Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: cmAszXhHzTixm7cPpqGj4IXpxZy2Fpp1nuBZXAW8TRs=
Subject key identifier: FE:74:39:61:05:72:7D:24:63:63:31:E7:8C:AF:F3:FE:4C:2C:F2:DD
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 019649D814BA9D33F31061C159DB36988F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 0C3D
Signing time: Fri 18 Apr 2025 17:00:19 +0000
Manifest this update: Fri 18 Apr 2025 17:00:19 +0000
Manifest next update: Sat 19 Apr 2025 17:00:19 +0000
Files and hashes: 1: ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa (hash: sKxCzrP68EEiJiVgfkANI2KkD6xerh0joHKgW2snD88=)
2: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: R9kl4pMVCooBn2KNIJvMSfONCRLesqHbKfJ8Lz3JB+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:14:ba:9d:33:f3:10:61:c1:59:db:36:98:8f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Apr 18 17:00:19 2025 GMT
Not After : Apr 19 17:00:19 2025 GMT
Subject: CN=fe74396105727d24636331e78caff3fe4c2cf2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:a8:bc:d7:0f:0f:bb:ba:3f:c0:99:3f:d8:
e1:4a:27:a1:ad:49:96:0e:dc:14:b3:37:f8:b9:f4:
80:ee:4e:4f:7c:75:dc:21:e6:c6:83:c8:43:cd:b5:
85:bc:49:f1:c3:d4:a0:19:cb:0f:db:42:d8:b8:90:
8e:08:d8:d0:55:76:47:b9:65:4a:00:51:f7:58:31:
30:ac:07:db:dd:7e:71:bc:22:d8:87:cd:12:f8:1e:
bd:c7:55:70:a4:a0:46:05:39:fa:ab:1c:2d:97:b4:
79:65:d0:b3:4a:d4:6d:9b:86:51:54:26:06:23:57:
c4:2e:35:e8:13:6f:89:b0:69:68:2d:51:1a:31:65:
ba:08:55:7b:7f:8e:af:d2:b5:d3:62:7c:1b:74:3d:
65:01:15:ac:d9:56:0d:81:64:a0:a8:06:cc:71:8d:
0d:a1:7e:fe:79:9f:de:a4:a8:c9:06:d5:9c:2b:bb:
66:d4:91:3f:13:c0:75:44:0e:1d:10:64:14:93:8f:
7e:ee:7d:01:71:36:cd:8e:22:fd:d5:0a:25:6e:bf:
c2:81:f1:7a:4e:be:22:e3:ed:e5:f7:db:18:c9:21:
4e:48:ef:cf:b6:f9:77:fa:51:19:3d:b5:e2:7a:76:
66:d7:35:f0:ad:52:d3:7d:a3:2e:a1:46:ba:65:11:
51:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:74:39:61:05:72:7D:24:63:63:31:E7:8C:AF:F3:FE:4C:2C:F2:DD
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d2:66:c6:8e:ee:63:d8:68:13:5f:e6:bd:d1:ad:36:42:a6:
a2:1e:96:9d:72:7c:73:b8:b1:4e:3f:8e:09:54:a2:f5:7d:6c:
53:ea:a5:7d:4f:00:3c:c6:d7:d8:4a:4d:b7:0e:06:df:e4:93:
33:9e:04:9b:a4:b4:6f:e8:1e:2f:c7:69:4b:cc:ca:33:78:68:
41:8b:11:0f:eb:92:ac:89:7b:03:27:a6:58:95:f8:fe:d4:a3:
22:4b:bc:ce:48:6b:65:a1:f6:f0:2c:7e:41:ea:a1:9f:33:94:
2e:43:73:01:50:11:ae:2f:28:74:2b:19:a9:69:14:10:35:66:
61:c8:ab:db:33:9f:51:8a:72:e0:af:24:1f:2a:51:48:19:42:
1f:a5:50:86:77:e8:3e:41:a2:52:f7:89:ad:d7:ee:45:47:5d:
21:35:4a:2f:21:21:3d:ee:88:d7:ba:fb:f7:59:e3:ce:9d:a8:
b3:9e:33:2f:6b:12:a1:da:f6:57:c1:f3:f6:b2:54:7d:a1:3b:
bf:e0:27:f5:19:26:ca:f2:2a:35:e2:ef:16:02:6e:3e:2e:66:
eb:f9:a4:0e:0e:d3:cf:d9:00:9e:28:98:fb:bd:17:2c:08:d5:
43:0e:e8:60:9c:1d:c3:c6:cb:8c:b3:19:f0:74:6e:51:69:7f:
39:fb:0b:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJ2BS6nTPzEGHBWds2mI+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YTM4MDZmNzQyYWJjZDVkYjEyMDRmNTI4ZjRjYTZkZGVi
MWU5ZGEwHhcNMjUwNDE4MTcwMDE5WhcNMjUwNDE5MTcwMDE5WjAzMTEwLwYDVQQD
EyhmZTc0Mzk2MTA1NzI3ZDI0NjM2MzMxZTc4Y2FmZjNmZTRjMmNmMmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiCovNcPD7u6P8CZP9jhSiehrUmW
DtwUszf4ufSA7k5PfHXcIebGg8hDzbWFvEnxw9SgGcsP20LYuJCOCNjQVXZHuWVK
AFH3WDEwrAfb3X5xvCLYh80S+B69x1VwpKBGBTn6qxwtl7R5ZdCzStRtm4ZRVCYG
I1fELjXoE2+JsGloLVEaMWW6CFV7f46v0rXTYnwbdD1lARWs2VYNgWSgqAbMcY0N
oX7+eZ/epKjJBtWcK7tm1JE/E8B1RA4dEGQUk49+7n0BcTbNjiL91Qolbr/CgfF6
Tr4i4+3l99sYySFOSO/Ptvl3+lEZPbXienZm1zXwrVLTfaMuoUa6ZRFRYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP50OWEFcn0kY2Mx54yv8/5MLPLdMB8GA1UdIwQY
MBaAFJSjgG90KrzV2xIE9Sj0ym3esenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEt
ZDhiZjUyMWIyNmIwLzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEtZDhiZjUyMWIyNmIw
LzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwtJmxo7u
Y9hoE1/mvdGtNkKmoh6WnXJ8c7ixTj+OCVSi9X1sU+qlfU8APMbX2EpNtw4G3+ST
M54Em6S0b+geL8dpS8zKM3hoQYsRD+uSrIl7AyemWJX4/tSjIku8zkhrZaH28Cx+
QeqhnzOULkNzAVARri8odCsZqWkUEDVmYcir2zOfUYpy4K8kHypRSBlCH6VQhnfo
PkGiUveJrdfuRUddITVKLyEhPe6I17r791njzp2os54zL2sSodr2V8Hz9rJUfaE7
v+An9RkmyvIqNeLvFgJuPi5m6/mkDg7Tz9kAniiY+70XLAjVQw7oYJwdw8bLjLMZ
8HRuUWl/OfsLhg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:45:49 2025 by rpki-client