Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
File: lmbCOPf_2s8VyALjILUuCYCGnOw.mft (raw, json)
Hash identifier: C5Fk3X1+Zdt/l8s7Ok82AbNtN/j9CR36hTgK6FrtiPk=
Subject key identifier: 27:E0:99:34:17:5A:75:1D:DA:B5:D0:8F:74:0F:95:F4:DF:90:40:1F
Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
Certificate issuer: /CN=9666c238f7ffdacf15c802e320b52e0980869cec
Certificate serial: 01987CAE4E61E13A3D6E8AED9AABF9E16884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
Manifest number: 0F5A
Signing time: Wed 06 Aug 2025 00:00:54 +0000
Manifest this update: Wed 06 Aug 2025 00:00:54 +0000
Manifest next update: Thu 07 Aug 2025 00:00:54 +0000
Files and hashes: 1: jlwHUlpX8poK-lsEjw4bFjVjclo.roa (hash: 7wHJRVYqlI2qLXTgACst4p/Vf4MlPLZtc3YhuGhcwsY=)
2: lmbCOPf_2s8VyALjILUuCYCGnOw.crl (hash: Mu+dO71GT+ZATnFDn4lzH4jURNRkd/hR2W7DQY+e5vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:4e:61:e1:3a:3d:6e:8a:ed:9a:ab:f9:e1:68:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec
Validity
Not Before: Aug 6 00:00:54 2025 GMT
Not After : Aug 7 00:00:54 2025 GMT
Subject: CN=27e09934175a751ddab5d08f740f95f4df90401f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:a4:73:3f:4e:36:5e:ce:7b:70:c0:33:4e:
4f:a3:ce:70:4a:7c:95:18:20:ab:68:a2:98:ca:0c:
48:2c:20:9d:47:6b:22:cf:2d:67:4c:d6:9c:3e:cb:
24:6e:90:69:3e:95:87:26:ca:fc:a4:5e:1a:0f:cd:
22:a9:c9:b4:a6:ec:e5:b0:cd:1e:6a:c0:23:c8:5f:
a1:17:0b:73:33:82:4c:46:ae:cf:25:1b:a6:d0:44:
51:1c:9d:77:c7:7b:d7:24:76:de:5a:51:57:db:ce:
68:99:95:e9:b4:f2:c7:eb:18:f3:22:db:23:24:73:
65:98:23:bd:e5:4c:1f:d4:c8:9f:b3:a4:1b:2b:43:
f2:99:ea:c4:16:c8:b3:c7:83:12:52:c9:fa:0a:3a:
24:a2:c9:70:14:6f:46:5b:8f:42:7b:d5:83:b8:b4:
bd:96:41:42:ca:07:de:00:ef:b5:29:d4:cf:fb:13:
b4:31:66:2d:26:0d:27:b8:fb:a5:3e:5a:a8:78:24:
67:f5:13:5e:39:12:18:8d:33:81:d5:d3:b4:1f:8e:
95:bc:87:6a:bb:7d:3d:ca:f0:10:e9:13:bb:98:ff:
a8:ce:c2:02:ca:f1:eb:46:88:26:10:ff:56:97:fc:
b9:ce:76:d5:dc:ba:0a:72:17:06:18:3a:f0:2a:33:
75:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E0:99:34:17:5A:75:1D:DA:B5:D0:8F:74:0F:95:F4:DF:90:40:1F
X509v3 Authority Key Identifier:
keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d0:fb:b2:0b:74:fb:d7:86:f8:9a:d7:64:31:1c:5a:3a:22:
30:6f:d1:5f:4c:5a:f0:89:2b:bc:1e:7f:e5:28:d5:57:b5:29:
e7:0a:4c:ef:70:da:e3:5f:98:26:11:14:bd:e9:b4:3e:25:e6:
62:b0:87:00:c1:8c:78:fd:e0:50:48:ac:7d:51:cf:04:7b:64:
38:ae:ed:69:e7:a4:8b:1d:ba:fa:c6:7b:87:77:79:b7:60:3b:
f9:97:11:14:99:5f:43:a5:bb:10:b2:41:5f:66:ac:bf:5c:c3:
49:85:47:5e:78:65:65:ab:16:a6:da:47:1f:e2:88:af:b6:6f:
6c:81:a5:68:bf:7f:00:a8:65:07:44:88:72:83:b2:70:e2:4d:
ca:2d:83:4a:49:09:32:8e:f4:20:51:70:c3:1f:ae:13:1b:11:
9d:6f:46:86:29:d9:61:fa:6e:c8:80:5e:ee:46:a6:72:f0:fd:
7d:89:5f:fb:14:56:1a:cc:ec:73:b8:c6:f3:af:75:17:4b:2c:
ac:15:5d:2c:07:eb:16:18:a6:3c:e8:8b:72:86:4e:41:44:71:
47:e0:c6:2d:09:3e:57:01:e7:9c:49:e5:c4:bc:6f:03:ec:c5:
b9:b3:08:f2:d7:90:d2:d7:a9:e9:1a:cf:f8:94:83:38:33:24:
bf:89:2a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:05:03 2025 by rpki-client