Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
File: LkPayOpVaTQ53RuLSBK6cYNPEDE.mft (raw, json)
Hash identifier: QHUzs1B+l7eOKML2FvIfA60U85yR5rJ1Gq0xRC4Umyc=
Subject key identifier: FF:E1:00:3B:34:02:BE:E0:9B:78:37:3C:98:14:8E:50:36:CB:A1:4E
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial: 019926D6EB5F213F6D50C27EC6D4221BC93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
Manifest number: 1320
Signing time: Mon 08 Sep 2025 01:00:42 +0000
Manifest this update: Mon 08 Sep 2025 01:00:42 +0000
Manifest next update: Tue 09 Sep 2025 01:00:42 +0000
Files and hashes: 1: ANPtCnGv8gHA7x3faWzBPJFvOXI.roa (hash: 47gT+uwBF8roCKnncbKY5zhpD+DW3HsUlU+dHgq1yW0=)
2: G9SmysWbMuSxx-EDG3Cs-f8IXqY.roa (hash: asZN9tI3ws8BcQXeW3lamrTpn0W8Ef30eRexdJjOvPw=)
3: LkPayOpVaTQ53RuLSBK6cYNPEDE.crl (hash: ARZzeH7vJOulrFO9mcZCLzeiyJZ0UnuWCFeHt+Ai2lU=)
4: tVeA1QW6o2_4cAAoeOMN60OC09M.roa (hash: K+ciN3DFQxqGOLGpRd4/ZhXkYH4OU+8ws5sujZeJtPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d6:eb:5f:21:3f:6d:50:c2:7e:c6:d4:22:1b:c9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Validity
Not Before: Sep 8 01:00:42 2025 GMT
Not After : Sep 9 01:00:42 2025 GMT
Subject: CN=ffe1003b3402bee09b78373c98148e5036cba14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:08:a8:ad:25:e7:78:05:64:45:a1:de:69:
31:3a:37:da:2c:e3:bf:25:da:d7:cb:2f:00:9f:21:
31:9b:71:7d:0f:ac:01:3b:6a:e7:00:90:68:36:85:
26:d9:f8:ba:d3:4a:26:57:81:cc:d4:f3:eb:f6:c2:
57:92:cc:c0:a6:a4:02:10:90:6e:16:68:61:f1:d3:
47:78:1b:92:62:ce:f2:21:30:14:f3:c7:a4:11:4d:
85:19:f7:a7:0c:72:0d:f0:47:71:e9:c4:dc:55:c4:
e1:51:12:17:30:d0:72:3d:ce:54:9f:82:0d:80:c5:
31:ce:5c:1a:d7:0f:8a:eb:7f:45:59:5f:df:47:02:
2a:78:37:cf:e9:72:4d:04:ea:f3:6c:2e:c2:d9:f0:
c5:eb:f5:b2:12:86:97:8c:0e:49:19:5b:9b:70:4b:
10:86:69:8c:b3:4c:c1:9c:a5:a1:3c:8b:60:82:b4:
d8:a4:90:0b:69:89:8b:04:7f:cb:6b:28:43:f7:ef:
8e:21:d3:cb:c0:b5:aa:48:e1:b9:17:b8:8f:02:68:
2e:2b:ee:42:74:9c:82:7f:d2:91:37:82:30:a0:3d:
3b:6a:6f:e7:76:33:a5:54:7e:ab:11:bf:27:9a:b6:
8a:e0:ef:ef:a1:f4:6c:2b:d8:01:11:10:47:c8:b1:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E1:00:3B:34:02:BE:E0:9B:78:37:3C:98:14:8E:50:36:CB:A1:4E
X509v3 Authority Key Identifier:
keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:05:b9:ef:74:6a:2e:0e:eb:a4:aa:3f:bd:96:b4:ef:ac:a0:
c7:4e:a2:c5:2c:9d:3b:09:8d:2b:e7:f3:ca:27:9e:19:66:38:
9c:20:7e:d7:1e:a8:a9:d9:57:dc:ed:63:11:85:10:8d:55:65:
10:c5:5c:d0:e8:a6:26:7f:93:3d:ae:39:c7:6d:8f:de:ea:6e:
de:45:d6:1c:ac:d3:ba:18:d5:6c:f0:0f:d9:b6:8b:cd:b9:d6:
3a:41:74:2a:91:3e:55:62:b4:ab:86:8d:65:22:32:ba:1e:ea:
7c:7e:65:37:ba:05:35:6d:a9:f1:d6:5c:ed:ef:23:e2:37:56:
18:77:28:81:09:cb:48:4b:e3:af:76:c3:c7:28:c5:50:9b:c1:
cc:11:e5:5f:a4:89:7f:4a:b6:77:a1:a3:6b:12:1c:b0:d6:c0:
c4:9e:34:b0:88:9d:67:80:ba:83:f7:60:5d:bc:81:5c:fc:7a:
7f:d3:a8:8a:01:ab:cc:ce:f6:2a:b9:c2:f8:3e:9b:74:7c:ce:
cb:61:78:ea:39:75:ae:da:1d:ef:5e:7f:5b:9e:41:74:a1:27:
34:fe:c7:50:0e:4d:75:89:c0:ee:2e:9f:e7:28:20:3c:27:10:
cf:34:4c:b9:83:46:b8:8f:cd:9f:1d:1e:14:a1:f9:1d:72:e9:
b5:5f:17:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:37:06 2025 by rpki-client