Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: 0pnX15Mn9aDMrH0DOAaMwQLvVxifypfntRl0+XIbGi4=
Subject key identifier: 59:99:AD:ED:FF:E5:07:FE:E0:76:05:6E:DF:AD:AE:25:D0:1E:1B:98
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 0198D4A82A452615AEC7FAC10DA01AB291F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 0D8E
Signing time: Sat 23 Aug 2025 02:00:47 +0000
Manifest this update: Sat 23 Aug 2025 02:00:47 +0000
Manifest next update: Sun 24 Aug 2025 02:00:47 +0000
Files and hashes: 1: ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa (hash: sKxCzrP68EEiJiVgfkANI2KkD6xerh0joHKgW2snD88=)
2: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: iFaDsE+UU4aYKoE8UprrSXsV9pSK3KaSAnTBacXOQQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2a:45:26:15:ae:c7:fa:c1:0d:a0:1a:b2:91:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Aug 23 02:00:47 2025 GMT
Not After : Aug 24 02:00:47 2025 GMT
Subject: CN=5999adedffe507fee076056edfadae25d01e1b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:87:90:ae:ab:37:10:60:93:1b:a0:db:17:
31:0d:66:94:e7:fb:22:d7:b0:b7:f8:5b:00:f0:7e:
d3:60:e0:fb:4b:de:68:17:c7:fa:fb:f6:15:ad:70:
8d:7f:2d:5a:56:c0:e2:ac:dc:22:83:b8:56:a6:05:
c7:68:bd:cf:f1:16:df:36:bb:74:a1:02:ce:3c:c7:
27:d5:b3:4f:c8:99:38:f6:cd:49:56:d4:51:2f:c7:
bc:fc:46:e3:c9:19:aa:b7:45:63:6f:57:97:e2:6a:
59:45:0b:fb:78:00:1c:6d:32:67:cf:53:82:84:76:
76:b2:83:30:c6:a3:cf:be:7f:13:d9:50:62:ea:07:
6d:9b:fd:ba:b9:7c:7f:d1:d9:bc:cb:08:49:f9:6c:
bc:15:92:22:99:98:8c:52:29:0e:68:90:e2:d3:78:
ea:ca:38:81:4d:d2:83:3b:9a:5c:2b:16:b0:17:bb:
3d:29:a9:e6:8b:61:4d:6f:2d:74:ac:94:10:3f:20:
23:7a:08:4f:0f:e6:3a:f7:06:78:76:77:c5:36:17:
26:2a:1f:c1:5e:37:af:c9:7b:c5:a4:bb:27:e4:d4:
63:40:ff:f3:42:df:16:56:45:9d:db:59:61:fd:67:
f9:fc:88:9e:27:3a:5e:92:ea:f0:d0:93:1c:e9:f3:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:99:AD:ED:FF:E5:07:FE:E0:76:05:6E:DF:AD:AE:25:D0:1E:1B:98
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d2:10:a8:80:fb:56:e5:7d:59:93:84:8b:76:01:7c:0d:e8:
96:ff:e2:4f:00:d9:fe:dd:75:b6:c3:ce:c4:fa:54:b2:35:67:
30:05:bd:f3:4d:9b:f6:54:b3:59:ba:a9:b6:c6:59:73:5f:95:
e5:0c:a6:65:a1:bc:20:33:8f:3e:b7:99:3a:b4:2d:a1:55:27:
2c:c8:eb:94:e6:8e:59:a7:fd:7e:bb:e4:ab:60:68:38:7c:01:
b6:8a:e6:68:9a:34:e6:c9:5d:a8:4e:82:d8:49:7f:d2:59:82:
88:6c:cd:0e:44:58:d3:bd:e5:df:35:a3:a5:d0:38:58:40:a5:
ae:e2:c7:15:fe:12:82:f7:df:09:af:a1:8f:81:45:4e:05:d1:
a2:41:c3:f1:a1:75:75:bb:5e:89:e6:d9:98:9c:1a:18:44:10:
8e:28:28:85:1f:93:0f:53:f5:c9:c1:be:a4:1f:3b:d8:bb:25:
40:b8:af:25:ee:f5:c4:b1:42:b0:61:98:9c:bd:5b:29:06:b9:
50:07:a7:a1:c0:90:83:6d:56:c3:b0:5a:39:17:7d:f2:f8:34:
10:45:ab:e3:b8:b0:e7:a9:24:b5:42:80:09:21:cb:04:7b:c3:
1b:fd:ff:e1:5b:d2:ae:28:f2:3c:b8:38:cd:88:46:ae:8f:6d:
98:ee:a0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:27 2025 by rpki-client