Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
File: LMubibwLwhdSR05lDcNPBp2lwLM.mft (raw, json)
Hash identifier: j0qGlgCoA9kZ3ofvIlrUsJ9OwlPocS6yIe9WndLj2bc=
Subject key identifier: 81:07:F4:DA:87:0E:C6:BE:F2:BD:63:58:8F:3F:44:AC:C9:A6:8A:16
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial: 019A4E4FE49CF85002386E1E972F4CF28470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 10:00:49 +0000
Manifest this update: Tue 04 Nov 2025 10:00:49 +0000
Manifest next update: Wed 05 Nov 2025 10:00:49 +0000
Files and hashes: 1: LMubibwLwhdSR05lDcNPBp2lwLM.crl (hash: 3gZJSpaNCIduIztwyc4tRpiSPCDudlbNUUI+ObhL9qo=)
2: iT3aXvbqCSM8C0EOtQbsrIdF3MI.roa (hash: kG4itny14VuG2q0hBxrlUoWDGWiOU+QhP7GyoEwImNs=)
3: s4sWrAYojXr7xfsAzWwtDRAyflg.roa (hash: UbGNGNDrvi8NvpaemW5oXC+8HmQiZipid6oKa91jckA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:e4:9c:f8:50:02:38:6e:1e:97:2f:4c:f2:84:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Validity
Not Before: Nov 4 10:00:49 2025 GMT
Not After : Nov 5 10:00:49 2025 GMT
Subject: CN=8107f4da870ec6bef2bd63588f3f44acc9a68a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:07:ea:9b:b3:18:f3:ff:63:61:3c:8b:6e:
96:84:f5:21:f9:52:58:81:92:2d:22:83:32:ea:3e:
a3:f4:24:c2:b3:38:f2:3b:72:3c:4e:27:12:3e:c6:
8b:40:74:3b:96:c2:fd:5f:b4:25:90:7d:24:b6:f1:
cd:8a:ed:6c:b8:6a:05:76:ce:7d:37:fa:e5:98:17:
a0:46:fc:da:a6:2d:16:71:4a:bd:38:c3:d3:2e:6c:
c2:ea:15:60:d7:83:14:09:bf:c0:c6:73:c3:aa:15:
7f:5b:18:56:46:13:62:5b:c8:09:9d:75:76:08:10:
bf:a1:a5:ac:79:61:21:7f:ad:ca:63:ab:47:d6:b5:
54:ef:76:6e:9d:cc:ad:16:cd:80:9e:bd:6f:60:97:
20:71:d9:fa:77:d0:07:a6:d9:5b:9f:87:f1:66:60:
a3:ee:2e:d7:06:a1:5e:d6:94:7f:d9:5f:a7:12:8a:
d9:6f:f9:30:27:f0:b4:5e:b0:f1:5a:c5:66:18:32:
3b:55:75:60:96:e9:90:da:f3:00:29:df:3f:e4:fb:
8c:e3:18:c3:ec:99:ac:0a:6d:19:74:72:60:bb:93:
d7:79:02:7a:bd:5e:c9:19:15:ab:ee:fa:e5:90:6a:
71:6e:8c:14:9c:67:34:79:8b:80:38:62:34:ad:2a:
04:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:07:F4:DA:87:0E:C6:BE:F2:BD:63:58:8F:3F:44:AC:C9:A6:8A:16
X509v3 Authority Key Identifier:
keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:93:09:c5:da:f3:ee:4b:c2:49:43:2f:75:b4:5e:62:cd:c0:
2a:88:6a:00:47:75:a2:4e:a6:d3:d4:a4:bc:c4:f8:8b:36:b8:
19:d8:ec:dd:b9:d3:72:31:4e:a7:78:da:67:70:83:f5:4b:25:
3b:4f:32:d2:17:a7:74:6d:e7:76:8a:84:b6:f0:82:d6:56:80:
b1:64:71:2d:32:d2:cc:70:6c:90:53:41:ed:22:5e:85:39:a3:
32:a8:c8:65:e5:c2:4f:41:c9:28:0a:f2:fd:9e:f0:d7:db:48:
e1:dc:b8:7e:f5:9c:da:b1:b1:79:5c:93:cf:b1:a7:fa:04:9f:
0f:98:87:5e:86:82:e4:61:be:6d:72:da:2b:e6:0b:d3:c3:77:
24:5b:ac:01:6c:1a:c4:9f:c5:8a:ae:70:6e:dd:96:f2:b0:e6:
92:d5:f6:1e:78:66:ac:c3:f7:7a:a7:5c:69:ad:f7:de:f2:2c:
a7:ce:11:88:17:70:de:1a:32:65:69:99:d0:1b:af:b4:b2:4b:
7f:7e:26:ab:77:29:7e:c5:3f:0b:18:58:67:30:32:c7:4a:5e:
18:b9:fb:bb:03:91:e4:18:b7:c2:9c:91:d9:04:86:31:f5:63:
61:49:4b:1e:73:a3:e5:53:0b:43:79:6a:44:52:f9:24:fb:17:
a2:69:b2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:37 2025 by rpki-client