Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: ejoA9VUHl9K4WQ/qhFjoXeVTwvB/8Tw6ffkPZzp032g=
Subject key identifier: 38:8C:8D:CB:7E:AE:B9:1C:C8:10:18:D2:38:D8:C1:18:8B:08:16:15
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 019874502ADFC1FE3E34BF39A234E62019D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 09:01:07 +0000
Manifest this update: Mon 04 Aug 2025 09:01:07 +0000
Manifest next update: Tue 05 Aug 2025 09:01:07 +0000
Files and hashes: 1: Y_M-V8EEZggpxHGYY_EMcxsEtBk.roa (hash: 6Rgj1vHtvv9h08odpQgGP8Qj63U3c9jYSW+di7UNAlU=)
2: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: vLpVpZj+K0/qqxW/pcypUZzid0MEBgsqzvf+6tsyj3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:2a:df:c1:fe:3e:34:bf:39:a2:34:e6:20:19:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Aug 4 09:01:07 2025 GMT
Not After : Aug 5 09:01:07 2025 GMT
Subject: CN=388c8dcb7eaeb91cc81018d238d8c1188b081615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:43:eb:af:cf:44:2a:0a:ec:41:45:17:b5:
33:d5:48:99:2d:40:0d:da:20:37:35:0c:d3:e6:9b:
99:13:2a:97:69:ba:95:0b:4a:4a:ee:3c:0f:60:16:
6c:fc:16:d7:d7:49:95:8c:41:37:d0:c8:0b:2e:b4:
3b:06:50:66:4b:21:ab:e0:ad:cc:42:24:9d:fa:63:
f9:a2:3a:f0:59:3f:d7:f2:29:77:31:f6:d5:94:2d:
39:8b:1a:9d:ef:9c:bc:44:33:fe:be:f0:ec:ee:79:
81:ce:4e:ab:94:2a:60:a5:cb:a5:1f:86:5b:84:9c:
6c:9b:c4:a3:48:bc:bf:40:30:37:c8:d4:e5:a7:e9:
8a:a4:40:53:78:08:54:c2:f5:5e:57:4d:50:55:29:
a3:7d:87:b3:a2:97:7d:2d:64:26:01:ac:08:7c:49:
15:96:a6:f6:16:ef:1f:aa:3d:3a:ac:26:37:8f:01:
0f:15:35:86:c7:a5:a7:34:a2:8d:36:10:f8:0c:d6:
d2:39:d7:f4:9f:f4:67:57:b3:9c:52:48:2e:1c:97:
e4:cd:f2:33:d0:b9:49:78:ad:4e:24:b8:0d:a2:9d:
88:bd:17:3b:1c:7c:71:ff:af:bb:e4:8d:9d:50:73:
b5:67:15:cd:25:df:fc:6f:77:b1:48:49:ff:fc:5e:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8C:8D:CB:7E:AE:B9:1C:C8:10:18:D2:38:D8:C1:18:8B:08:16:15
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:63:04:99:50:cf:95:06:e7:ca:29:91:45:99:8c:32:c7:df:
0d:2b:35:32:a2:eb:6d:fd:c2:dc:e2:bf:9b:ef:39:2f:44:9d:
14:f8:f2:18:6e:3a:b6:ce:c8:42:16:61:75:7b:98:7a:a7:cb:
b8:e9:10:3d:ac:da:23:ab:3a:45:da:9a:09:7e:3f:ba:6e:67:
e4:bc:fd:8a:4d:3f:ec:9f:f7:f2:c1:28:31:eb:65:2c:bd:ae:
ce:39:9e:10:35:3f:00:b0:4c:92:72:67:4f:7b:41:48:85:9b:
8d:80:50:8e:49:f2:97:a9:eb:66:9c:53:ab:c4:b8:df:8f:40:
ce:b9:0d:62:42:e3:f0:c6:19:55:ca:60:aa:4b:86:a5:25:c1:
29:fb:69:1b:e0:d4:da:bc:ab:8c:1f:27:9c:29:94:20:90:6b:
30:9f:f6:dc:3d:6e:a6:a4:e8:ae:9b:e2:e1:d1:a6:3c:7a:61:
f1:4c:ef:5d:69:f9:4d:c2:e4:e1:e0:aa:37:b7:23:56:67:39:
58:75:2f:f7:77:26:f5:ec:ea:2e:87:ba:f4:8e:b1:80:92:13:
af:4c:cb:53:39:c6:62:03:6f:42:5a:c8:9c:c9:ed:e2:5b:73:
bd:f4:5b:17:46:1a:93:cb:28:89:22:ff:be:1d:0c:40:f0:6f:
f5:53:c9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:31 2025 by rpki-client