Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
File: lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft (raw, json)
Hash identifier: iIsZx8ILpkdg3lCv1/AoubyTa/OZ4XblDweH2K4nEwo=
Subject key identifier: 47:3A:AF:C5:B5:12:F6:DF:A1:51:62:C4:8A:AF:B1:6D:0D:F9:A2:FE
Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
Certificate issuer: /CN=96448e840d272a3e3159192d1df11f100e506f6a
Certificate serial: 01969DF5D76068365A5DFC9D3643F1CE34EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
Manifest number: 074D
Signing time: Mon 05 May 2025 01:00:56 +0000
Manifest this update: Mon 05 May 2025 01:00:56 +0000
Manifest next update: Tue 06 May 2025 01:00:56 +0000
Files and hashes: 1: HRJaIehlqdUQOZwaPo6dI6mb5MQ.roa (hash: NAZLCo/vu2u7I92Xt0rJZZjC+drQdPYyxSFtuqS2OpE=)
2: lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl (hash: l89APMPrkdGaIJW6eBuMyEnNumRlN/5Cga0XEgGIBoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:d7:60:68:36:5a:5d:fc:9d:36:43:f1:ce:34:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a
Validity
Not Before: May 5 01:00:56 2025 GMT
Not After : May 6 01:00:56 2025 GMT
Subject: CN=473aafc5b512f6dfa15162c48aafb16d0df9a2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:e2:13:43:15:f1:05:92:65:60:20:af:24:
2a:d9:e5:43:05:fa:10:50:b7:cc:4d:f8:37:a5:a5:
1d:81:2e:36:65:8c:20:b7:1b:63:54:6d:78:f4:df:
2b:2c:f2:fe:44:1a:ae:57:e7:8f:f9:6f:67:52:08:
18:5f:b8:54:89:9a:0c:93:ac:4a:23:0c:61:0e:1e:
50:1b:b1:31:98:24:fe:8c:87:40:0d:f0:6d:9f:f2:
ef:2a:9c:77:e9:85:04:3d:89:29:ba:43:30:dc:c9:
a3:42:3b:48:a4:3f:fd:b6:72:30:67:9c:20:cd:b3:
ba:05:86:ee:32:87:13:cf:1c:3e:9d:38:f7:b5:21:
a9:6c:f3:87:fe:b7:be:6f:db:de:f3:f4:41:72:49:
ec:c6:44:18:76:a0:99:40:1c:17:d3:56:98:ad:fa:
3a:3c:35:7e:79:74:5b:5d:2e:dc:a0:15:f7:7a:ca:
f4:df:51:dd:46:ec:ad:2b:97:b6:c7:ff:44:50:af:
9c:69:de:a9:7b:c3:e0:e5:72:bb:16:f1:86:8f:b0:
89:09:c2:3a:20:88:bb:0c:00:8a:87:0f:8c:6c:3d:
63:79:16:f3:ac:52:52:70:e9:bd:d7:f5:fd:16:b0:
8b:27:4e:eb:fc:87:5c:67:79:bf:94:88:d2:0a:8c:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3A:AF:C5:B5:12:F6:DF:A1:51:62:C4:8A:AF:B1:6D:0D:F9:A2:FE
X509v3 Authority Key Identifier:
keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:af:71:f4:8a:05:fc:fd:a2:a2:7c:3a:49:23:78:bc:0c:cb:
e3:5f:63:cf:93:a1:0c:4b:e6:1d:99:ec:16:fa:88:e7:91:f5:
