Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: GLRBCvJjgeJfsGjKyS7All0tCB5otwT11U1QZRt0u8U=
Subject key identifier: 08:38:FD:F7:2C:1D:94:EB:A5:52:B0:FD:88:38:7D:0E:A9:72:08:3C
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 0198D4A78FC26DD281E3BA8A08EC719CD5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0756
Signing time: Sat 23 Aug 2025 02:00:07 +0000
Manifest this update: Sat 23 Aug 2025 02:00:07 +0000
Manifest next update: Sun 24 Aug 2025 02:00:07 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: Y9R/XH1YBvA0JnYBLWBbboBZbUfNCqag6HcnUHLShuM=)
2: Z-dfosDrlzVSKVFTGJ7LYewGU6w.roa (hash: lSxGudn5Fs3j65oqD2ZSmu7gAATGql89N/KwokwP/NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:8f:c2:6d:d2:81:e3:ba:8a:08:ec:71:9c:d5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Aug 23 02:00:07 2025 GMT
Not After : Aug 24 02:00:07 2025 GMT
Subject: CN=0838fdf72c1d94eba552b0fd88387d0ea972083c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:b0:76:25:ae:76:77:9e:fc:e7:d7:ff:12:
9d:a7:20:43:04:7c:0d:1d:04:8d:8e:4d:56:e0:ac:
43:fb:ce:c6:e8:81:3f:dd:52:b4:51:34:1d:1e:98:
5b:74:2c:da:e0:e7:aa:a1:f0:4e:be:fe:73:78:bb:
c4:f5:11:dd:2d:4d:6b:73:22:b3:e7:7d:7c:a1:eb:
d4:4a:b8:b1:6c:9b:e4:1d:45:9a:cf:c1:16:e4:8e:
a4:d5:9d:58:e4:48:8a:8f:74:7f:33:24:36:03:35:
73:2b:37:c6:5a:d2:43:a5:e0:2a:1d:b2:f3:7f:4b:
d0:39:35:f5:ba:0c:ae:0e:d0:67:bb:7a:94:cf:f0:
28:9f:79:7c:c7:9e:3c:36:3b:20:5c:d5:17:70:c3:
50:31:33:fb:27:bb:5c:d1:8c:29:35:b4:4b:18:db:
13:d6:97:17:e5:65:09:84:24:2a:fb:9c:d8:0a:bf:
c2:02:d7:99:7d:07:f9:7a:a8:1d:55:71:7c:90:71:
23:55:19:4b:62:71:24:9d:6a:12:21:2c:b8:3d:a0:
da:d6:b8:52:25:e7:bf:72:04:0b:75:d1:7f:e0:69:
69:ea:96:26:87:35:fa:b2:d2:eb:3a:f2:04:b0:66:
c0:39:c6:fe:39:d9:3e:04:80:46:c6:a7:ce:95:16:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:38:FD:F7:2C:1D:94:EB:A5:52:B0:FD:88:38:7D:0E:A9:72:08:3C
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:09:9a:59:b6:f1:84:3f:3f:32:55:ef:93:91:0a:57:da:4f:
70:e5:80:f7:a0:7c:39:92:b6:37:49:67:49:0c:38:ef:28:d6:
bd:7c:b9:19:5d:37:c1:44:71:0e:63:1d:41:c4:4e:2b:ce:69:
57:1a:55:8d:61:db:eb:c7:e2:f6:09:6d:58:7a:52:78:d7:d5:
7d:56:67:59:26:f9:94:ae:27:10:c3:fc:4f:29:3c:62:15:49:
7c:58:62:81:a1:6d:3b:7a:cf:af:05:7d:a7:1a:08:41:20:70:
76:9d:bf:4f:94:de:74:ad:21:44:f1:38:06:db:1f:5f:8c:8a:
24:eb:ef:8a:78:e6:4d:87:db:68:4e:dd:5c:1c:f9:ae:78:36:
ea:ab:e8:63:90:ee:f2:61:72:9e:ec:8e:5d:28:9c:55:fe:d2:
7b:f6:50:a0:aa:41:b7:39:93:62:e9:0f:68:e4:a4:32:4c:b5:
d1:9e:ac:0e:4f:87:96:a8:d0:5d:d0:43:77:c0:91:f4:5e:49:
55:19:0f:9f:9a:5f:b2:46:e8:06:8b:49:cf:ca:65:53:86:dc:
fe:78:c2:39:5b:20:b5:33:8f:2c:8f:66:15:98:99:52:6b:65:
8d:80:6b:a9:15:1d:e0:b6:5d:ca:84:34:ff:65:8b:60:23:3d:
3f:70:68:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:52 2025 by rpki-client