Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: g2Pn4IphLcvk28Xa8opFRdQ1oSdEcwt9fwv1rAihdfA=
Subject key identifier: CD:13:BE:A1:C0:30:A8:39:B8:55:51:BB:D9:C8:4D:71:98:F5:02:99
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 019748C3289E58D7E15094F71439046D5524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 0CC1
Signing time: Sat 07 Jun 2025 05:00:38 +0000
Manifest this update: Sat 07 Jun 2025 05:00:38 +0000
Manifest next update: Sun 08 Jun 2025 05:00:38 +0000
Files and hashes: 1: ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa (hash: sKxCzrP68EEiJiVgfkANI2KkD6xerh0joHKgW2snD88=)
2: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: /O6AniGgPG+yu1vA0flLXWVJMULGjkseVSmypVAou78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:28:9e:58:d7:e1:50:94:f7:14:39:04:6d:55:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Jun 7 05:00:38 2025 GMT
Not After : Jun 8 05:00:38 2025 GMT
Subject: CN=cd13bea1c030a839b85551bbd9c84d7198f50299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:84:4a:64:53:52:16:0e:91:a6:76:e8:82:
8f:6e:1f:25:a0:20:80:a4:fa:8f:5e:c6:85:23:f7:
53:0c:bb:10:71:cf:12:d7:f6:26:9c:b4:7a:8b:68:
5d:2b:e2:6b:ce:27:c8:29:30:ed:18:d1:93:ca:8a:
4e:02:ed:48:db:af:f2:03:f7:3d:cf:c3:23:4a:69:
a7:e4:91:7c:d2:a9:89:c8:63:8d:ad:36:1e:c6:f8:
50:f2:8c:65:e5:f9:78:b8:cc:2c:bd:10:0b:c4:8f:
9e:f5:35:a2:26:ef:25:bf:1e:3f:db:6d:69:71:14:
9d:83:eb:95:5b:9f:55:f8:81:a3:7e:04:33:dd:ae:
f7:7b:33:6b:6a:b0:3a:63:28:e9:5d:d0:1f:72:fc:
b4:90:e8:89:d0:da:54:a4:89:46:0e:ce:b5:aa:a8:
a0:b4:27:4d:e5:50:37:dc:a0:d0:29:ab:40:4d:4b:
23:f3:1c:80:c8:0e:90:df:45:d2:6a:09:36:d4:85:
6d:a7:49:a4:60:57:ae:fc:b7:c3:0c:14:a2:dc:6a:
34:d9:fc:2c:c1:9a:4d:ba:17:a2:6a:bc:90:48:4b:
28:fd:c5:49:be:a1:02:c7:bb:dd:8c:c1:b0:95:0f:
d4:3c:fc:6b:f3:79:a1:2c:17:ff:b2:e1:03:bc:5b:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:13:BE:A1:C0:30:A8:39:B8:55:51:BB:D9:C8:4D:71:98:F5:02:99
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:06:4e:18:dc:07:ba:9b:71:ec:89:73:40:6f:98:14:5f:57:
bc:28:bb:46:f0:bd:54:6f:49:af:2c:e5:09:1d:bc:ec:35:88:
2c:1c:6a:30:b0:36:80:b2:c2:7b:76:96:1c:24:2e:44:22:5e:
de:01:b7:85:dd:81:79:71:d8:d7:bd:fc:94:fe:b7:46:a2:54:
07:72:5c:22:23:10:21:b1:26:1a:d7:bf:cc:b8:0e:38:3e:fc:
19:47:96:8d:01:cd:cb:ad:16:48:7e:11:8e:07:61:88:b3:a8:
5e:43:07:f0:55:ec:e4:7a:c6:32:2d:ae:9c:5a:53:20:f7:04:
44:42:0c:20:04:95:d4:66:25:eb:b1:85:28:78:2a:89:98:e4:
f2:7a:e8:9f:2f:ae:7e:01:79:5b:4a:ff:ef:93:4b:49:53:dd:
76:2e:c0:e7:10:b5:c2:30:69:e5:e8:e1:40:9b:e0:9f:cd:29:
76:f8:b6:5f:a8:4f:31:84:38:80:7e:aa:9d:a5:40:f1:43:14:
39:40:25:ed:6b:f7:30:bf:50:70:67:a9:9a:51:51:6b:d3:40:
b2:85:a8:51:a1:e4:e5:cf:8c:ef:37:fa:86:ff:f8:af:ae:bd:
a9:26:57:97:39:c7:65:e3:3f:90:1a:ea:d3:66:fe:10:5f:25:
ec:15:17:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:02 2025 by rpki-client