Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: iYoU44H4EgdUWYSowMMrMUCjmdqzusBH9JqMw/CjbxY=
Subject key identifier: 47:F7:71:E4:58:91:0D:F4:30:6C:AA:7C:56:3E:2C:6D:7F:86:09:61
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 019896DC00D56A7B00AC9D20693D6BE8FC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 0D6E
Signing time: Mon 11 Aug 2025 02:00:57 +0000
Manifest this update: Mon 11 Aug 2025 02:00:57 +0000
Manifest next update: Tue 12 Aug 2025 02:00:57 +0000
Files and hashes: 1: ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa (hash: sKxCzrP68EEiJiVgfkANI2KkD6xerh0joHKgW2snD88=)
2: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: 0eI0j9mYJZdu6TGvyYvNIOrI4XjloILaYYPRWyExk4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:00:d5:6a:7b:00:ac:9d:20:69:3d:6b:e8:fc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Aug 11 02:00:57 2025 GMT
Not After : Aug 12 02:00:57 2025 GMT
Subject: CN=47f771e458910df4306caa7c563e2c6d7f860961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:82:30:3e:c2:2a:50:3c:37:a4:20:60:b9:1e:
2d:06:43:29:e2:17:5c:be:21:e8:fd:01:23:76:0c:
95:8b:6b:31:bc:bd:fa:f5:e2:9f:5f:78:e3:b6:39:
de:f7:68:17:cd:43:34:5f:99:63:c3:20:26:2d:5e:
7c:ac:1c:70:5c:b7:d3:c1:22:42:eb:f8:7b:68:22:
c8:42:2e:66:95:54:d4:d1:af:9a:29:dc:b9:90:d1:
76:50:98:b0:fb:2d:9b:9e:dd:63:6e:f7:58:55:0e:
3e:ab:1f:2e:9b:2f:a5:e3:d2:e4:2b:ff:23:d1:d7:
27:a5:24:f2:a6:4d:e0:62:73:04:3d:8e:46:9b:de:
59:9b:30:76:e8:0d:49:f3:9e:c8:c6:2b:4d:78:5a:
7f:29:0b:ff:64:31:93:91:b8:ff:63:c3:79:69:bf:
88:73:43:87:7b:92:0b:fd:29:1e:8b:b1:56:b0:44:
31:53:77:50:71:47:4c:b6:de:a5:25:50:eb:aa:99:
e6:a0:69:fe:f0:4b:5d:1b:d5:ec:ee:99:b6:76:2b:
d1:fe:ac:64:11:5f:3e:8a:b2:22:d3:16:30:0c:5e:
d8:67:a3:70:cc:a4:5e:ad:32:a9:7a:86:5c:a8:ef:
54:d0:0d:fd:52:67:7c:0d:bb:26:20:8f:db:99:27:
4c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F7:71:E4:58:91:0D:F4:30:6C:AA:7C:56:3E:2C:6D:7F:86:09:61
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d0:cb:c0:80:39:49:1d:37:4f:26:c9:2a:2b:ed:21:c8:3e:
9b:ee:32:48:93:40:b4:45:df:3e:ce:62:a9:c3:d5:41:45:d4:
f9:ba:fe:41:39:b3:c9:e4:49:2c:45:10:f1:0d:27:3f:16:6d:
38:ed:e5:5e:0d:74:3a:fd:d0:33:e6:be:08:c9:0a:e9:c8:22:
9e:10:e7:0f:1a:4c:37:74:ed:ce:1e:d0:1c:0c:63:fb:a7:74:
f6:9d:39:05:63:27:ac:80:17:35:36:fd:a9:72:87:ce:0e:5e:
47:4b:23:1d:7e:38:6d:34:30:bd:7a:50:3f:c7:98:c9:1f:68:
79:14:6f:83:eb:f0:d9:39:7d:63:c2:dd:e1:6d:01:51:cc:2b:
40:d4:7c:99:9c:60:ae:d7:ee:9e:4c:d2:95:f8:c4:6f:a7:06:
d1:b3:f6:ab:29:35:46:95:b3:c3:39:e6:b8:33:e1:48:ed:3c:
e3:e4:09:3d:5d:c4:d0:43:c2:b4:b7:c0:a8:97:e4:f4:2c:e4:
ae:d9:fc:b5:c7:c8:ca:fa:b9:e5:f2:62:ed:e0:5d:9a:aa:5d:
80:56:ed:f1:18:e7:65:8c:b6:ed:4b:01:97:92:e9:78:8e:f9:
ee:e8:49:98:bf:d2:1c:84:70:0e:56:c7:97:fa:0c:87:7b:75:
8f:17:7a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:38 2025 by rpki-client