Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: YBLxSS6nDuh0l7GRQe8VQKHv/qkGa1UaofZQgDp9PkI=
Subject key identifier: C9:EE:3A:C5:82:48:1B:87:A1:08:79:18:7D:C6:2D:4F:1F:A5:F2:B4
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 019935374C4EE3FB7F663938C5F7F11D3C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0788
Signing time: Wed 10 Sep 2025 20:00:40 +0000
Manifest this update: Wed 10 Sep 2025 20:00:40 +0000
Manifest next update: Thu 11 Sep 2025 20:00:40 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: 80A7LpZSRX8vI7gOuR3MTl+v9t9zFHWUHehZJI6FxVA=)
2: Z-dfosDrlzVSKVFTGJ7LYewGU6w.roa (hash: lSxGudn5Fs3j65oqD2ZSmu7gAATGql89N/KwokwP/NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:4c:4e:e3:fb:7f:66:39:38:c5:f7:f1:1d:3c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Sep 10 20:00:40 2025 GMT
Not After : Sep 11 20:00:40 2025 GMT
Subject: CN=c9ee3ac582481b87a10879187dc62d4f1fa5f2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:90:5a:ab:da:01:44:74:6e:b3:ff:9d:64:94:
95:4b:59:81:4c:d6:15:8b:4a:22:6f:2f:60:49:a0:
8c:e2:2f:6d:55:28:a7:22:42:06:83:aa:96:d4:86:
b4:d0:52:e4:03:40:62:aa:2e:63:c9:98:35:fd:36:
bb:7a:6e:9a:42:15:32:54:35:c1:35:94:12:dc:9d:
eb:70:c8:20:30:e3:9f:64:1f:ad:bc:69:17:81:99:
8f:ec:f1:2d:e6:09:f1:af:b0:d0:88:4f:d2:19:37:
fc:b1:fb:2c:60:e6:4b:86:a7:34:41:1a:b0:24:57:
fb:5a:7c:70:70:00:a1:40:b5:ea:d9:51:37:66:a2:
40:dd:47:4b:42:d3:d9:82:fa:cc:46:1e:20:96:0e:
44:6c:c4:56:4a:c4:7e:8f:79:99:8f:b4:b9:4d:19:
fd:91:d6:d1:80:d6:1e:ab:41:4c:b1:71:f1:b6:cb:
59:b1:3a:18:6e:7e:c4:fb:2b:6f:88:30:51:aa:ff:
c9:d6:88:ad:10:29:46:0d:7b:07:95:6c:93:f7:b4:
3e:e8:ba:cb:3b:ce:25:6b:09:47:0d:8a:60:38:df:
2a:26:6b:be:29:0f:58:c9:d6:d5:25:61:67:49:ff:
38:e9:21:24:e8:2f:ee:f2:9e:1f:d6:ab:0f:bd:b5:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EE:3A:C5:82:48:1B:87:A1:08:79:18:7D:C6:2D:4F:1F:A5:F2:B4
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4e:b2:dc:02:f1:7d:a3:df:c6:a6:5c:8a:9b:3c:de:54:3f:
bb:f9:48:b9:4e:ad:fe:71:db:81:4f:02:30:dd:c4:b3:f8:59:
b6:36:bf:b8:45:4a:70:8b:35:d3:f0:8f:23:b6:60:c3:50:fc:
67:a4:06:b4:75:2a:86:43:39:eb:7f:76:b4:0f:11:80:a9:6a:
bb:1a:af:bd:5e:28:a3:00:2a:69:ba:85:e5:61:98:21:73:bd:
6f:35:a0:83:36:0c:3d:11:34:4c:a2:0a:8e:b6:1f:7c:6d:da:
ce:b7:d9:bd:b9:6d:89:f6:1b:d4:27:90:2f:1c:03:00:f5:a5:
43:42:03:14:99:a5:4c:0f:ee:cf:a8:b7:78:56:da:3a:9b:75:
a9:37:6c:af:43:65:a0:fc:e8:4d:73:44:fd:10:22:65:fb:d4:
71:0f:c4:cc:68:00:a4:00:59:54:08:f5:7d:2c:c7:eb:2a:4a:
8c:51:48:fd:59:cf:4b:73:74:83:3f:78:54:c8:e0:85:84:55:
6f:dd:95:ba:be:c5:73:5d:9c:00:97:02:35:f6:78:be:26:f8:
fe:6b:b0:5e:9f:6e:19:95:10:41:34:a6:91:36:fb:a4:34:b3:
c8:b8:02:e2:90:85:8c:a9:78:5f:dd:d1:a0:d4:fa:81:5c:06:
1d:d4:24:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:18:04 2025 by rpki-client