Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
File: LMubibwLwhdSR05lDcNPBp2lwLM.mft (raw, json)
Hash identifier: nN9kVd0xHEs0R47dtUHQ1ujsZb2THg92pzpHgT+qIOs=
Subject key identifier: 72:42:83:C1:A6:0D:2B:4D:E8:B2:02:5D:59:8C:62:57:4C:F3:92:82
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial: 0198733DAC0DE2C8996AA68AB1CDFB951957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 04:01:18 +0000
Manifest this update: Mon 04 Aug 2025 04:01:18 +0000
Manifest next update: Tue 05 Aug 2025 04:01:18 +0000
Files and hashes: 1: LMubibwLwhdSR05lDcNPBp2lwLM.crl (hash: q6ssYMAljiklTyW3yEbUPVPEvsjKHAFoMeLuuXqsdGg=)
2: iT3aXvbqCSM8C0EOtQbsrIdF3MI.roa (hash: kG4itny14VuG2q0hBxrlUoWDGWiOU+QhP7GyoEwImNs=)
3: s4sWrAYojXr7xfsAzWwtDRAyflg.roa (hash: UbGNGNDrvi8NvpaemW5oXC+8HmQiZipid6oKa91jckA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:ac:0d:e2:c8:99:6a:a6:8a:b1:cd:fb:95:19:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Validity
Not Before: Aug 4 04:01:18 2025 GMT
Not After : Aug 5 04:01:18 2025 GMT
Subject: CN=724283c1a60d2b4de8b2025d598c62574cf39282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:db:79:28:ae:a7:44:8f:ba:dd:34:2a:21:
4e:11:e1:33:38:53:20:11:cb:8f:2b:0b:db:e2:d0:
28:02:75:88:30:b4:c6:a6:b3:ab:de:07:8a:af:18:
8d:10:ad:d8:53:aa:ad:f8:55:79:7e:84:c5:fb:1c:
81:4b:2e:21:ba:91:0c:4e:d1:23:a0:6a:ae:a2:69:
7e:59:81:09:4c:6a:e1:6f:5c:c2:a4:f5:6e:61:9e:
f7:c1:ad:79:07:c1:4a:44:3c:59:38:43:70:66:22:
c1:2f:59:b0:9d:65:01:8f:6a:fe:65:ad:4d:86:53:
c4:38:8c:c2:99:b4:45:81:68:35:2d:39:89:bb:91:
ca:de:0b:7c:16:3c:cf:8f:0a:2c:8a:b2:28:38:15:
fc:07:38:5e:2a:63:9f:67:64:5f:a9:55:56:73:b6:
01:5c:70:b9:57:3d:d8:64:4f:1b:31:65:38:2a:00:
27:bb:7b:25:20:d5:5e:ed:27:22:2d:66:a9:14:b2:
0c:10:4a:76:35:6c:b1:da:89:c8:e3:06:b5:09:77:
bc:a2:13:69:c9:d5:d9:b1:c0:0f:86:71:f9:2b:c8:
70:60:31:26:b4:81:08:58:12:27:29:e2:0f:47:1b:
fa:c0:b6:c9:cc:8b:10:e6:59:ac:75:39:2d:9d:33:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:42:83:C1:A6:0D:2B:4D:E8:B2:02:5D:59:8C:62:57:4C:F3:92:82
X509v3 Authority Key Identifier:
keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b0:74:e2:c9:6d:ba:39:d5:36:73:84:ce:bc:ea:eb:65:86:
7c:35:58:fc:62:ee:27:b6:90:34:ff:95:3b:48:94:3c:33:2c:
3c:c6:dc:d2:47:ee:1d:48:60:06:1a:ee:ac:00:d7:e9:37:ec:
f0:4b:1b:3f:5c:3a:70:c1:69:8d:0b:23:66:1d:a8:fd:5f:ea:
9b:dd:4e:92:3b:22:1e:ad:eb:bd:81:1f:78:17:03:9d:69:33:
f2:02:4c:95:4a:7b:cf:18:fe:a4:72:33:0d:5d:d8:58:3e:50:
7d:31:c1:31:a2:c6:8c:6f:31:ff:5b:ba:3a:3c:39:d6:df:fc:
e7:d8:9f:bd:5f:11:b4:92:e3:74:c2:bd:2f:80:24:b0:9c:a9:
8d:df:a4:08:a8:3e:91:74:d8:12:a6:60:67:00:42:aa:1c:8a:
fe:d5:24:26:6d:b4:d1:13:73:34:02:d4:15:83:56:e4:21:dd:
70:db:ac:5f:19:26:75:d8:97:16:07:8c:8a:36:9f:5e:76:09:
e5:af:10:f5:72:e1:69:0e:69:ba:1f:f3:bc:ee:2c:a6:30:15:
24:70:82:17:a5:11:a9:22:65:8b:1c:6d:d0:a9:d6:59:15:3c:
b1:5a:cc:53:40:04:cf:aa:84:ab:0e:8f:cf:bd:4e:c1:46:ec:
e2:53:ca:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPawN4siZaqaKsc37lRlXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjY2I5Yjg5YmMwYmMyMTc1MjQ3NGU2NTBkYzM0ZjA2OWRh
NWMwYjMwHhcNMjUwODA0MDQwMTE4WhcNMjUwODA1MDQwMTE4WjAzMTEwLwYDVQQD
Eyg3MjQyODNjMWE2MGQyYjRkZThiMjAyNWQ1OThjNjI1NzRjZjM5MjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC/beSiup0SPut00KiFOEeEzOFMg
EcuPKwvb4tAoAnWIMLTGprOr3geKrxiNEK3YU6qt+FV5foTF+xyBSy4hupEMTtEj
oGquoml+WYEJTGrhb1zCpPVuYZ73wa15B8FKRDxZOENwZiLBL1mwnWUBj2r+Za1N
hlPEOIzCmbRFgWg1LTmJu5HK3gt8FjzPjwosirIoOBX8BzheKmOfZ2RfqVVWc7YB
XHC5Vz3YZE8bMWU4KgAnu3slINVe7SciLWapFLIMEEp2NWyx2onI4wa1CXe8ohNp
ydXZscAPhnH5K8hwYDEmtIEIWBInKeIPRxv6wLbJzIsQ5lmsdTktnTObyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJCg8GmDStN6LICXVmMYldM85KCMB8GA1UdIwQY
MBaAFCzLm4m8C8IXUkdOZQ3DTwadpcCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yM2Y3YzQtNmUzYi00ZmRhLTkzMWIt
MDYyYWVkNTEzODFjLzEvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yM2Y3YzQtNmUzYi00ZmRhLTkzMWItMDYyYWVkNTEzODFj
LzEvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbB04slt
ujnVNnOEzrzq62WGfDVY/GLuJ7aQNP+VO0iUPDMsPMbc0kfuHUhgBhrurADX6Tfs
8EsbP1w6cMFpjQsjZh2o/V/qm91OkjsiHq3rvYEfeBcDnWkz8gJMlUp7zxj+pHIz
DV3YWD5QfTHBMaLGjG8x/1u6Ojw51t/859ifvV8RtJLjdMK9L4AksJypjd+kCKg+
kXTYEqZgZwBCqhyK/tUkJm200RNzNALUFYNW5CHdcNusXxkmddiXFgeMijafXnYJ
5a8Q9XLhaQ5puh/zvO4spjAVJHCCF6URqSJlixxt0KnWWRU8sVrMU0AEz6qEqw6P
z71OwUbs4lPK9w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:56 2025 by rpki-client