Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: kIW2PspYuYGyUoVpcThpwbU3YohBo7rcvTRGHwzRsNM=
Subject key identifier: 90:6B:98:44:57:61:DD:3C:78:55:62:74:9B:E9:62:BF:60:97:79:99
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 01976D7490962E979E2ED780B2AA58919693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 0CD4
Signing time: Sat 14 Jun 2025 08:00:45 +0000
Manifest this update: Sat 14 Jun 2025 08:00:45 +0000
Manifest next update: Sun 15 Jun 2025 08:00:45 +0000
Files and hashes: 1: ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa (hash: sKxCzrP68EEiJiVgfkANI2KkD6xerh0joHKgW2snD88=)
2: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: hTTgAinpkH8kosoYFsDAbmO26g8MGoXmesHsseqUnY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:90:96:2e:97:9e:2e:d7:80:b2:aa:58:91:96:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Jun 14 08:00:45 2025 GMT
Not After : Jun 15 08:00:45 2025 GMT
Subject: CN=906b98445761dd3c785562749be962bf60977999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:5d:c6:ec:ea:9f:56:8f:11:c7:c0:a9:3d:
1a:69:0a:8e:3c:2a:ba:a4:d7:92:86:6f:54:4f:73:
f0:62:f5:3a:9a:a1:cd:2f:1c:fa:fd:6a:33:25:a7:
98:7d:61:c4:7b:03:9c:f8:83:2d:f4:52:10:50:22:
a5:d3:00:14:0e:7c:e2:b5:78:ba:9a:13:b4:5f:58:
92:ce:89:5a:be:f5:6a:82:97:5d:d4:fa:57:25:cb:
c2:9b:5d:e3:ee:88:7a:5b:21:1c:35:c0:ce:de:13:
6c:1d:82:38:06:62:57:0a:ce:b3:5a:7a:38:3b:fd:
85:e8:e7:a5:a4:d4:37:a6:f4:9c:2a:79:3a:91:c5:
1f:a9:48:27:4a:03:8c:c2:59:24:5c:52:da:68:f7:
82:5b:be:06:5e:54:51:a2:80:a3:43:b3:17:18:f0:
4e:b1:42:3a:da:ac:01:4e:5b:22:eb:11:3e:1c:b3:
c0:e7:a1:74:50:3c:9b:f8:6b:ee:a0:08:87:13:44:
de:99:4a:34:c6:fd:76:c2:63:17:f1:6f:db:91:05:
5c:45:ca:8f:ac:9a:6c:5c:8f:c3:ac:f1:50:7e:f6:
26:1f:21:42:5a:ea:11:68:24:6d:2c:fa:0b:41:c8:
18:cd:07:2e:a3:6e:50:a0:41:1d:92:df:00:a9:02:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6B:98:44:57:61:DD:3C:78:55:62:74:9B:E9:62:BF:60:97:79:99
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:27:31:a5:7c:20:49:70:97:34:28:54:7a:18:bc:96:59:3a:
49:11:3d:ff:6d:32:5d:46:d9:b1:56:9b:ba:9d:e6:10:7b:ce:
c6:a4:7c:13:8a:92:24:e0:f3:7a:98:1b:ba:32:7b:51:35:34:
f8:b9:6d:63:c0:d4:75:24:1a:27:99:e0:67:9a:de:53:db:ad:
c1:9a:cf:aa:d5:e9:1b:6b:f6:d0:9c:db:6c:0b:99:b5:77:16:
42:0b:94:4a:cd:bb:f0:75:f6:28:52:79:16:5a:10:ec:4f:3d:
34:22:0b:e0:e8:06:5d:d6:d3:9e:15:30:48:5a:0b:7e:a2:f2:
9e:26:1b:ce:4e:8f:df:2f:27:c3:e0:12:f4:ff:1d:a3:03:76:
45:2b:1e:c3:87:bc:45:04:28:b5:f8:3e:c8:d5:1b:fb:49:14:
37:4c:f1:55:59:86:6d:92:15:d6:92:0f:cf:ad:19:52:e6:a1:
d3:4f:2e:ba:1a:cd:5f:90:f7:e6:11:e4:22:45:68:cf:6f:41:
e1:ff:4b:32:c9:db:39:84:1c:0b:de:cb:f7:51:9d:8f:ec:e8:
dc:19:26:6c:01:6a:b2:01:2a:90:39:fb:26:2d:99:0e:ba:67:
87:37:01:67:52:95:b7:ab:44:44:20:ff:c0:1e:23:78:41:3b:
70:62:9a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:36:31 2025 by rpki-client