Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: l7ywTZ+DDxYT5ZHqZ7S/UH2+N8pyoccjgqzbRra/rx0=
Subject key identifier: E2:55:E0:FC:D2:DD:0D:12:79:1E:A5:B1:D1:82:61:DA:B9:A3:E7:30
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 0197470BD9CECD614A77BB05226DDB92C350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 21:00:48 +0000
Manifest this update: Fri 06 Jun 2025 21:00:48 +0000
Manifest next update: Sat 07 Jun 2025 21:00:48 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: 2Mw8d12cFNmNinSYLHc9cewKIdZ7TETgpapibvLHWSI=)
2: PUu9JBqT0q_kMegzLpokDy8FZpg.roa (hash: GZSimUwCl58YJS+NoDvHAGPvWk0bb2fLNY1EJxjHl3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:d9:ce:cd:61:4a:77:bb:05:22:6d:db:92:c3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Jun 6 21:00:48 2025 GMT
Not After : Jun 7 21:00:48 2025 GMT
Subject: CN=e255e0fcd2dd0d12791ea5b1d18261dab9a3e730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:5c:9c:08:3f:07:de:10:22:61:0b:70:11:
d0:16:2d:75:a6:ea:1f:89:89:7a:2d:06:25:ee:c2:
dd:41:79:58:24:19:2a:45:51:d6:50:00:3e:56:1e:
0f:56:57:7d:be:d0:54:75:f9:05:94:7f:de:a2:2d:
11:43:ad:d9:a2:cf:5e:d0:4f:c1:cc:ae:41:aa:63:
14:36:f3:a9:20:52:9d:46:c6:5d:05:b7:48:eb:11:
ae:c3:12:75:2b:e7:fb:de:0d:b2:17:6b:c6:5d:56:
e6:17:22:56:58:c0:72:54:45:e4:13:5f:04:90:ce:
ea:b7:d7:47:61:5c:d7:76:5d:e1:95:fe:3c:c8:5a:
b6:a0:2c:50:db:11:fb:01:7f:37:a2:eb:35:2d:f3:
c5:e6:2f:0b:10:d9:21:0d:cc:a0:db:d9:a3:72:04:
26:2f:4d:8a:58:44:28:76:b0:d9:01:f9:99:2d:8c:
58:d3:c3:d9:3e:2f:2a:97:da:cb:3b:43:16:e1:43:
50:89:d0:c6:10:53:b6:40:b1:34:5b:8a:38:1d:b6:
17:fc:f8:42:b0:8f:2c:03:dd:3b:a3:cb:4d:f3:d9:
9b:e4:a4:ae:e8:ff:dd:58:cf:c3:68:1c:7f:8d:72:
a7:13:f0:6f:77:08:6d:81:e6:76:4f:0a:98:96:33:
27:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:55:E0:FC:D2:DD:0D:12:79:1E:A5:B1:D1:82:61:DA:B9:A3:E7:30
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c1:71:5e:64:11:67:4a:af:2b:a3:be:d5:3e:b6:4e:a2:3c:
cf:53:57:0b:af:2f:6e:be:50:4d:61:8c:9e:63:00:f9:75:7e:
32:ba:d0:6e:c6:de:9b:46:28:63:4b:38:c3:28:f0:ba:30:7c:
97:7e:c6:d4:1c:38:b0:2b:96:f4:4f:74:4c:ea:a3:6f:8b:ce:
e9:21:14:b4:84:af:cc:fc:80:e6:6f:4e:49:86:81:3c:d6:d9:
2b:7e:e5:c8:d2:33:36:07:c4:94:cc:02:b0:32:4f:54:6b:20:
60:f7:61:78:33:6a:4d:38:a5:b6:bf:ca:c6:d7:eb:0c:08:58:
42:de:0f:57:93:e0:3a:7e:02:81:db:28:12:bc:1a:1e:4f:e0:
7a:b5:54:7e:34:ef:63:d6:a4:fc:1b:ec:84:65:46:db:7d:d3:
84:27:a3:4f:32:80:56:92:70:a0:69:ba:0a:6f:0f:f1:e0:f8:
f9:94:0d:ba:bc:bc:1a:f8:4a:52:39:37:7d:b0:e3:26:e9:7d:
2d:1d:25:00:95:18:d2:f7:a7:ca:e7:f4:4e:f2:ef:27:09:41:
c0:11:92:3b:47:68:f1:50:14:3c:6b:fb:a6:aa:32:cb:6d:58:
11:52:b3:fe:62:b0:c2:33:56:fd:43:56:29:98:31:bf:80:6b:
8f:53:11:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:16 2025 by rpki-client