Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: 3tp/Ln8E6yxaHx7ruc5kb3Qo3os3QkYR+PTpndMDGmk=
Subject key identifier: 1C:12:7D:12:32:5C:67:4E:26:95:17:3C:79:FA:B8:AF:78:62:5C:F2
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 0196BFA5DC4A4AFB99790A84DA947271901A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0642
Signing time: Sun 11 May 2025 14:00:40 +0000
Manifest this update: Sun 11 May 2025 14:00:40 +0000
Manifest next update: Mon 12 May 2025 14:00:40 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: uo8J3MZ3Zwvqpl8F9UwkO8y1xbKBww1+eiEKdM6pvvc=)
2: Z-dfosDrlzVSKVFTGJ7LYewGU6w.roa (hash: lSxGudn5Fs3j65oqD2ZSmu7gAATGql89N/KwokwP/NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:dc:4a:4a:fb:99:79:0a:84:da:94:72:71:90:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: May 11 14:00:40 2025 GMT
Not After : May 12 14:00:40 2025 GMT
Subject: CN=1c127d12325c674e2695173c79fab8af78625cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:ce:09:4e:99:02:16:4b:be:88:fd:b4:a4:
41:46:e6:ff:e3:6b:49:b5:ec:b1:87:9a:13:c8:24:
aa:78:b2:92:cf:16:30:3e:af:6c:09:57:7c:6c:bc:
cd:08:d6:18:1b:12:74:8a:51:99:62:e6:60:f8:1b:
75:d8:d2:f0:df:38:37:a1:86:da:a3:15:ed:f9:b3:
e6:83:b2:6f:6c:cc:0a:e1:f2:79:c6:e3:8f:da:d6:
c9:ff:ee:ff:cb:0c:ec:7f:22:e1:93:15:ab:eb:89:
fc:a1:74:a8:1b:40:4d:31:07:25:6c:86:36:7b:d7:
e0:89:66:68:5c:24:b3:02:bf:39:f5:4a:9b:77:f0:
1e:16:dd:46:31:fc:53:f4:52:09:a7:9a:04:17:7e:
90:f5:33:16:23:83:61:c2:71:e7:82:9c:79:59:7e:
82:58:30:d6:0f:36:c4:26:07:36:27:9a:5e:c8:8d:
f7:ef:bd:d7:68:ae:dc:3b:d7:88:f3:6a:4a:ff:42:
da:da:5f:77:09:eb:81:c4:af:c8:94:c8:25:bb:a0:
19:ba:0f:14:93:eb:73:eb:8d:99:0c:c7:7a:8f:1d:
35:4b:e2:d7:3d:6d:55:f5:c8:de:80:4d:01:05:17:
fc:3c:c9:38:68:a5:5c:4f:17:ce:79:fa:78:e0:1e:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:12:7D:12:32:5C:67:4E:26:95:17:3C:79:FA:B8:AF:78:62:5C:F2
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c4:aa:66:89:91:96:04:d4:5e:b5:58:4d:ae:f2:af:e6:f2:
fc:e5:8a:9c:0a:a1:62:6b:23:20:5c:17:4c:35:b9:ac:3f:d4:
ce:bb:85:46:ac:f8:34:5a:5a:92:95:67:40:cd:d8:ac:bb:05:
70:a5:bc:aa:01:13:35:22:d8:c7:29:87:60:df:3f:ce:9a:91:
66:89:3c:a2:f9:0a:81:d7:a2:1f:fa:6f:ee:17:11:96:e5:e6:
a1:74:07:30:aa:bb:85:84:0b:94:42:45:00:61:45:9c:dc:77:
9a:3d:78:8e:df:99:b3:97:19:6e:0c:72:e0:48:d1:2c:65:ed:
e5:62:67:66:10:b0:db:f1:64:62:49:b7:36:1d:f9:64:ec:c6:
f2:38:c6:36:13:75:96:36:ba:df:37:99:cc:82:0f:f8:92:d4:
b9:d7:62:bc:63:df:5d:d6:b2:a0:7f:71:9e:2d:27:fa:38:13:
c3:5e:6d:c5:83:fd:dc:11:a9:4b:89:be:b8:27:a8:6e:a3:0c:
e6:85:ba:c1:c8:84:38:03:cc:4a:a3:46:09:e4:2e:4e:ac:e8:
eb:32:1d:ee:31:c8:70:f3:5e:11:cd:66:6b:c4:a8:22:8a:9c:
be:ed:d3:86:81:d3:c8:0a:fb:7d:a8:a2:96:f6:64:38:ae:6f:
3c:3f:89:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:05:31 2025 by rpki-client