAzWwtDRAyflg.roa (hash: UbGNGNDrvi8NvpaemW5oXC+8HmQiZipid6oKa91jckA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:42:04:13:86:92:61:24:78:5c:1b:04:06:d5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Validity
Not Before: Apr 20 19:00:58 2025 GMT
Not After : Apr 21 19:00:58 2025 GMT
Subject: CN=98723d1aeffac5a9f78938fd280e9f571a66e92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:67:a2:24:d5:21:75:4b:90:9d:a3:0c:be:
2c:28:c6:f2:a5:c0:7a:ca:a2:9e:bc:5b:12:fe:c1:
fc:4e:2f:70:08:90:f7:ac:30:80:dd:65:c3:94:4c:
d6:25:ea:84:ad:56:4e:4d:59:4b:b4:41:50:74:c8:
2c:b3:e0:c2:97:ba:73:e5:41:de:ca:f0:a6:4a:dd:
0d:57:dd:a8:2b:32:f0:16:e0:2f:09:9a:79:33:c4:
98:ee:c3:da:b9:26:0a:e7:93:06:9c:b2:69:06:84:
d4:82:e6:e4:7d:11:5e:bb:98:cf:72:3f:0b:a3:f3:
a5:b0:65:e7:54:8c:e9:f1:a7:4a:65:81:b8:3a:21:
ca:9b:c4:22:56:28:a8:03:4e:e2:ef:19:95:e0:08:
1c:ff:eb:4e:24:af:6f:cc:9a:54:cf:96:53:08:25:
ea:2c:51:92:c1:ba:5b:1d:01:01:0f:22:ac:57:d4:
cd:42:47:13:a6:bb:4b:10:18:21:70:8a:c9:ec:9f:
17:0a:10:8d:c1:8b:e5:99:05:2c:e3:41:b8:45:62:
fc:68:b7:1e:8f:b4:4a:bf:36:b2:fb:3c:6f:75:19:
28:2f:64:b7:6b:77:5d:04:71:7e:5c:8d:2f:40:eb:
cc:67:d8:5e:0f:ae:40:74:4d:c2:00:23:ce:72:88:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:72:3D:1A:EF:FA:C5:A9:F7:89:38:FD:28:0E:9F:57:1A:66:E9:2A
X509v3 Authority Key Identifier:
keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f5:c2:8e:44:62:b2:a2:4c:8b:d5:80:93:75:b6:4b:ba:08:
59:7b:ab:c7:e9:7d:f6:8d:16:cc:89:c2:04:11:93:85:ad:a0:
45:06:af:c4:25:12:c1:d3:fe:e1:2a:d6:77:0c:89:60:c1:8a:
89:a7:7b:56:60:01:15:a8:d2:c0:f9:5c:8e:3b:ff:dc:4c:78:
f9:9b:55:ad:35:db:0f:c8:6d:3d:ec:de:ee:11:76:40:f2:e4:
ba:b5:63:c4:a4:4f:fa:e2:89:cb:f2:c9:93:77:c5:f9:47:eb:
01:1c:20:28:3a:30:80:91:7f:0b:a5:40:f1:89:20:68:a7:8b:
3c:d2:9c:2d:36:7a:1b:40:6f:f5:72:e8:d4:fa:e9:b3:bf:14:
48:48:02:11:85:25:52:39:dc:7a:7b:5d:e5:4c:d5:4c:b9:09:
03:16:cf:27:1b:84:df:5a:22:bc:50:c4:e0:c7:61:df:33:71:
59:b7:d3:3b:31:aa:f8:50:9c:68:86:53:23:e7:4c:c8:fd:ae:
fa:28:db:8b:b2:cd:dd:ba:91:34:64:b2:94:e0:7d:c1:46:b1:
56:9e:f0:23:f0:57:76:36:02:80:83:1d:56:9f:6c:f4:02:78:
91:66:35:73:e5:ff:db:d1:e0:2a:08:05:73:09:0d:ce:cf:89:
a8:c7:73:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:33 2025 by rpki-client