Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
File: lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft (raw, json)
Hash identifier: yNzvsCwKpLQ0WNvbCrdDsi8w/liiqKNOghWIhWc/KL8=
Subject key identifier: 86:1B:9F:BB:65:58:8E:76:80:66:FC:56:90:55:E3:3F:E0:3C:9C:7B
Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
Certificate issuer: /CN=96448e840d272a3e3159192d1df11f100e506f6a
Certificate serial: 0198D7A958370F53FD0C9363EEAC531772F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
Manifest number: 0874
Signing time: Sat 23 Aug 2025 16:00:56 +0000
Manifest this update: Sat 23 Aug 2025 16:00:56 +0000
Manifest next update: Sun 24 Aug 2025 16:00:56 +0000
Files and hashes: 1: HRJaIehlqdUQOZwaPo6dI6mb5MQ.roa (hash: NAZLCo/vu2u7I92Xt0rJZZjC+drQdPYyxSFtuqS2OpE=)
2: lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl (hash: LfFUSm/fQqz3x4QtiqjfSks4HambThxWs2St1vwgV/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:58:37:0f:53:fd:0c:93:63:ee:ac:53:17:72:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a
Validity
Not Before: Aug 23 16:00:56 2025 GMT
Not After : Aug 24 16:00:56 2025 GMT
Subject: CN=861b9fbb65588e768066fc569055e33fe03c9c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:4b:14:43:bd:ae:17:bd:e1:ed:98:01:a7:
ba:7e:b4:97:44:99:42:46:84:c0:e7:a8:db:52:d6:
94:70:e2:6a:36:9e:4c:3b:ed:76:35:a3:e5:46:75:
77:a8:36:b4:d3:cd:6c:c1:ce:7f:ea:24:f8:95:fc:
21:24:ac:30:da:63:16:57:ec:d3:97:fe:2a:bf:c8:
f1:54:3f:36:73:40:de:8d:45:f5:a1:15:76:82:5f:
88:3a:09:ca:e8:e1:c8:5b:69:04:52:bd:82:ad:35:
45:87:cf:39:5e:37:fd:10:19:3e:94:9d:a8:3d:18:
fd:a3:af:37:28:78:b9:82:59:79:4e:8d:d8:e3:db:
6e:e7:9f:a0:34:ed:a4:ec:7e:67:73:3d:f3:ff:33:
33:6a:fb:11:bd:cb:2a:a1:64:10:3f:a3:e1:0c:3d:
d0:b9:52:78:5c:f9:03:06:b6:07:f5:06:d5:ba:18:
ad:7b:d7:9e:93:d1:90:da:3d:f9:46:74:ba:d5:6b:
49:c6:9e:e8:9e:1f:16:4b:3d:81:1b:ad:03:79:4d:
7c:e0:7e:e9:27:1f:b5:14:11:f8:75:f1:17:1e:7b:
88:dd:8c:e0:1b:c4:08:7f:8e:17:54:d2:da:8b:e2:
93:00:22:21:36:4b:0a:9d:67:ea:a1:3c:a7:02:b7:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1B:9F:BB:65:58:8E:76:80:66:FC:56:90:55:E3:3F:E0:3C:9C:7B
X509v3 Authority Key Identifier:
keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:89:75:02:d9:c0:fb:96:bd:5f:3d:6b:79:01:b1:a5:da:d1:
f4:94:41:5e:a2:99:de:f2:4e:25:e2:a2:02:c1:b1:a6:83:7a:
32:10:3b:6c:47:e4:67:a2:a3:13:fd:dd:ee:b8:2e:1e:5f:e0:
68:a6:aa:d9:19:89:26:b3:e4:bc:3f:55:08:f9:2a:a1:1b:12:
54:65:1f:7c:4b:a4:45:86:fa:66:0f:da:44:e2:3c:58:e9:57:
43:e0:87:ed:26:5c:3a:6d:70:8e:94:a7:55:dd:1e:d6:23:ab:
e7:b8:3b:03:8d:e8:bd:c8:fb:35:f6:40:7c:85:9d:20:66:62:
f6:af:e5:47:b0:fb:4e:82:f4:b9:e1:ea:13:d5:8b:a9:54:33:
7a:d3:92:93:43:53:72:35:6b:be:38:11:a9:5b:8d:24:7c:7b:
39:35:08:6f:18:b4:20:58:59:ff:8f:c9:6c:60:35:b7:da:06:
64:75:d6:2c:3b:0a:5f:98:19:0b:ca:f7:99:98:88:96:ab:38:
69:a6:0d:2f:f4:55:0f:81:26:38:5b:da:a5:53:72:6a:37:ed:
cb:ea:64:f6:58:24:7d:79:56:b1:04:3a:d4:0e:11:bb:29:bc:
87:1a:44:dc:55:7b:67:53:7c:52:a3:42:f9:2d:82:1e:57:ed:
4c:e5:7e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:47 2025 by rpki-client