Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
File: lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft (raw, json)
Hash identifier: 1WWoqGbyBqsUThod7OAhLHGy8BCHpRkkCkawbLjMfko=
Subject key identifier: 6A:EE:01:07:4B:EE:31:2A:EA:2C:CE:25:6B:69:20:EA:CD:32:C1:CB
Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
Certificate issuer: /CN=96448e840d272a3e3159192d1df11f100e506f6a
Certificate serial: 01976C9901BEAC91E095EA551A5001F859F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
Manifest number: 07B8
Signing time: Sat 14 Jun 2025 04:00:56 +0000
Manifest this update: Sat 14 Jun 2025 04:00:56 +0000
Manifest next update: Sun 15 Jun 2025 04:00:56 +0000
Files and hashes: 1: HRJaIehlqdUQOZwaPo6dI6mb5MQ.roa (hash: NAZLCo/vu2u7I92Xt0rJZZjC+drQdPYyxSFtuqS2OpE=)
2: lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl (hash: gKliCBe5lAd4FnVW/38WCu2BGQ2+sWU7C8i6jqHiUrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:01:be:ac:91:e0:95:ea:55:1a:50:01:f8:59:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a
Validity
Not Before: Jun 14 04:00:56 2025 GMT
Not After : Jun 15 04:00:56 2025 GMT
Subject: CN=6aee01074bee312aea2cce256b6920eacd32c1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:8d:18:6d:07:41:4e:3c:a0:f2:3e:40:b8:
73:94:78:bc:34:4e:46:aa:e6:b5:4a:7f:5a:d9:0f:
51:30:a2:89:42:8b:a8:3b:c4:17:ac:69:60:15:64:
f6:40:a5:0a:69:c7:07:ec:e0:38:99:4d:96:54:05:
8d:60:ac:96:d5:5f:3e:40:da:f2:08:2e:67:0b:b4:
46:42:b8:16:58:35:e2:82:49:7d:54:6c:bf:14:fb:
09:19:28:a4:d6:0c:a6:90:8f:da:c8:bb:e1:22:2a:
aa:ed:94:1a:da:b5:1b:f8:e7:f2:c3:3a:bd:54:a2:
5d:c2:b0:90:32:8b:22:8c:4b:95:46:0a:15:f4:50:
84:84:dd:0e:fa:93:d3:dd:d0:11:eb:58:68:74:db:
86:ab:d1:a2:f7:b6:61:7b:27:e6:11:81:0b:f5:7c:
75:f8:e8:10:bd:ff:ec:40:29:d2:10:24:f5:63:4c:
90:7f:7c:aa:f2:eb:2b:c6:57:de:e1:f9:06:a0:6f:
b0:cf:ab:c8:96:c7:a6:89:2b:9c:93:8d:71:d3:6e:
0d:5c:1d:01:40:13:42:38:7a:5a:56:e3:fb:30:24:
ea:2e:73:13:a4:17:d6:57:7a:7a:6f:55:a9:fd:82:
1d:28:22:f7:11:a7:f1:78:30:aa:93:2a:7a:4b:d2:
ed:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:01:07:4B:EE:31:2A:EA:2C:CE:25:6B:69:20:EA:CD:32:C1:CB
X509v3 Authority Key Identifier:
keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2e:be:cb:58:02:e5:85:61:07:13:6c:d4:75:1c:44:b9:16:
fa:1c:ac:47:c9:b5:9c:e7:18:77:da:bb:60:ff:2f:ed:70:f9:
17:9b:6a:f1:b4:91:b7:2c:4e:1f:bd:6f:b5:d3:c0:df:48:b9:
a1:c3:1e:f1:28:2c:9f:bf:ea:0f:74:9f:13:03:04:ac:65:6d:
3f:41:a6:9c:b8:5f:ad:6a:bf:2f:14:24:73:b2:31:89:ea:bb:
0a:e4:e6:09:2b:9e:8d:d9:39:e4:bb:60:af:95:5b:a7:4e:5c:
aa:1f:4c:47:78:2e:6e:26:18:0d:5c:23:6b:f2:7d:b0:6b:86:
87:70:24:86:ea:d1:9f:90:d2:2c:a0:8f:8f:8b:16:73:75:ef:
19:dc:42:b1:5b:e2:5c:40:b4:42:ef:98:ac:75:ec:60:d6:0e:
d5:d8:66:07:c7:fb:2b:8a:af:3f:f1:b9:33:87:a7:cc:a3:80:
3c:af:bf:ed:c5:1a:7d:cc:32:0b:e2:cf:ef:9e:d7:04:79:2d:
5e:62:69:65:72:9e:81:99:ce:4b:2f:e7:37:51:fe:ad:dc:30:
ee:95:fb:75:40:e2:ec:da:4f:99:c5:b3:4f:da:bf:35:63:6c:
8e:e7:35:c7:88:3f:83:c4:1c:90:5f:ef:7b:ea:57:40:a8:a6:
83:e7:c5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:43 2025 by rpki-client