Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: m6Wl6MUAINO050bdqR+bFMre9QBcr76IicnPFS3A3vg=
Subject key identifier: AC:15:FC:0F:59:6F:F4:5E:F1:BA:31:92:AA:A8:EF:15:E2:2D:E1:8E
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 019681D92DC60067BA2FADD1ECDD930CAE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 0C5A
Signing time: Tue 29 Apr 2025 14:00:15 +0000
Manifest this update: Tue 29 Apr 2025 14:00:15 +0000
Manifest next update: Wed 30 Apr 2025 14:00:15 +0000
Files and hashes: 1: ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa (hash: sKxCzrP68EEiJiVgfkANI2KkD6xerh0joHKgW2snD88=)
2: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: 1hRfl/lZ71M/2UvIs8+LzDZwmqD+yd+8MsznxuLC6xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:2d:c6:00:67:ba:2f:ad:d1:ec:dd:93:0c:ae:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Apr 29 14:00:15 2025 GMT
Not After : Apr 30 14:00:15 2025 GMT
Subject: CN=ac15fc0f596ff45ef1ba3192aaa8ef15e22de18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:40:f9:18:ee:da:9c:a1:f6:96:f0:f1:09:
98:22:e1:8e:87:e8:ee:7b:dd:ba:16:be:de:04:ef:
24:d9:cc:8b:d5:c1:ef:0e:58:43:53:38:86:af:db:
82:e4:28:09:ab:99:85:2e:01:41:ad:25:92:72:fc:
05:dc:5d:34:9e:2a:04:67:0e:11:b7:1b:6e:94:31:
3c:a3:7c:28:fc:cd:c5:87:48:2c:d4:72:f2:51:22:
65:ec:16:56:fc:4a:8a:01:6e:29:02:1f:cf:c9:dd:
94:46:30:b5:97:cc:2c:64:3f:d7:eb:31:3f:c0:04:
f4:92:05:ec:2f:16:0f:49:6f:62:53:03:53:70:1d:
4e:84:70:f9:ce:d8:5c:84:fc:78:db:b2:c8:2f:b8:
25:d6:2b:44:17:dc:cc:e2:04:e3:c5:12:80:6c:c0:
c1:07:b3:06:13:b6:e9:0a:30:42:9c:a9:ff:ce:03:
c2:49:6d:71:8f:8b:b8:5f:43:8a:51:52:3f:d8:7e:
3b:e8:e0:bf:05:8e:09:59:48:97:89:10:5d:fc:d3:
71:49:df:3b:d9:68:da:ab:67:e5:e6:8a:1c:f7:b0:
e6:ff:bb:4e:f9:5e:fb:88:35:30:84:35:c2:23:07:
88:37:c5:29:3c:14:a0:cb:ab:34:85:62:f4:d7:9f:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:15:FC:0F:59:6F:F4:5E:F1:BA:31:92:AA:A8:EF:15:E2:2D:E1:8E
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9a:e7:54:18:72:a4:b5:61:4b:18:02:fc:8c:b1:a2:3d:3e:
9b:34:47:3f:ad:1b:4e:30:9e:95:54:d6:24:bc:3b:a3:15:c2:
c3:cd:db:34:02:0e:8e:52:52:5a:4e:3f:28:7d:a1:7e:d3:57:
89:6a:8c:17:29:cd:ef:ae:e0:5a:46:e8:ab:b5:cd:47:54:88:
6b:91:35:dc:53:02:df:48:93:27:51:5e:ba:fd:80:d7:b2:ff:
28:ec:34:ea:64:1a:43:33:29:5c:de:ee:32:ff:20:d5:4e:ec:
01:91:98:84:01:b7:de:d5:16:9c:2e:e5:7b:c3:22:69:96:b2:
f8:38:c6:00:46:17:8b:a3:cf:fe:d8:83:2b:09:75:58:fc:00:
3c:a7:88:2c:d6:a6:0c:e2:b2:90:41:58:9e:d5:e0:33:18:69:
57:e8:19:4b:9f:cb:28:9e:14:37:38:94:ff:40:26:9d:71:b5:
e1:67:25:c1:42:ad:54:7b:ba:1c:55:43:fb:ad:71:95:d7:c2:
e6:a8:1b:af:68:67:17:94:a3:d3:9b:71:73:1d:11:2c:de:f5:
2d:49:f5:42:5a:eb:89:24:22:76:88:9c:1e:29:4e:4a:35:91:
85:d1:92:59:40:d7:9f:4c:5f:6f:06:bc:01:ef:9d:62:89:4f:
63:da:9c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:16:55 2025 by rpki-client