Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
File: lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft (raw, json)
Hash identifier: /0wsV7cnskUgB19fOMsGimdLavW0P2M7GDoQF/hxESU=
Subject key identifier: E0:94:92:E3:33:6D:69:8B:E5:93:FA:03:27:70:7A:03:5D:04:8A:15
Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
Certificate issuer: /CN=96448e840d272a3e3159192d1df11f100e506f6a
Certificate serial: 019749D5C3B98B0BDF993CD8B9357935B558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
Manifest number: 07A6
Signing time: Sat 07 Jun 2025 10:00:35 +0000
Manifest this update: Sat 07 Jun 2025 10:00:35 +0000
Manifest next update: Sun 08 Jun 2025 10:00:35 +0000
Files and hashes: 1: HRJaIehlqdUQOZwaPo6dI6mb5MQ.roa (hash: NAZLCo/vu2u7I92Xt0rJZZjC+drQdPYyxSFtuqS2OpE=)
2: lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl (hash: FjzQ1ML1DIXpSLwUJJaaOvid4uhhMwL0txDhifdAL9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:c3:b9:8b:0b:df:99:3c:d8:b9:35:79:35:b5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a
Validity
Not Before: Jun 7 10:00:35 2025 GMT
Not After : Jun 8 10:00:35 2025 GMT
Subject: CN=e09492e3336d698be593fa0327707a035d048a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:49:67:cb:91:fa:26:09:4c:33:5c:ca:83:d9:
18:47:20:a0:10:0c:08:33:ab:ab:29:7f:3b:f1:a8:
f2:f1:7c:ae:ed:74:f9:6d:8c:8d:5a:f9:06:66:3e:
dc:a0:4b:c6:8e:02:8d:3d:81:bc:51:df:37:84:6a:
23:3e:b0:d0:0d:08:ce:07:9a:6e:24:a4:b7:9f:83:
13:a7:45:95:85:e2:ff:76:83:18:65:be:b4:c0:a4:
0f:1a:c7:44:2e:ed:e0:86:36:76:7d:97:70:ee:8f:
96:18:4e:8d:eb:e2:ba:9a:c7:98:2c:55:df:f4:48:
21:57:27:a2:99:e6:7b:3c:41:91:aa:5c:47:b2:3a:
c6:ab:31:0b:eb:69:d4:2b:ed:d1:c7:36:e6:f5:cd:
4f:6a:a3:a6:61:16:cd:3b:19:89:96:a2:5c:f6:87:
f5:66:9f:39:e4:85:69:51:dc:2c:b3:54:9a:9f:01:
33:22:5f:3e:3a:6b:ff:01:20:6b:9b:fc:f0:8d:bb:
34:b3:2f:bf:f1:19:c0:9a:20:90:d9:30:4d:33:2a:
7b:9f:5f:9e:dd:90:52:1f:2d:44:93:ea:6f:2d:91:
5b:39:0c:23:37:f8:bf:96:03:81:6e:02:ef:fb:3e:
11:c8:e3:4c:18:ed:05:ab:41:fe:40:46:ff:6a:c9:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:94:92:E3:33:6D:69:8B:E5:93:FA:03:27:70:7A:03:5D:04:8A:15
X509v3 Authority Key Identifier:
keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:17:eb:d2:dc:b6:84:20:e3:4f:89:74:a2:9d:0a:02:f3:30:
4c:62:a4:80:35:32:e7:50:65:37:a5:0a:5c:29:c9:c8:37:b7:
f3:39:44:fc:e2:06:5e:19:8f:b1:e8:72:ec:d4:2b:d0:17:b5:
98:81:1d:20:35:f3:2d:4e:59:26:d3:30:0c:58:de:0d:17:74:
ac:ce:62:31:80:51:59:72:d2:7a:ed:62:6f:3e:b1:a3:46:93:
83:a1:b2:22:45:2b:b8:22:9e:54:a1:f1:73:78:4b:ba:32:93:
d8:79:8c:c6:5e:47:f4:70:74:fe:8c:8a:fb:4b:b7:a2:33:0d:
06:ab:49:fe:8f:25:5a:ce:a6:e6:5f:15:37:30:01:fd:11:f5:
f5:dd:61:d6:71:53:80:79:12:98:21:a2:5e:79:47:98:bc:30:
b4:3e:b8:c1:bd:cb:45:5d:96:ab:f7:f8:ab:95:19:62:35:a4:
92:08:34:e3:1c:23:bc:e7:8a:ef:8e:52:09:c5:1f:af:e2:47:
df:92:f0:36:25:bb:61:b9:e2:ae:59:9a:21:47:31:42:01:4c:
0f:2e:b0:90:58:1d:7f:60:df:5b:01:72:61:ae:f0:c0:84:97:
fe:79:ab:2d:83:20:db:ea:36:6a:b2:70:80:9d:9e:b4:20:07:
c7:f4:dd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:32:33 2025 by rpki-client