Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
File: lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft (raw, json)
Hash identifier: czoNXhJ6vwmbj/tq186C1Sh9DzS1f7arV8Fdyp1QmO4=
Subject key identifier: 8C:53:E6:33:E8:0F:CE:13:8D:2D:F1:69:4A:59:AB:CB:64:CB:1D:F6
Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
Certificate issuer: /CN=96448e840d272a3e3159192d1df11f100e506f6a
Certificate serial: 0199FD349A4775CF345B7B1D3FAEEF413703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
Manifest number: 090C
Signing time: Sun 19 Oct 2025 16:01:47 +0000
Manifest this update: Sun 19 Oct 2025 16:01:47 +0000
Manifest next update: Mon 20 Oct 2025 16:01:47 +0000
Files and hashes: 1: HRJaIehlqdUQOZwaPo6dI6mb5MQ.roa (hash: NAZLCo/vu2u7I92Xt0rJZZjC+drQdPYyxSFtuqS2OpE=)
2: lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl (hash: eBPtrSzyto/CqBxlCdQN5n3H9kv449jZEKm3U/OKLDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:9a:47:75:cf:34:5b:7b:1d:3f:ae:ef:41:37:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a
Validity
Not Before: Oct 19 16:01:47 2025 GMT
Not After : Oct 20 16:01:47 2025 GMT
Subject: CN=8c53e633e80fce138d2df1694a59abcb64cb1df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:b4:33:27:37:9f:1e:74:69:e2:60:3d:db:
ad:03:29:f6:b4:b2:7e:11:58:84:90:4f:63:12:d3:
11:5c:b3:b6:03:00:61:a5:c5:73:71:4e:38:3b:52:
7c:73:1f:00:17:74:a3:55:d9:a1:fe:7e:80:05:3a:
a9:a0:da:eb:8f:04:8d:fc:06:f7:c7:08:10:79:a2:
91:4f:c2:b4:8f:fc:c0:b8:b5:77:a8:d6:e8:67:02:
f4:10:6f:f9:6d:64:a8:5e:a2:b9:1f:62:22:a3:d6:
c3:a4:06:1e:8c:9b:42:1c:e8:fc:e7:fd:6b:e0:53:
fd:1b:e7:e3:bb:3a:35:d8:70:4c:ca:64:26:b4:23:
36:5c:4d:e6:3b:06:f0:e6:ce:65:32:fd:e2:e0:82:
9b:6f:6a:67:f7:a8:47:aa:33:06:3d:f0:0b:61:33:
78:c7:c9:7b:28:ae:87:58:ed:01:77:2d:5e:6d:5f:
50:5f:25:0a:10:4c:f8:1c:2b:3b:c8:d1:dc:a8:9f:
07:37:c6:98:04:ac:bc:26:7a:90:8a:1f:79:b8:cb:
65:1c:70:de:78:21:77:16:88:31:fd:77:3f:1e:5e:
db:e7:80:9c:2a:47:00:ce:9e:87:45:89:18:ba:a6:
94:69:02:5d:3d:34:1c:05:1c:b8:fa:18:c1:3a:0a:
9e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:53:E6:33:E8:0F:CE:13:8D:2D:F1:69:4A:59:AB:CB:64:CB:1D:F6
X509v3 Authority Key Identifier:
keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:03:9e:a9:df:43:80:7a:9f:4c:72:b9:eb:e7:7d:05:10:a4:
08:1b:5d:3c:0e:3c:dd:1b:53:7a:2f:6e:1e:c9:e0:83:c1:e5:
fd:e5:0d:bf:d5:18:87:6e:b5:11:af:00:41:a8:10:8b:c8:e4:
86:a3:4b:53:2e:df:fb:8d:ad:e9:ac:bc:ca:b6:98:6f:b3:8d:
37:0c:9e:52:45:fe:a6:40:14:93:47:cc:9b:d6:45:39:e8:15:
a2:bd:92:ac:45:44:2f:02:b9:ed:cc:e9:bb:1f:93:1e:37:62:
a8:8e:15:4e:a2:94:ab:3b:4e:f4:1f:53:7b:b5:da:90:2e:84:
be:f2:42:0b:3e:86:a9:ab:5e:67:c2:6b:95:63:cb:a3:3b:4f:
ef:99:9a:d1:68:9d:e2:6f:c7:4a:67:3b:b4:4c:06:7b:4b:01:
fa:cf:3a:9b:f8:43:c2:93:e0:10:0e:37:13:49:82:b8:fe:10:
8a:45:8b:ad:49:b9:1f:25:ea:e6:4a:5f:14:51:f0:f5:95:2d:
00:6b:2a:af:60:e7:54:17:02:a1:25:4d:c7:85:9a:c8:e8:d5:
33:da:5e:d9:08:a0:6f:c1:f1:e6:2e:b0:87:e7:e3:b0:14:a2:
c7:9a:30:6a:07:eb:3d:75:27:51:98:1e:67:a2:10:6e:c5:22:
c6:dd:a4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:59:13 2025 by rpki-client