c3:61:da:60:61:cb:ef:cd:1b:6d:9c:b0:c5:72:55:71:6d:28:
97:2c:c0:0c:2c:cb:4a:41:f6:ef:77:05:59:2f:f3:f3:17:ef:
86:6a:15:ff:4c:a1:17:0e:50:36:78:76:f3:9a:35:0f:4e:c2:
cd:04:6d:b8:28:42:e8:d2:78:56:bb:ee:da:2f:9d:f8:2d:5c:
c3:42:84:37:46:c2:13:67:61:84:db:af:b9:23:59:67:e7:19:
14:99:cd:08:4c:1b:79:2d:f1:a9:0e:e9:51:f2:5f:45:ec:8c:
71:5c:f7:9c:ee:a7:e9:91:90:0e:dd:2e:67:8f:ec:c7:67:07:
aa:36:e5:96:41:0a:39:71:11:e8:81:40:ff:32:d5:c4:ae:c3:
84:80:cc:7c:e2:b8:f6:18:36:89:dd:ab:9c:4c:90:86:5e:0c:
5d:31:de:eb:e4:10:2a:39:15:13:5f:40:39:9a:a3:25:8c:05:
32:a6:27:74:6d:06:bd:db:5c:56:e9:dc:59:86:81:4c:93:f1:
e4:0f:bb:53:fb:30:0c:30:61:c5:7a:3e:9d:b4:7b:68:0b:37:
63:4c:83:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZad9ddgaDZaXfydNkPxzjTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NDQ4ZTg0MGQyNzJhM2UzMTU5MTkyZDFkZjExZjEwMGU1
MDZmNmEwHhcNMjUwNTA1MDEwMDU2WhcNMjUwNTA2MDEwMDU2WjAzMTEwLwYDVQQD
Eyg0NzNhYWZjNWI1MTJmNmRmYTE1MTYyYzQ4YWFmYjE2ZDBkZjlhMmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNviE0MV8QWSZWAgryQq2eVDBfoQ
ULfMTfg3paUdgS42ZYwgtxtjVG149N8rLPL+RBquV+eP+W9nUggYX7hUiZoMk6xK
IwxhDh5QG7ExmCT+jIdADfBtn/LvKpx36YUEPYkpukMw3MmjQjtIpD/9tnIwZ5wg
zbO6BYbuMocTzxw+nTj3tSGpbPOH/re+b9ve8/RBcknsxkQYdqCZQBwX01aYrfo6
PDV+eXRbXS7coBX3esr031HdRuytK5e2x/9EUK+cad6pe8Pg5XK7FvGGj7CJCcI6
IIi7DACKhw+MbD1jeRbzrFJScOm91/X9FrCLJ07r/IdcZ3m/lIjSCoyoBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEc6r8W1EvbfoVFixIqvsW0N+aL+MB8GA1UdIwQY
MBaAFJZEjoQNJyo+MVkZLR3xHxAOUG9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGtTT2hBMG5LajR4V1JrdEhmRWZFQTVRYjJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80ZWU3MzQtZWZlOC00MWExLTgwZGYt
MTZhZmJhOTg3YjA2LzEvbGtTT2hBMG5LajR4V1JrdEhmRWZFQTVRYjJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80ZWU3MzQtZWZlOC00MWExLTgwZGYtMTZhZmJhOTg3YjA2
LzEvbGtTT2hBMG5LajR4V1JrdEhmRWZFQTVRYjJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd69x9IoF
/P2ionw6SSN4vAzL419jz5OhDEvmHZnsFvqI55H1w2HaYGHL780bbZywxXJVcW0o
lyzADCzLSkH273cFWS/z8xfvhmoV/0yhFw5QNnh285o1D07CzQRtuChC6NJ4Vrvu
2i+d+C1cw0KEN0bCE2dhhNuvuSNZZ+cZFJnNCEwbeS3xqQ7pUfJfReyMcVz3nO6n
6ZGQDt0uZ4/sx2cHqjbllkEKOXER6IFA/zLVxK7DhIDMfOK49hg2id2rnEyQhl4M
XTHe6+QQKjkVE19AOZqjJYwFMqYndG0GvdtcVuncWYaBTJPx5A+7U/swDDBhxXo+
nbR7aAs3Y0yD5A==
-----END CERTIFICATE-----
Generated at Mon May 5 06:06:57 2025 by rpki-client