Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
File: LMubibwLwhdSR05lDcNPBp2lwLM.mft (raw, json)
Hash identifier: b48CCe1BsZ2lxshzLEyDxop/EuQ3+kZ2JpKDCt4pi9A=
Subject key identifier: 7C:50:21:3C:0F:51:16:DD:FD:06:B6:74:1F:95:05:1C:F0:2D:E5:4B
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial: 01967755CD8A9BDC8F9D64C50F2C69DFF048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
Manifest number: 1516
Signing time: Sun 27 Apr 2025 13:00:33 +0000
Manifest this update: Sun 27 Apr 2025 13:00:33 +0000
Manifest next update: Mon 28 Apr 2025 13:00:33 +0000
Files and hashes: 1: LMubibwLwhdSR05lDcNPBp2lwLM.crl (hash: DWfAWBNn+5B3BzAwJGXhp0Le/Zg7eWvp/BMZPiL2t74=)
2: iT3aXvbqCSM8C0EOtQbsrIdF3MI.roa (hash: kG4itny14VuG2q0hBxrlUoWDGWiOU+QhP7GyoEwImNs=)
3: s4sWrAYojXr7xfsAzWwtDRAyflg.roa (hash: UbGNGNDrvi8NvpaemW5oXC+8HmQiZipid6oKa91jckA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:cd:8a:9b:dc:8f:9d:64:c5:0f:2c:69:df:f0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Validity
Not Before: Apr 27 13:00:33 2025 GMT
Not After : Apr 28 13:00:33 2025 GMT
Subject: CN=7c50213c0f5116ddfd06b6741f95051cf02de54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:59:e9:81:8f:0c:ec:bd:93:13:de:6e:21:
84:10:e1:af:2a:d5:2e:3e:03:65:95:af:86:b3:74:
d9:3b:ac:46:94:57:d0:0d:a9:60:5b:b8:72:ec:47:
cd:bb:06:f9:54:03:7c:fd:51:9e:11:b5:59:83:bb:
bb:cd:aa:ca:bf:bc:d9:a3:ab:3c:7a:41:58:2f:af:
7b:6e:e3:36:ac:68:d9:6c:6d:63:05:13:8b:0b:6e:
8b:06:c3:a6:52:4e:b2:4b:d6:06:61:1f:1f:30:d2:
f5:33:24:db:b9:da:e5:ca:1b:9b:de:27:ee:7e:78:
37:6f:86:7a:be:0d:ce:7f:03:56:7d:4c:60:dd:9b:
ee:be:00:06:d1:23:f7:4e:58:2d:7a:13:2b:d8:16:
9d:5c:20:7d:88:cc:e8:99:ed:72:58:28:fb:6c:94:
69:eb:32:1a:d7:12:13:11:09:9f:bc:1a:8b:11:9e:
a0:64:f4:03:37:0d:03:95:63:33:14:e6:6e:ff:11:
a1:1f:50:36:fb:ef:57:bd:2c:12:75:89:28:27:61:
3a:69:d1:bf:f4:e1:dc:2c:ae:d5:78:cd:88:a7:b9:
0d:76:c9:a9:19:b3:ea:26:02:87:17:c5:95:e6:1d:
94:e9:12:82:de:92:16:34:56:f1:4b:6b:d7:76:79:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:50:21:3C:0F:51:16:DD:FD:06:B6:74:1F:95:05:1C:F0:2D:E5:4B
X509v3 Authority Key Identifier:
keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:ee:03:74:5e:e0:5a:00:c7:45:84:15:87:87:4d:49:af:37:
24:2d:42:4b:18:df:d6:52:2e:4a:d2:8c:02:4d:d1:e3:1a:b4:
52:38:ee:73:ca:bf:79:98:79:86:9c:35:88:4d:f3:fa:98:2e:
16:a7:10:43:1e:63:2c:d2:30:6f:0a:db:c9:cc:01:7c:59:8c:
ec:7f:06:54:77:66:c2:2b:3a:d5:03:67:19:35:9f:f3:72:24:
3b:75:9a:60:f4:76:be:d2:19:a3:1d:e3:bb:16:ec:68:cb:26:
2b:f7:6d:8a:51:e0:3a:63:4b:0b:73:da:12:3a:b7:02:8e:d0:
0c:70:dc:d0:ad:f0:51:ac:cb:a0:1c:3a:ad:9d:dd:b0:30:10:
34:e7:e4:aa:d9:b2:7e:ab:7e:d2:e1:06:88:e0:74:17:ea:36:
4e:cc:45:f8:fc:11:54:d7:9b:52:63:d4:8e:85:27:73:fe:2d:
9f:4b:56:3e:5e:06:a2:24:bb:27:16:c8:80:20:53:7f:c4:69:
7e:8c:33:cf:8d:f0:b6:8b:77:e5:a9:0f:21:23:59:96:b6:52:
8d:ee:61:07:54:96:d8:91:4d:db:ab:ac:69:12:c6:7d:2e:f9:
7b:1f:60:f3:ee:1b:c6:e2:65:e4:77:16:c2:b6:50:4e:91:a3:
c4:d6:a7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:22:23 2025 by rpki-client