Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: ig6ygUd0tjLA9dfdw8QLuppV5MK2CuDJUB/P1ekVAeo=
Subject key identifier: A1:CD:C1:3E:BA:68:BD:4F:CA:F9:4E:EC:B6:75:CE:A9:31:0F:76:B6
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 01988D6B92359E8E3DB2EC829303ADB7CFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 146C
Signing time: Sat 09 Aug 2025 06:01:33 +0000
Manifest this update: Sat 09 Aug 2025 06:01:33 +0000
Manifest next update: Sun 10 Aug 2025 06:01:33 +0000
Files and hashes: 1: J5AX7Ye4ZjtlJFShqhgdOlDreek.roa (hash: A32lKX9VWGahKxeBlyvikvJD4hfkRzNyARSGOop4E+w=)
2: i4xZsK__v3rFAdp2I4QUrGdulkA.roa (hash: 7y/IXk7zUN3UVxHCXKQjh1FoBdjvSc3K/G/mRr6+6Gg=)
3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: /K8OQkMqVwrY02fpE/YzDgV9PjnC3B4Rj6Vvc/0OV0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:92:35:9e:8e:3d:b2:ec:82:93:03:ad:b7:cf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Aug 9 06:01:33 2025 GMT
Not After : Aug 10 06:01:33 2025 GMT
Subject: CN=a1cdc13eba68bd4fcaf94eecb675cea9310f76b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:dd:bf:a1:a6:73:a6:69:96:5b:36:13:7e:
48:15:bd:8c:87:82:77:23:20:9b:b0:f6:db:6a:1c:
f3:ac:86:ad:48:81:24:b0:08:9e:6e:91:5c:11:50:
d9:f4:62:5c:ad:33:4f:21:da:8e:a5:09:09:77:5d:
24:fc:71:be:b1:f2:0c:75:00:32:82:57:f6:bc:66:
bf:a5:99:45:29:84:d2:b9:af:c8:15:de:c2:9c:cf:
22:ad:48:4f:37:06:49:bf:45:d5:dc:0f:13:67:f1:
74:c1:11:40:13:79:e2:64:12:28:d2:b7:aa:61:74:
9c:1e:d9:77:15:a2:95:b7:ec:d0:0d:2e:1d:80:49:
b5:60:09:3b:37:7e:18:36:0d:f7:d4:d8:c4:f6:52:
b9:fd:4e:a4:27:1a:0d:97:3e:57:70:da:8b:4b:3a:
fa:b6:0f:65:71:f7:54:be:5e:d3:06:2f:35:7c:67:
e2:d6:16:31:0c:b4:34:18:25:98:bd:89:67:1b:9a:
ba:d9:48:92:a5:fe:21:96:6a:68:a8:fb:73:95:d5:
cb:23:f5:c4:29:2f:9d:0a:f1:68:29:82:a3:d5:5f:
d8:69:92:18:88:cd:bd:0a:d8:10:ee:90:aa:47:66:
7b:6a:a6:4a:b6:32:3d:de:95:da:61:ce:3f:49:d2:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CD:C1:3E:BA:68:BD:4F:CA:F9:4E:EC:B6:75:CE:A9:31:0F:76:B6
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:52:23:93:24:9d:13:5d:38:ad:62:42:92:28:12:94:e8:23:
30:e3:2a:a9:34:5e:54:24:51:9c:67:2b:04:9f:8b:33:11:d2:
3f:ac:6b:86:4b:89:c0:94:06:36:5d:51:b8:35:c1:dc:47:46:
80:d0:c3:1f:5c:16:5f:d0:3b:ea:16:47:d7:a9:9e:91:14:84:
7d:2b:41:6d:02:12:b8:90:5c:be:39:a6:c2:7f:23:3a:fb:54:
a6:7b:da:93:3c:b1:1e:56:a6:b4:9e:9b:db:d8:3d:5a:41:0c:
5c:41:a3:8b:41:9c:9a:06:82:8e:3f:73:14:85:32:27:d2:7d:
35:d7:c8:41:7c:ea:04:67:23:0b:03:b0:8b:c7:1a:a2:03:30:
db:6b:79:4f:cd:d1:67:60:2a:00:c5:33:8d:4c:e4:9e:db:f8:
39:33:85:a1:30:e0:f6:f7:ee:25:df:c9:5a:eb:bc:dd:3f:d8:
d9:51:db:23:4e:f3:28:f9:04:03:aa:c8:3f:17:9b:1c:64:62:
67:81:1e:51:b2:dd:24:1c:2c:0f:be:0b:45:f2:18:4d:d6:e8:
11:16:31:ba:2f:ec:7d:3d:a6:ce:da:2e:36:e2:8d:40:2e:b2:
e4:62:3b:a3:18:4d:2b:a3:8f:db:54:3b:3a:61:b9:b3:57:0a:
50:b0:3b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:47:15 2025 by rpki-client