Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
File: lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft (raw, json)
Hash identifier: 1eL8P1tZvSQLuQ/5BJQBQTFNABPXCy2ThLuakcfI7Es=
Subject key identifier: 7C:10:D5:4E:44:84:29:00:49:72:4C:2B:1E:79:33:52:F1:7C:FE:AE
Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
Certificate issuer: /CN=96448e840d272a3e3159192d1df11f100e506f6a
Certificate serial: 019852684E471F7A447306FBE740A982268C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
Manifest number: 082F
Signing time: Mon 28 Jul 2025 19:00:24 +0000
Manifest this update: Mon 28 Jul 2025 19:00:24 +0000
Manifest next update: Tue 29 Jul 2025 19:00:24 +0000
Files and hashes: 1: HRJaIehlqdUQOZwaPo6dI6mb5MQ.roa (hash: NAZLCo/vu2u7I92Xt0rJZZjC+drQdPYyxSFtuqS2OpE=)
2: lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl (hash: xXO2yEkuPl6OihOmZ675nPILkVffQiYhO9+SKQSNdxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:4e:47:1f:7a:44:73:06:fb:e7:40:a9:82:26:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a
Validity
Not Before: Jul 28 19:00:24 2025 GMT
Not After : Jul 29 19:00:24 2025 GMT
Subject: CN=7c10d54e4484290049724c2b1e793352f17cfeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d2:69:b7:9f:f3:9a:34:08:52:35:a9:0c:55:
f2:9d:06:41:ca:ec:ad:32:04:90:61:80:c3:8f:bb:
fe:45:a0:3f:e6:ab:ba:31:9e:b4:6e:48:a8:8b:a1:
9e:2e:86:24:51:4a:9a:7f:3b:66:3a:41:66:6c:89:
a9:9f:23:d8:0f:e4:bc:61:e2:f4:ea:9b:cb:bd:e2:
ab:f5:a9:09:4e:8f:90:8b:f1:95:9f:2e:e5:b0:1d:
1f:30:81:07:0f:f5:d6:d1:e6:e4:fa:2c:cb:21:6e:
77:4e:54:a2:b8:bd:4d:93:45:ba:db:6f:62:75:2e:
cc:cd:07:33:da:65:89:20:70:55:6d:95:ea:e8:a0:
2d:11:9d:fd:4a:b3:7b:17:62:bc:03:45:22:d0:80:
af:db:c6:55:88:d1:07:97:18:10:21:ce:f5:52:e6:
c3:3c:94:c0:6c:54:8e:cc:2e:ec:89:c4:46:c3:7d:
53:59:6a:e4:ba:84:de:eb:f7:75:04:ff:5d:87:e3:
27:e7:12:73:66:73:94:22:b7:43:bb:ee:73:e8:c3:
2d:1c:ff:03:5b:e8:91:bf:cc:a8:c1:a6:2d:60:a6:
5a:df:c7:5a:42:d9:8a:47:b9:ef:57:24:7a:e3:86:
29:cb:29:44:1f:9a:22:32:34:88:5b:dc:a3:b9:cc:
bc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:10:D5:4E:44:84:29:00:49:72:4C:2B:1E:79:33:52:F1:7C:FE:AE
X509v3 Authority Key Identifier:
keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a4:f5:f7:fe:fb:73:57:cf:ad:6b:82:e0:6c:20:4d:4e:0c:
7e:81:41:86:c7:ba:87:51:a8:f7:e9:c4:43:28:92:cb:53:2a:
d0:78:ec:6f:b4:a0:50:5c:39:3f:b9:31:85:55:78:d9:8b:c0:
b5:3c:53:39:92:ad:fa:ee:0b:bd:3d:ac:f8:64:33:9a:92:f7:
d5:29:4c:e9:dc:ee:82:3a:10:7e:b1:f0:c1:d4:de:9c:0c:a4:
d6:a3:59:56:cf:9e:68:4e:77:e4:51:0d:39:f0:64:b9:47:bc:
82:c2:14:41:d0:4f:a8:0d:a6:3a:69:b0:eb:f5:29:b4:13:d5:
3e:8c:31:3b:97:47:43:f0:d9:69:ad:85:dc:d7:d4:84:bb:e3:
70:50:a8:62:10:98:56:cb:98:dd:22:9c:51:b9:1e:b6:21:8b:
35:cd:67:9b:a2:7c:e3:c5:16:4c:27:7c:27:20:d4:d3:21:67:
d9:94:4b:42:b1:b0:06:02:4d:68:bc:87:8a:24:8e:f4:29:a7:
31:b2:60:64:5b:0b:d5:dd:08:0f:8a:37:32:5c:d4:72:79:45:
e5:33:9c:7c:6d:d8:33:d6:ad:3e:3f:3e:2e:1d:0e:d8:92:14:
9b:45:d1:7e:2d:11:82:79:17:da:49:b8:aa:ee:94:9e:6c:cb:
92:45:8f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:41:06 2025 by rpki-client