Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
File: LMubibwLwhdSR05lDcNPBp2lwLM.mft (raw, json)
Hash identifier: SdEs4yOJ8lCqvO19D0vGn/WNBmxulMki4lGlp+CrY48=
Subject key identifier: 4E:D4:A0:0A:4D:64:48:89:32:41:10:0A:43:72:1C:BE:B4:76:39:DC
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial: 0198D5BC0B798842A2C4E8D0CADCC2B0D257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 07:02:07 +0000
Manifest this update: Sat 23 Aug 2025 07:02:07 +0000
Manifest next update: Sun 24 Aug 2025 07:02:07 +0000
Files and hashes: 1: LMubibwLwhdSR05lDcNPBp2lwLM.crl (hash: Feyx0RFmT3/tFspI+BjRXzFlGnVBCllrTTqWa6nPbB0=)
2: iT3aXvbqCSM8C0EOtQbsrIdF3MI.roa (hash: kG4itny14VuG2q0hBxrlUoWDGWiOU+QhP7GyoEwImNs=)
3: s4sWrAYojXr7xfsAzWwtDRAyflg.roa (hash: UbGNGNDrvi8NvpaemW5oXC+8HmQiZipid6oKa91jckA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0b:79:88:42:a2:c4:e8:d0:ca:dc:c2:b0:d2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Validity
Not Before: Aug 23 07:02:07 2025 GMT
Not After : Aug 24 07:02:07 2025 GMT
Subject: CN=4ed4a00a4d6448893241100a43721cbeb47639dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:cd:5b:e3:6f:f4:8d:e7:da:0e:c1:53:dc:
93:ac:9e:1c:89:e8:b0:99:b4:22:f7:8f:34:fb:b1:
b1:24:e1:89:35:6f:5e:55:89:5a:52:00:4c:06:ca:
50:77:24:eb:a3:00:a8:40:6a:2a:e6:80:f2:ee:52:
17:ed:83:8e:39:00:1f:29:9c:ee:a1:5e:39:56:84:
68:20:9e:bf:f0:80:9b:2b:52:c1:88:20:bd:15:dd:
78:e0:07:ae:6b:7d:a9:e9:ba:f7:3c:39:97:14:1e:
b6:f0:a5:ea:e6:73:60:13:55:33:7d:e0:73:2f:38:
b5:97:5e:db:48:7f:e4:b6:a2:75:18:7d:5b:34:94:
74:d1:39:ac:c7:f8:46:02:58:03:cc:54:52:20:54:
60:e5:c1:75:2a:74:a2:d7:59:6b:1b:bd:41:0c:23:
6e:6f:00:c5:2d:cf:85:94:58:a5:95:8e:c4:a4:2c:
79:19:ce:35:a8:55:f6:00:1d:5a:b6:58:cf:76:a7:
94:2b:62:fd:25:42:5a:83:c8:33:78:a3:a6:84:7d:
79:0c:9d:a2:b6:7d:f8:20:8b:8d:70:39:ca:3c:f4:
a2:a9:96:f6:fb:2f:32:f1:cf:95:53:6e:17:a1:5c:
0d:76:b7:75:29:e2:72:9f:68:b2:b8:9a:fe:a2:3b:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D4:A0:0A:4D:64:48:89:32:41:10:0A:43:72:1C:BE:B4:76:39:DC
X509v3 Authority Key Identifier:
keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:60:0c:a0:4a:60:7b:a0:d4:7c:4c:62:a3:ec:4c:4d:7c:47:
71:db:34:c0:32:67:ef:03:f4:04:f9:dc:1e:1c:5f:43:7c:5c:
3b:e2:11:19:b7:3a:23:e4:f8:62:6a:db:f0:00:6c:df:ca:cc:
27:f0:bb:50:4e:4a:16:2d:10:79:43:04:24:9e:27:98:85:4e:
e7:8f:0f:3c:7d:d0:33:77:53:6b:af:6b:a8:3c:ea:f8:89:5e:
f8:ab:7f:f4:0c:a2:02:54:d4:10:12:af:6a:8e:a5:78:62:1a:
23:81:7b:50:ac:b9:b1:92:21:d4:2c:49:2c:36:65:0f:51:28:
00:28:95:c7:57:bc:f8:50:3a:25:90:cc:30:6a:bf:63:5f:29:
c2:4d:89:ff:d4:97:9f:26:f4:d8:9e:3e:4a:06:5b:65:de:5c:
41:25:36:24:b0:23:a3:31:74:33:1b:ab:6b:4a:f4:43:8d:31:
38:3f:a2:94:f0:fd:e0:c8:50:a9:d1:2c:62:4f:b6:3a:f6:a6:
09:11:9a:20:e6:4b:3a:6e:a0:2b:7d:52:29:6e:58:f3:54:7d:
2a:71:8d:46:6c:82:28:bd:eb:f5:a4:c4:9c:c2:55:5f:fc:1d:
27:95:67:62:2c:11:1e:bd:15:6e:5b:ec:89:80:d7:4c:56:f4:
cb:05:c9:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvAt5iEKixOjQytzCsNJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjY2I5Yjg5YmMwYmMyMTc1MjQ3NGU2NTBkYzM0ZjA2OWRh
NWMwYjMwHhcNMjUwODIzMDcwMjA3WhcNMjUwODI0MDcwMjA3WjAzMTEwLwYDVQQD
Eyg0ZWQ0YTAwYTRkNjQ0ODg5MzI0MTEwMGE0MzcyMWNiZWI0NzYzOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi/NW+Nv9I3n2g7BU9yTrJ4cieiw
mbQi9480+7GxJOGJNW9eVYlaUgBMBspQdyTrowCoQGoq5oDy7lIX7YOOOQAfKZzu
oV45VoRoIJ6/8ICbK1LBiCC9Fd144Aeua32p6br3PDmXFB628KXq5nNgE1UzfeBz
Lzi1l17bSH/ktqJ1GH1bNJR00Tmsx/hGAlgDzFRSIFRg5cF1KnSi11lrG71BDCNu
bwDFLc+FlFillY7EpCx5Gc41qFX2AB1atljPdqeUK2L9JUJag8gzeKOmhH15DJ2i
tn34IIuNcDnKPPSiqZb2+y8y8c+VU24XoVwNdrd1KeJyn2iyuJr+ojvwKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7UoApNZEiJMkEQCkNyHL60djncMB8GA1UdIwQY
MBaAFCzLm4m8C8IXUkdOZQ3DTwadpcCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yM2Y3YzQtNmUzYi00ZmRhLTkzMWIt
MDYyYWVkNTEzODFjLzEvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yM2Y3YzQtNmUzYi00ZmRhLTkzMWItMDYyYWVkNTEzODFj
LzEvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGAMoEpg
e6DUfExio+xMTXxHcds0wDJn7wP0BPncHhxfQ3xcO+IRGbc6I+T4Ymrb8ABs38rM
J/C7UE5KFi0QeUMEJJ4nmIVO548PPH3QM3dTa69rqDzq+Ile+Kt/9AyiAlTUEBKv
ao6leGIaI4F7UKy5sZIh1CxJLDZlD1EoACiVx1e8+FA6JZDMMGq/Y18pwk2J/9SX
nyb02J4+SgZbZd5cQSU2JLAjozF0Mxura0r0Q40xOD+ilPD94MhQqdEsYk+2Ovam
CRGaIOZLOm6gK31SKW5Y81R9KnGNRmyCKL3r9aTEnMJVX/wdJ5VnYiwRHr0Vblvs
iYDXTFb0ywXJBg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:59 2025 by rpki-client