Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: s9oR47vTnmRh0vwTONJVbCTOXRbj/NznzXA6RJT8YSY=
Subject key identifier: 94:9B:87:B5:4B:79:A7:22:E3:C8:17:EA:79:2B:31:A5:3C:31:50:AF
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 01984B54DB874C18A3DA380629635BE5FD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 160A
Signing time: Sun 27 Jul 2025 10:01:49 +0000
Manifest this update: Sun 27 Jul 2025 10:01:49 +0000
Manifest next update: Mon 28 Jul 2025 10:01:49 +0000
Files and hashes: 1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=)
2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=)
3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: qNFm7O5NpPEpw89xgj/EdG2YVC91G+honqU0wkMqvB0=)
4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=)
5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:db:87:4c:18:a3:da:38:06:29:63:5b:e5:fd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Jul 27 10:01:49 2025 GMT
Not After : Jul 28 10:01:49 2025 GMT
Subject: CN=949b87b54b79a722e3c817ea792b31a53c3150af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:64:ed:3d:f8:b9:68:51:6a:4e:24:5e:b2:c2:
fc:c4:f6:00:01:74:31:ff:ef:5d:af:81:73:3c:2e:
2c:42:b2:df:d8:e3:08:77:48:85:c5:6a:2b:d0:d9:
13:6b:d2:c2:a8:b9:11:e1:1b:01:cc:41:49:7f:a6:
3d:bd:3c:9d:62:36:9e:6d:29:f6:19:0a:8e:4d:d2:
83:7e:3e:98:46:f2:c2:03:24:2c:0a:e2:73:f2:8e:
13:ca:09:b2:7b:bc:53:4e:52:36:91:39:43:29:ce:
2f:09:e7:2b:37:c6:d9:02:93:3d:fd:fb:11:e6:48:
59:a8:ee:09:4d:3b:a9:d8:1f:7e:ad:6a:fe:a8:6f:
5f:c2:59:36:b1:e3:28:7b:ca:74:0c:fe:9b:8d:9d:
4b:9c:85:ab:d3:c1:a2:b2:9c:ab:91:39:af:df:9b:
c4:65:2f:1b:ce:c6:a6:80:5e:b9:4d:94:09:ad:64:
22:f7:54:7a:60:60:12:7a:a1:e5:99:91:08:73:3a:
41:3c:39:ee:74:da:fb:9c:35:0b:b8:f8:53:b0:fd:
26:a0:a6:c9:95:f3:c0:2b:ad:f5:1a:d2:1b:72:05:
6b:22:74:7e:dd:72:8b:8c:75:30:ab:28:a5:62:03:
ce:10:6e:2a:a5:e0:9c:17:72:5d:d5:a4:4d:e6:9f:
29:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9B:87:B5:4B:79:A7:22:E3:C8:17:EA:79:2B:31:A5:3C:31:50:AF
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:22:e1:7c:81:3b:df:3e:ed:92:1b:8b:5e:9b:93:3f:44:15:
2a:05:c5:f5:30:ed:9f:85:31:6b:bf:d9:d6:81:6a:ca:35:a1:
7c:06:41:91:3d:cb:41:28:75:7b:7c:83:dc:93:51:f7:0c:39:
de:87:28:14:4a:68:59:8f:77:84:77:41:e8:57:fc:21:8a:63:
22:d2:99:86:5e:67:b2:8e:fe:e9:cc:fa:e6:0f:d9:77:de:23:
a4:44:52:70:34:69:09:da:af:bf:11:48:a3:0c:71:65:06:75:
00:ec:2e:ee:33:1a:22:6c:78:ab:cc:57:ab:ed:ee:0a:dc:e3:
d3:dc:e0:c7:a6:d2:9d:4e:27:01:04:ac:fc:96:ec:a4:50:2a:
42:f4:1a:7b:bb:26:d4:c9:91:8f:49:50:fb:c8:c3:f3:7b:de:
37:ec:da:14:26:f4:84:df:6e:fc:82:7b:89:0f:19:70:ca:0b:
ea:72:f9:b0:81:c9:ba:ac:84:d9:cf:ee:98:7b:62:70:ec:ac:
0c:36:4f:ee:29:80:b9:96:0a:a1:01:ae:9f:13:2c:d6:ec:42:
85:09:c5:50:88:4e:7c:11:19:30:31:02:e2:82:d1:a5:a3:cd:
61:9f:34:4c:59:8c:3a:7f:b3:34:19:1b:3b:50:da:1f:85:cd:
75:e1:ce:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVNuHTBij2jgGKWNb5f0fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNGJkNGVkY2EyOWQ0ZTcyYmU4NmNlZDBiN2FkNjUyYzdk
MjYxYzkwHhcNMjUwNzI3MTAwMTQ5WhcNMjUwNzI4MTAwMTQ5WjAzMTEwLwYDVQQD
Eyg5NDliODdiNTRiNzlhNzIyZTNjODE3ZWE3OTJiMzFhNTNjMzE1MGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGTtPfi5aFFqTiRessL8xPYAAXQx
/+9dr4FzPC4sQrLf2OMId0iFxWor0NkTa9LCqLkR4RsBzEFJf6Y9vTydYjaebSn2
GQqOTdKDfj6YRvLCAyQsCuJz8o4Tygmye7xTTlI2kTlDKc4vCecrN8bZApM9/fsR
5khZqO4JTTup2B9+rWr+qG9fwlk2seMoe8p0DP6bjZ1LnIWr08GispyrkTmv35vE
ZS8bzsamgF65TZQJrWQi91R6YGASeqHlmZEIczpBPDnudNr7nDULuPhTsP0moKbJ
lfPAK631GtIbcgVrInR+3XKLjHUwqyilYgPOEG4qpeCcF3Jd1aRN5p8p8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSbh7VLeaci48gX6nkrMaU8MVCvMB8GA1UdIwQY
MBaAFC5L1O3KKdTnK+hs7Qt61lLH0mHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgt
MmE2MzcyZTA1NGQyLzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgtMmE2MzcyZTA1NGQy
LzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyLhfIE7
3z7tkhuLXpuTP0QVKgXF9TDtn4Uxa7/Z1oFqyjWhfAZBkT3LQSh1e3yD3JNR9ww5
3ocoFEpoWY93hHdB6Ff8IYpjItKZhl5nso7+6cz65g/Zd94jpERScDRpCdqvvxFI
owxxZQZ1AOwu7jMaImx4q8xXq+3uCtzj09zgx6bSnU4nAQSs/JbspFAqQvQae7sm
1MmRj0lQ+8jD83veN+zaFCb0hN9u/IJ7iQ8ZcMoL6nL5sIHJuqyE2c/umHticOys
DDZP7imAuZYKoQGunxMs1uxChQnFUIhOfBEZMDEC4oLRpaPNYZ80TFmMOn+zNBkb
O1DaH4XNdeHOnw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:39:07 2025 by rpki-client