Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: /0TMaZww46P5J2uvI2baxUrxYvnYwGGb4AKV1nsxg3g=
Subject key identifier: 44:C1:CA:9E:2B:96:E0:02:FE:8C:0A:37:56:AF:E9:DA:45:ED:6D:BD
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 0196CD2A55F56AB44A424205BC5381C85EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 0C81
Signing time: Wed 14 May 2025 05:00:25 +0000
Manifest this update: Wed 14 May 2025 05:00:25 +0000
Manifest next update: Thu 15 May 2025 05:00:25 +0000
Files and hashes: 1: ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa (hash: sKxCzrP68EEiJiVgfkANI2KkD6xerh0joHKgW2snD88=)
2: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: qUtamVnMocdu5y4hSEYtGZm2esB1P+MNfJJ64fAl0VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:2a:55:f5:6a:b4:4a:42:42:05:bc:53:81:c8:5e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: May 14 05:00:25 2025 GMT
Not After : May 15 05:00:25 2025 GMT
Subject: CN=44c1ca9e2b96e002fe8c0a3756afe9da45ed6dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:22:33:19:c5:e7:f1:34:47:25:bc:d0:68:08:
67:2f:65:c1:07:d2:ca:c4:1f:0c:3a:e2:6e:7d:13:
6a:7f:9b:2a:36:78:c9:d3:cb:d2:3e:c0:32:e9:b5:
9d:19:91:3c:fd:a8:b4:a5:78:63:0e:b3:27:17:f3:
d9:3c:4b:96:31:c9:68:99:1c:a9:f5:0e:10:be:6b:
f1:1d:f9:ce:53:cb:1f:49:6e:ae:a6:5c:ca:7e:30:
66:c1:43:8e:0d:5c:ac:cf:6d:53:93:80:4c:82:09:
0a:aa:ec:86:74:63:a4:99:bd:8b:58:33:34:1c:5a:
b0:2e:70:c0:e9:a9:5d:52:ed:52:55:42:72:5f:12:
2e:40:55:12:93:73:9c:13:c2:73:60:30:23:02:d9:
5b:6a:9d:a3:bf:a1:e0:3a:fe:02:00:ff:e6:cd:bf:
61:3f:83:bf:57:50:59:03:39:b4:51:40:d1:61:d0:
6a:05:36:8a:ca:55:2e:b8:d5:6d:d8:a6:50:5a:3d:
fd:22:85:e3:f8:dc:e3:6d:81:a6:c6:c2:96:b5:ed:
90:fc:a4:c4:8f:f8:1b:c4:96:5c:40:df:11:f0:73:
45:b8:b4:4b:9c:c5:52:79:88:a0:85:48:5a:34:6d:
79:e2:d6:ff:5f:48:2c:b3:b3:6b:12:c9:c3:fd:2b:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C1:CA:9E:2B:96:E0:02:FE:8C:0A:37:56:AF:E9:DA:45:ED:6D:BD
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:00:6a:a6:61:fa:ad:8b:ca:a0:7d:ee:87:03:54:f1:25:2c:
dc:f1:9c:62:e5:6a:e2:dd:96:f4:3c:f8:f9:21:9c:39:52:b9:
a4:94:7c:85:b3:05:3b:c7:d0:ba:74:0d:ce:8a:f0:77:d6:6f:
21:74:8f:89:92:dd:f7:83:8a:11:dd:df:2c:31:83:f5:d6:bd:
78:e6:2d:c9:6b:8a:47:12:95:98:2b:be:fe:7e:e3:e8:16:ea:
44:80:2d:eb:a4:5a:d9:e3:c5:11:9a:fd:db:fc:c0:d3:81:21:
c8:35:40:bd:0a:8e:63:1e:79:73:c4:14:1b:00:a9:59:1e:f5:
1c:7a:3c:d4:ed:f4:ce:24:7b:e8:61:90:3b:ef:df:8a:06:50:
43:aa:74:ed:ee:64:4f:19:bc:a7:89:c9:b1:3c:86:dc:d0:17:
01:f1:e7:5e:a8:7d:da:4a:b6:73:a7:d5:31:6f:dd:5a:9d:53:
a4:86:c3:a5:ce:fb:83:ec:aa:4e:e9:65:ff:ed:77:0c:39:97:
f9:4a:a7:09:ca:81:af:52:71:cd:d8:c1:42:cc:8b:70:fd:ae:
2a:13:ea:64:1a:59:fa:b5:b7:44:c6:25:c6:71:54:5d:11:09:
19:bf:04:a5:be:74:82:65:b7:66:8c:36:ca:b8:2c:37:02:2a:
e8:29:7c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:56:51 2025 by rpki-client