Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: AHEwCOvj+Nwqp/wctj9oOKYAnHzOkK+xonM+jvAuR5k=
Subject key identifier: 62:24:49:EA:BD:83:47:F2:DF:7F:3A:2D:CE:DD:7B:F6:0A:E9:37:66
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 0198499C3A65A2D03D17560B6A94E02CA670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 0D46
Signing time: Sun 27 Jul 2025 02:00:32 +0000
Manifest this update: Sun 27 Jul 2025 02:00:32 +0000
Manifest next update: Mon 28 Jul 2025 02:00:32 +0000
Files and hashes: 1: ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa (hash: sKxCzrP68EEiJiVgfkANI2KkD6xerh0joHKgW2snD88=)
2: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: RfJ28u49F6IepBgSBs56nbod+vrnBfxDzpr8CMt4h9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:3a:65:a2:d0:3d:17:56:0b:6a:94:e0:2c:a6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Jul 27 02:00:32 2025 GMT
Not After : Jul 28 02:00:32 2025 GMT
Subject: CN=622449eabd8347f2df7f3a2dcedd7bf60ae93766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:87:49:18:d2:b2:23:b9:6e:59:26:a9:b6:
48:16:2e:f1:81:2f:95:e1:b5:a7:8a:d2:78:ff:cf:
57:ff:eb:37:6d:ae:f1:47:03:a6:4f:09:6f:b3:51:
c3:51:ba:0c:fe:f2:02:a6:48:ff:89:06:4b:01:08:
99:dc:a8:84:64:ab:6e:33:63:95:4d:ef:da:38:a8:
07:6b:67:b3:b7:b9:f0:95:36:b0:6c:99:4c:70:ec:
c7:91:40:bb:df:8c:61:11:14:d9:dc:68:74:52:b0:
fd:6d:ef:ae:7a:1b:ca:12:8d:52:7d:5b:d2:40:89:
66:91:d5:92:17:97:46:ce:ff:7b:1b:1e:9c:dc:e9:
20:b2:d9:a2:73:b7:60:cb:61:ad:53:76:4e:bc:74:
ac:d3:f5:a0:b5:f5:dd:a9:ba:ab:f8:a1:53:85:32:
d8:72:69:e5:8b:c5:17:52:31:ab:11:7c:41:31:fc:
b2:6a:ba:4c:09:4f:c0:08:13:6b:03:f6:ba:66:55:
8a:97:22:e4:6f:be:5e:e6:20:28:e8:77:d3:61:92:
f2:e0:a9:0c:19:91:89:d0:b3:19:a4:47:32:6e:1d:
a2:08:f1:a2:8e:48:c3:c0:d3:9c:c3:9a:97:63:ba:
9c:c0:5d:bc:a4:49:f4:a5:cf:ac:7d:9d:d8:05:97:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:24:49:EA:BD:83:47:F2:DF:7F:3A:2D:CE:DD:7B:F6:0A:E9:37:66
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:68:12:09:be:28:ae:3a:39:76:94:01:40:50:d9:5b:82:0c:
8a:ec:60:ef:0e:01:04:2a:4c:5e:97:c8:e2:07:a4:23:b3:28:
aa:26:3b:46:e4:38:a3:4f:90:b5:57:d9:7b:a6:7e:12:5e:f6:
1f:ba:ca:b9:86:62:1f:82:3d:71:c5:ca:cf:92:37:7b:08:45:
09:1e:af:17:c4:d0:42:6b:2b:17:3d:90:fa:c1:1b:d1:f2:3d:
10:e1:13:2d:1e:00:c2:34:fb:5b:d0:36:f2:35:25:5c:d5:7b:
13:de:8d:e5:d0:ba:74:d1:6c:d3:6b:09:8b:e7:48:49:74:99:
57:b6:69:31:86:4d:0e:7a:00:e4:47:82:5c:91:75:70:c8:e3:
eb:fa:b0:de:1e:4a:48:31:17:60:dc:ee:3b:93:1c:2f:6c:3c:
1c:93:78:73:62:e0:d1:94:ea:19:73:21:f9:9c:f2:f4:92:c4:
02:dd:44:9a:f9:55:e5:70:d9:95:76:56:ab:98:4e:91:4e:7b:
f4:55:b6:37:57:2e:07:59:55:e9:c9:a9:c0:c3:3b:99:87:a6:
1d:dd:fc:5a:ff:d4:a2:6c:68:9a:85:1e:13:69:e9:24:f9:4c:
f6:0c:13:36:e3:06:44:88:4e:a4:d1:8c:1b:c9:1b:bf:67:47:
4d:d2:1c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:18:08 2025 by rpki-client