Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: otluSPNjsrv0bb9yvmll1QCVZhcX3HAzH/CZ0DS3I4U=
Subject key identifier: C2:61:7D:43:C2:6B:C5:0D:6A:FC:19:BE:BF:EA:37:CB:7C:5F:95:C0
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 01976DABE1CC1687CF0D375A48614A71299B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 09:01:10 +0000
Manifest this update: Sat 14 Jun 2025 09:01:10 +0000
Manifest next update: Sun 15 Jun 2025 09:01:10 +0000
Files and hashes: 1: Y_M-V8EEZggpxHGYY_EMcxsEtBk.roa (hash: 6Rgj1vHtvv9h08odpQgGP8Qj63U3c9jYSW+di7UNAlU=)
2: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: LlSr+Fntm8lDctx7zAWf6vNshrU4dECyTEwGbmjcR0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:e1:cc:16:87:cf:0d:37:5a:48:61:4a:71:29:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Jun 14 09:01:10 2025 GMT
Not After : Jun 15 09:01:10 2025 GMT
Subject: CN=c2617d43c26bc50d6afc19bebfea37cb7c5f95c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:12:b3:f7:94:76:e6:66:ce:68:58:0b:2d:
1f:1a:46:bf:dc:4b:52:a8:f3:3b:1e:d2:bd:b7:a7:
f3:8b:86:7e:d6:59:9e:33:0e:58:4c:5e:c1:4b:20:
84:37:ec:37:6d:ee:3b:1e:48:69:97:9c:1c:35:35:
45:c8:0e:ff:8c:42:75:08:85:72:85:26:2c:c0:a4:
94:75:53:c7:d8:45:5f:31:65:d4:e8:89:31:c0:3d:
6c:e0:65:ea:d3:e1:1f:4d:c2:d7:59:84:60:76:0c:
6a:ea:9b:30:dd:fd:e2:6b:5d:0f:26:f2:cc:1b:b9:
50:34:b6:6c:cd:55:3d:7e:37:9a:e0:2b:64:41:a1:
2d:18:80:12:39:0d:73:0f:70:ae:bf:c6:1d:a3:70:
00:fc:a5:00:cf:f8:93:a1:3b:85:6b:a6:5e:fd:d1:
f2:6f:44:9f:e8:89:a6:ec:56:b4:9b:71:fe:85:91:
af:63:f6:2e:96:fe:3d:aa:8d:2b:b6:46:e4:2c:57:
87:0a:1f:c3:55:19:84:b4:5a:d4:fe:9d:e5:e8:e9:
b0:ad:e7:c8:5c:59:c2:ab:ed:2f:80:69:b2:a2:02:
1d:aa:87:17:7a:87:96:c3:e1:e7:f5:b9:b0:ec:bd:
b3:cb:9e:52:08:62:6b:d7:01:2e:bc:5c:02:11:4e:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:61:7D:43:C2:6B:C5:0D:6A:FC:19:BE:BF:EA:37:CB:7C:5F:95:C0
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2b:0b:7e:a3:af:d3:e9:2f:79:88:92:a5:7d:f3:17:4e:c3:
f7:ea:91:f0:26:e3:e1:4b:d7:f6:9d:be:fb:f6:d8:55:da:6b:
6d:9c:c9:bf:29:8a:14:fc:19:6e:73:7b:60:ef:98:c9:3b:90:
32:f3:fd:d9:45:c2:f5:74:9e:8e:2c:9c:67:d0:40:70:2a:b7:
c8:94:33:42:e6:3d:5e:10:a4:c1:2e:a0:8a:03:f7:21:90:2e:
b6:b4:a3:0c:7f:02:b5:33:11:0f:2f:88:dc:c7:6b:cc:4b:98:
96:93:d7:75:d0:5a:ad:df:24:9e:25:8a:3e:6b:e8:ef:6d:71:
06:52:fe:3e:2f:4e:13:52:d7:a4:50:66:69:fa:3d:3a:c0:9b:
5e:3c:75:28:21:4c:37:30:55:27:bf:23:bc:26:3a:df:8e:f8:
49:44:24:4f:eb:97:4f:b3:6a:89:c5:8f:eb:0d:21:56:72:f2:
9b:49:51:16:a6:f7:9f:31:b9:05:95:2b:1b:81:92:09:15:87:
4e:c2:13:ba:3d:80:bc:af:93:4b:42:ab:53:52:4c:dd:1f:85:
73:9b:2c:33:51:c3:e2:10:60:b8:cf:58:26:a9:e4:9f:72:6e:
6e:7e:c4:c9:52:49:8a:cc:77:fe:05:dc:b9:f1:fe:26:b4:b1:
5b:08:0e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:02:00 2025 by rpki-client