Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: zW3onXJWDj03qMIWohkaW7fxZvY2QOywzeblX/CwM3g=
Subject key identifier: DE:6A:F0:7C:EF:8C:74:34:43:88:7A:93:FD:E9:95:C1:72:62:C7:A3
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 0197B8C5E44903D82E0E142304F32F7FF0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 0CFB
Signing time: Sat 28 Jun 2025 23:01:06 +0000
Manifest this update: Sat 28 Jun 2025 23:01:06 +0000
Manifest next update: Sun 29 Jun 2025 23:01:06 +0000
Files and hashes: 1: ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa (hash: sKxCzrP68EEiJiVgfkANI2KkD6xerh0joHKgW2snD88=)
2: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: KcdAhx3demqUXrXFEpNZYlLGeddA0YljQpVJQ3zqRXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:e4:49:03:d8:2e:0e:14:23:04:f3:2f:7f:f0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Jun 28 23:01:06 2025 GMT
Not After : Jun 29 23:01:06 2025 GMT
Subject: CN=de6af07cef8c743443887a93fde995c17262c7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:da:36:61:3c:b8:99:fd:88:63:0d:88:bf:
7f:42:a7:b5:a6:2d:8f:4a:95:65:0b:7d:09:fd:c8:
0b:8e:f9:ce:9d:21:4d:80:0f:ea:61:86:59:98:a3:
51:92:43:4e:9e:c6:03:7a:8a:3a:4d:99:56:0d:e4:
44:95:45:6d:5e:fc:01:2e:04:50:b9:e3:42:04:05:
25:0f:12:aa:42:36:3b:80:24:40:92:04:35:04:ce:
ed:08:c4:01:0c:79:1e:29:f6:c1:92:5e:f7:e6:db:
0a:2e:bc:24:72:48:0d:94:d0:93:84:35:6c:ed:b7:
3a:90:d5:22:91:4e:80:84:d7:ae:e8:a5:c3:28:ed:
ac:93:93:70:9d:cb:ed:98:49:23:6a:af:aa:5c:3f:
af:9a:e1:33:ce:38:d9:a0:07:8d:8b:aa:f6:2a:21:
27:fc:4b:db:d5:11:95:81:fb:7b:6e:01:cd:f5:80:
df:83:eb:84:0a:14:a8:05:c4:47:e6:ea:94:86:5d:
a4:7c:cf:96:38:e5:a9:ea:35:70:56:c0:3a:f1:de:
18:53:3c:cf:f6:21:88:17:7a:ea:16:7e:ff:4d:db:
9f:00:01:d4:02:65:0f:4d:18:43:81:7a:74:b2:68:
02:ed:bb:46:02:29:34:3a:d7:23:55:9b:a2:f6:2d:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6A:F0:7C:EF:8C:74:34:43:88:7A:93:FD:E9:95:C1:72:62:C7:A3
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a2:ab:61:1c:77:e9:59:91:ec:4b:6d:4e:5c:17:ec:60:ad:
ff:25:e5:2d:66:ad:9f:a6:2f:3a:5e:83:05:74:39:ba:33:61:
d9:15:a7:3d:6f:eb:0f:6f:cb:2f:b8:97:de:7a:01:94:8f:73:
17:b3:52:66:e4:d0:32:3f:6c:43:5b:55:24:86:86:80:41:8a:
dc:7f:de:a2:4f:96:96:f6:ef:a2:9f:3b:72:8d:82:32:ff:90:
d0:3b:db:71:11:b8:e9:c5:14:ab:cc:b7:f7:b3:4c:10:f5:60:
1f:1d:9e:d9:63:e9:a1:b3:d7:f6:b3:a3:6e:41:d6:bb:71:ad:
1c:db:f1:94:6e:49:5a:b6:33:4b:f9:ff:44:05:4c:63:2f:9d:
39:07:e3:fc:04:f0:a3:c9:47:3a:c4:61:cb:d6:4e:ee:33:5d:
6b:58:ad:69:09:2b:eb:a7:ed:f2:d4:26:df:c3:69:61:0e:9c:
12:fb:c6:56:93:6d:9f:06:24:fd:40:52:82:62:59:43:07:29:
29:1b:04:bd:fc:31:4d:7b:50:d7:87:9f:8a:83:3b:10:e6:34:
a9:72:bb:90:13:26:a6:0a:69:98:b5:be:4b:1b:13:4e:a8:07:
fe:cb:a8:7b:92:1f:a2:50:9c:18:97:fc:6e:46:57:1a:16:61:
32:54:b5:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xeRJA9guDhQjBPMvf/DEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YTM4MDZmNzQyYWJjZDVkYjEyMDRmNTI4ZjRjYTZkZGVi
MWU5ZGEwHhcNMjUwNjI4MjMwMTA2WhcNMjUwNjI5MjMwMTA2WjAzMTEwLwYDVQQD
EyhkZTZhZjA3Y2VmOGM3NDM0NDM4ODdhOTNmZGU5OTVjMTcyNjJjN2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkbaNmE8uJn9iGMNiL9/Qqe1pi2P
SpVlC30J/cgLjvnOnSFNgA/qYYZZmKNRkkNOnsYDeoo6TZlWDeRElUVtXvwBLgRQ
ueNCBAUlDxKqQjY7gCRAkgQ1BM7tCMQBDHkeKfbBkl735tsKLrwkckgNlNCThDVs
7bc6kNUikU6AhNeu6KXDKO2sk5NwncvtmEkjaq+qXD+vmuEzzjjZoAeNi6r2KiEn
/Evb1RGVgft7bgHN9YDfg+uEChSoBcRH5uqUhl2kfM+WOOWp6jVwVsA68d4YUzzP
9iGIF3rqFn7/TdufAAHUAmUPTRhDgXp0smgC7btGAik0OtcjVZui9i2yIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5q8HzvjHQ0Q4h6k/3plcFyYsejMB8GA1UdIwQY
MBaAFJSjgG90KrzV2xIE9Sj0ym3esenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEt
ZDhiZjUyMWIyNmIwLzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEtZDhiZjUyMWIyNmIw
LzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6KrYRx3
6VmR7EttTlwX7GCt/yXlLWatn6YvOl6DBXQ5ujNh2RWnPW/rD2/LL7iX3noBlI9z
F7NSZuTQMj9sQ1tVJIaGgEGK3H/eok+Wlvbvop87co2CMv+Q0DvbcRG46cUUq8y3
97NMEPVgHx2e2WPpobPX9rOjbkHWu3GtHNvxlG5JWrYzS/n/RAVMYy+dOQfj/ATw
o8lHOsRhy9ZO7jNda1itaQkr66ft8tQm38NpYQ6cEvvGVpNtnwYk/UBSgmJZQwcp
KRsEvfwxTXtQ14efioM7EOY0qXK7kBMmpgppmLW+SxsTTqgH/suoe5IfolCcGJf8
bkZXGhZhMlS11A==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:31:11 2025 by rpki-client