Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
File: LkPayOpVaTQ53RuLSBK6cYNPEDE.mft (raw, json)
Hash identifier: tzsDbDv3tT2Dk33n91SMXPyFM0hK55PgsLDcaoq/9Q8=
Subject key identifier: 8B:D1:73:44:AC:4E:1B:3F:5F:72:BC:B8:D2:14:18:64:16:2A:08:AC
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial: 01960C0C9D2393398E0F214F0D4B06E47913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
Manifest number: 117D
Signing time: Sun 06 Apr 2025 17:01:15 +0000
Manifest this update: Sun 06 Apr 2025 17:01:15 +0000
Manifest next update: Mon 07 Apr 2025 17:01:15 +0000
Files and hashes: 1: ANPtCnGv8gHA7x3faWzBPJFvOXI.roa (hash: 47gT+uwBF8roCKnncbKY5zhpD+DW3HsUlU+dHgq1yW0=)
2: LkPayOpVaTQ53RuLSBK6cYNPEDE.crl (hash: Oev75DpvC6A89IFSS5SeDn71tKJ0RbEhxRS8Xwsa4iE=)
3: Q_F5FBMRJgiBKxNjWiortg2YMoY.roa (hash: aObbq13Sl5QPy6edKviS0LhaIUtmg0bsHO4b4zIGuiQ=)
4: UhVG2jyrAmFon0NT28kVJfJ2xPU.roa (hash: 0vKwRNkKIsm0/VOmSdKGt70EGUg+yxe2L/I3kHNcIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:0c:9d:23:93:39:8e:0f:21:4f:0d:4b:06:e4:79:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Validity
Not Before: Apr 6 17:01:15 2025 GMT
Not After : Apr 7 17:01:15 2025 GMT
Subject: CN=8bd17344ac4e1b3f5f72bcb8d2141864162a08ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:e9:6b:e5:e2:7d:fe:31:fb:80:96:b9:ea:
c9:39:ac:bf:ad:45:01:65:9d:14:8c:7e:08:d2:5e:
1d:ec:b8:d4:c5:8a:40:e1:ff:a9:47:46:c9:4a:1b:
e7:02:11:13:64:b4:ab:ec:60:61:4c:15:75:b1:98:
6b:a0:f5:17:5e:f9:84:a4:a1:a8:c8:0a:b2:00:6c:
b0:70:3e:67:d9:75:76:60:e3:08:1a:96:52:fb:ee:
33:2e:1a:95:b7:8e:07:a8:64:92:45:4b:b9:8a:be:
7a:6a:be:4c:55:2a:eb:91:29:95:f6:79:79:6f:b3:
fd:85:02:36:48:20:5a:f1:a2:fc:2c:2c:14:cd:4f:
8d:78:46:a9:e8:87:b9:c5:5a:30:f9:b8:eb:01:e9:
a5:42:58:f4:3b:af:a5:83:11:93:5c:20:59:c5:a3:
cc:a6:8a:1e:b6:9c:1e:3e:34:0c:93:04:63:a0:76:
c4:35:86:c1:b9:52:c9:e0:2b:7a:46:38:e5:14:ac:
f0:12:d2:d1:30:ce:2a:59:b4:d0:bd:f3:98:ac:3d:
e6:65:27:82:a5:ca:a6:d0:f2:0d:4e:de:43:e4:1e:
eb:6b:15:94:21:0e:8b:fb:83:30:5d:a3:52:ec:a0:
cc:2c:6c:b2:4a:17:b9:49:25:d9:98:3c:cd:80:bf:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D1:73:44:AC:4E:1B:3F:5F:72:BC:B8:D2:14:18:64:16:2A:08:AC
X509v3 Authority Key Identifier:
keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:81:7d:14:20:9d:51:4a:50:96:05:cb:05:42:24:46:3e:80:
7c:a2:54:08:44:7a:e7:65:6b:a5:e8:27:12:91:ba:8b:3c:df:
db:1b:10:09:a3:14:bb:3b:69:8b:1d:bc:23:46:d1:c3:f9:b2:
1d:e8:eb:1e:03:74:fa:93:e6:ae:2c:eb:2c:36:d8:51:78:e4:
89:f1:5c:60:14:72:4e:39:56:71:fb:1b:11:f6:fd:01:84:74:
78:8e:b4:9e:79:fb:f0:f6:8f:30:6f:02:71:60:80:67:54:5a:
a9:4d:a9:9d:fb:dd:1a:19:b2:bf:4b:8b:07:21:08:b3:53:96:
7b:3d:3a:e2:62:a3:0b:f5:99:1c:10:f3:a9:32:cc:09:14:b6:
d9:1e:1f:dd:9d:68:14:39:02:e6:73:ba:8d:5e:5c:44:04:1b:
d6:50:95:1e:8c:75:91:13:b1:13:33:d8:73:f5:92:20:4e:62:
ff:92:bb:19:80:36:76:bd:1d:78:ee:0b:cd:55:6f:35:6f:30:
7f:6a:39:f5:4a:e6:88:f5:68:78:69:54:16:01:f7:9c:05:43:
7f:3d:34:47:87:7f:35:cb:fa:4a:4e:0e:27:67:43:42:3d:1d:
f6:25:b7:82:6f:40:bd:50:a0:fd:86:28:4c:9d:61:fc:e0:d7:
b2:65:74:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:25 2025 by rpki-client