Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
File: lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft (raw, json)
Hash identifier: fna6aC7pHKB2pVS4wLbo5o2M0tadhuJCqBdJp7AJKw0=
Subject key identifier: EF:01:AA:3E:2E:26:FE:DC:E4:56:30:A1:0F:05:DE:23:A5:28:9E:44
Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
Certificate issuer: /CN=96448e840d272a3e3159192d1df11f100e506f6a
Certificate serial: 0197B7EA6EFC49D2CC044D5AC33BE4CE6DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
Manifest number: 07DF
Signing time: Sat 28 Jun 2025 19:01:23 +0000
Manifest this update: Sat 28 Jun 2025 19:01:23 +0000
Manifest next update: Sun 29 Jun 2025 19:01:23 +0000
Files and hashes: 1: HRJaIehlqdUQOZwaPo6dI6mb5MQ.roa (hash: NAZLCo/vu2u7I92Xt0rJZZjC+drQdPYyxSFtuqS2OpE=)
2: lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl (hash: 6g9Oym46XLBl7GtYK3qX8ob+A+IUFiKIJAUKkw+pNMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:6e:fc:49:d2:cc:04:4d:5a:c3:3b:e4:ce:6d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a
Validity
Not Before: Jun 28 19:01:23 2025 GMT
Not After : Jun 29 19:01:23 2025 GMT
Subject: CN=ef01aa3e2e26fedce45630a10f05de23a5289e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:55:09:a0:5c:03:ea:9d:f6:e0:f8:75:f6:
85:5d:8e:79:2a:93:81:cf:92:8e:c3:78:36:eb:76:
f2:ce:c0:36:f8:53:e3:bc:3f:be:59:45:8e:a8:47:
5c:e2:90:f1:71:ad:d8:8f:8d:4a:0f:a4:9c:c0:3b:
aa:25:e0:14:21:f0:2d:f8:cc:f4:d6:e2:3e:6f:f4:
21:d5:5f:63:d0:ad:ac:91:93:25:e9:ff:8b:5c:96:
c6:d1:a5:29:da:16:32:95:b5:69:e8:b6:fe:25:f9:
a9:06:a0:0a:93:fd:c3:d5:9f:0f:cb:3b:e1:1c:a8:
73:93:1c:72:32:b5:ff:56:a0:9f:9e:c4:04:22:cf:
b5:e7:32:c9:01:fb:d2:55:e0:72:45:db:e5:d0:5d:
3b:b2:05:80:70:18:9c:82:01:1f:69:7f:f6:88:99:
51:c4:bf:85:fe:8f:92:73:a1:b2:4a:11:b4:b9:9d:
07:9f:8a:a3:13:97:46:6d:2e:b0:a8:82:09:71:5a:
c1:1b:eb:14:55:81:ad:56:87:70:49:84:6e:ef:24:
c1:59:2d:b1:a7:d7:c2:20:1e:1f:b6:72:87:04:08:
2b:f9:dd:bf:3d:be:5c:48:48:5c:e0:e7:ae:4e:83:
58:2a:52:24:cd:4e:18:ab:5e:2a:be:67:06:1e:c7:
8b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:01:AA:3E:2E:26:FE:DC:E4:56:30:A1:0F:05:DE:23:A5:28:9E:44
X509v3 Authority Key Identifier:
keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:17:28:a3:38:bd:99:07:1d:c7:a0:41:71:d5:04:bf:55:3a:
e6:f5:91:02:c3:c9:f8:d2:1b:13:53:af:18:08:94:39:79:08:
83:89:95:6a:1a:c1:e2:b5:c5:49:6c:2e:58:8c:89:0d:5e:23:
f1:55:8a:eb:4a:e5:e9:88:77:1b:bb:7e:63:df:c6:0f:b3:ef:
42:af:ee:cf:eb:fa:cc:5d:c9:7e:1f:40:e9:19:ee:45:a3:9c:
99:eb:be:a6:dc:d4:a4:ae:b3:5f:ac:6d:5f:20:3f:f1:a9:e0:
5c:52:f5:42:7f:92:09:be:50:05:9b:70:ec:72:98:60:16:43:
d1:2e:8f:34:33:eb:1a:4b:63:cf:f4:69:14:4c:39:22:d2:74:
c1:27:e6:cf:96:0b:d8:84:e8:5a:e1:57:ac:a1:2b:83:89:60:
ad:2a:ef:0a:dc:f9:4b:df:cc:35:2f:a6:e4:69:e3:5a:92:bb:
ed:0c:5c:6e:4a:43:22:2e:b5:c1:69:64:e4:47:b5:41:4c:5d:
cd:d6:25:07:da:e9:78:3d:43:4e:72:7a:d0:74:05:c0:20:9e:
96:c9:ba:d9:35:e0:a6:04:18:41:f3:f6:f1:0f:5b:96:d8:cd:
1d:5c:41:d6:10:69:98:8f:f0:96:dd:e8:a6:e8:d0:71:81:5f:
5d:11:9b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:07 2025 by rpki-client