Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: 9bVkskFUbHD1IUykiX2IBnYIFjIF5PA3NwyPzOFucLA=
Subject key identifier: F5:4F:88:37:4E:2D:AA:B9:22:39:3A:DC:4B:A0:89:EC:9D:FB:39:D6
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 0197C64AAB0B8E0BBB9BE911CD93125FF9DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 06CA
Signing time: Tue 01 Jul 2025 14:01:11 +0000
Manifest this update: Tue 01 Jul 2025 14:01:11 +0000
Manifest next update: Wed 02 Jul 2025 14:01:11 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: K5glt8mYEWQ8UIMoPP9zZr3Oy0XhxGSkkxgc2x+dfF4=)
2: Z-dfosDrlzVSKVFTGJ7LYewGU6w.roa (hash: lSxGudn5Fs3j65oqD2ZSmu7gAATGql89N/KwokwP/NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:ab:0b:8e:0b:bb:9b:e9:11:cd:93:12:5f:f9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Jul 1 14:01:11 2025 GMT
Not After : Jul 2 14:01:11 2025 GMT
Subject: CN=f54f88374e2daab922393adc4ba089ec9dfb39d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:23:74:98:60:c3:10:52:ca:62:4c:39:5a:fb:
8e:37:ef:19:15:fb:e0:b8:d5:a2:5c:8e:f3:52:de:
4f:15:13:84:3c:6e:21:ec:48:85:cc:32:f6:3d:e2:
af:6e:68:85:3d:90:40:73:24:c9:3f:18:81:07:7e:
7f:f6:51:00:55:e0:78:86:67:8e:fe:f6:d9:65:84:
83:c2:c8:03:cc:db:79:39:8c:51:bf:3a:64:fb:f5:
2f:bc:50:94:fd:14:5b:3c:64:ee:e9:99:7e:d3:c1:
c9:d5:ee:cf:fe:bc:1e:9c:ea:a5:e8:8b:6b:38:18:
61:54:84:cd:f1:ed:74:13:75:c9:6e:d7:2e:95:d2:
41:c1:de:a6:59:d2:68:85:e1:d8:e3:bd:ad:d4:9f:
7d:26:f2:5a:d8:a1:6a:e3:c3:6e:6d:98:3d:23:ae:
18:5a:f6:12:a5:62:ce:ce:d3:9e:4d:d7:69:69:dd:
54:02:53:9a:ff:d5:a3:23:42:1a:63:f6:ee:e6:d0:
f6:e3:de:d4:f7:07:7b:54:98:30:06:bf:4e:3a:9f:
65:86:38:ba:e1:6f:72:03:f4:96:b6:eb:34:d8:8c:
54:f9:13:d6:32:29:0b:b0:7a:ae:9e:a4:76:94:76:
8f:4c:75:2c:74:7e:c8:71:3f:3e:e1:66:cd:39:f9:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4F:88:37:4E:2D:AA:B9:22:39:3A:DC:4B:A0:89:EC:9D:FB:39:D6
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:02:c2:a3:d0:18:4b:ea:68:c5:f8:a5:4a:2b:4d:db:9a:26:
a1:dd:d9:d3:70:fd:93:d8:0e:1a:3d:b4:9a:88:9f:0c:d9:43:
ef:92:fe:b4:15:09:07:e1:e3:e5:9f:cf:d1:2c:2e:eb:87:6b:
af:f0:4c:97:9f:f8:fb:df:22:4e:6b:66:35:d7:6a:8d:89:1a:
a0:d5:fa:c1:01:51:b4:21:d6:0f:a4:23:d2:9a:f4:d8:c1:8c:
38:40:7a:f9:35:18:75:47:7a:bc:ec:40:19:d9:3e:35:ef:0f:
e1:14:0c:e4:02:cc:58:91:b8:1d:c8:cb:ab:10:9d:42:be:3e:
a9:93:71:95:5a:71:64:09:a8:97:a9:55:e5:a6:f0:01:f0:70:
00:5e:1e:e7:b1:04:7e:a8:b1:3d:01:b0:5f:4b:93:82:6c:75:
bd:8f:8f:c7:30:9d:cb:bb:c2:c4:c3:4e:e9:fb:6a:c4:44:98:
ee:ea:a3:8a:0c:c8:76:fb:c3:67:7d:42:84:d7:6d:07:71:88:
47:82:18:bd:a3:b8:21:99:87:b2:58:6b:0e:2d:52:dc:a6:37:
e3:76:11:00:17:e3:71:0e:6c:80:27:83:03:00:e2:a0:ae:bb:
36:10:3f:2d:c4:1d:8f:bb:99:ee:e9:b4:52:78:3e:63:1d:43:
95:76:5e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:37:21 2025 by rpki-client