Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
File: LkPayOpVaTQ53RuLSBK6cYNPEDE.mft (raw, json)
Hash identifier: PkwrzL48s2m0jUtYyaPJNnkSWCHcJ2JB9nk7Q0TyKPM=
Subject key identifier: 72:2C:6D:05:FC:6C:02:D9:4C:F9:38:36:93:1C:2A:AB:7A:58:86:15
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial: 01987CE597A0A97793FF765CEBBC2FB77845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
Manifest number: 12C8
Signing time: Wed 06 Aug 2025 01:01:17 +0000
Manifest this update: Wed 06 Aug 2025 01:01:17 +0000
Manifest next update: Thu 07 Aug 2025 01:01:17 +0000
Files and hashes: 1: ANPtCnGv8gHA7x3faWzBPJFvOXI.roa (hash: 47gT+uwBF8roCKnncbKY5zhpD+DW3HsUlU+dHgq1yW0=)
2: G9SmysWbMuSxx-EDG3Cs-f8IXqY.roa (hash: asZN9tI3ws8BcQXeW3lamrTpn0W8Ef30eRexdJjOvPw=)
3: LkPayOpVaTQ53RuLSBK6cYNPEDE.crl (hash: 9cqr1JhW4k2Sw8XiXM7qRQi0TrIzs63E0m2HHsEr9hQ=)
4: tVeA1QW6o2_4cAAoeOMN60OC09M.roa (hash: K+ciN3DFQxqGOLGpRd4/ZhXkYH4OU+8ws5sujZeJtPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:97:a0:a9:77:93:ff:76:5c:eb:bc:2f:b7:78:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Validity
Not Before: Aug 6 01:01:17 2025 GMT
Not After : Aug 7 01:01:17 2025 GMT
Subject: CN=722c6d05fc6c02d94cf93836931c2aab7a588615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:c5:fd:c3:06:70:b2:ba:dd:69:85:61:11:
98:8f:9d:2d:4a:d2:e4:ec:cd:3c:cc:2c:89:28:1d:
73:a7:29:ed:7d:ce:c6:f9:20:13:27:28:fa:87:aa:
1e:a3:81:ff:69:96:f1:fd:9c:c0:f7:e7:c8:94:18:
5e:90:a5:92:fc:7a:0c:47:ca:8d:5d:11:88:74:10:
1d:18:d0:4c:73:29:9b:06:17:91:64:34:12:0d:c1:
1a:1b:ba:4a:9e:6a:5f:f6:0f:cd:a2:d3:40:73:74:
9e:33:ab:5e:04:74:12:6f:06:9c:eb:bb:f5:ae:12:
85:48:4d:f7:5b:b1:df:c7:25:39:fb:1c:98:b3:88:
37:93:f8:ee:89:5f:42:d9:b4:be:1f:ba:53:bb:bf:
6c:cb:29:b8:40:4d:f6:63:26:a2:ca:54:8f:4f:9d:
89:ed:0e:15:2a:62:4c:96:71:49:b6:82:c5:51:cb:
06:22:e8:2d:a6:44:d3:7d:e4:93:4f:10:08:1c:e8:
a6:1f:1f:d2:df:52:7e:7e:7e:36:ce:d0:39:0e:54:
56:cd:c4:67:99:07:f5:c8:24:e5:5a:f5:7e:1c:54:
2b:8c:c0:12:9c:12:34:f2:a6:2d:60:fd:f7:29:62:
73:b1:7c:25:73:62:f8:e9:6c:49:22:c0:b4:28:a8:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2C:6D:05:FC:6C:02:D9:4C:F9:38:36:93:1C:2A:AB:7A:58:86:15
X509v3 Authority Key Identifier:
keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e9:c9:58:30:3b:11:1f:5b:82:ba:7c:ac:eb:10:ee:17:2e:
29:b0:cd:1b:1b:a3:aa:20:0a:d2:d3:08:ec:82:15:0e:d6:06:
fc:6c:92:16:54:cb:a8:24:5e:56:ab:d9:a5:b7:bd:bb:1c:49:
06:58:41:5f:dd:c0:ce:ec:50:09:5a:18:30:df:f6:06:e9:db:
de:94:6c:9e:dd:f5:90:d0:da:75:da:62:64:63:8c:d2:e6:66:
09:37:42:74:9b:26:70:25:d6:54:ab:42:43:27:73:9d:3c:db:
c6:5f:37:1d:62:3e:cd:36:c2:06:4c:77:2b:4f:ea:c8:80:89:
e6:4f:06:9d:bc:e0:8a:c8:42:a0:51:18:26:fb:ce:3c:43:27:
db:35:06:9b:03:9d:33:1e:f8:95:1f:25:e1:4f:a0:4a:9d:92:
eb:c7:28:59:0f:cd:ba:d6:6b:f1:40:62:ea:72:30:93:48:e8:
af:2e:82:a7:ac:7e:2a:36:68:6c:ae:a8:e0:ee:35:d5:4b:1c:
24:c2:03:36:c9:83:e0:e0:01:ac:8c:35:16:3d:69:0c:6e:4b:
18:b0:59:f6:c6:31:15:83:f2:3d:db:af:ce:73:3b:9c:ac:a4:
ad:10:6b:88:d5:ba:bc:a5:da:6a:b9:fe:b1:01:98:35:92:16:
ef:be:4b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:12 2025 by rpki-client