Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: Rn7NT5ck7VZuCwwIZh7UH83X+kp3+nyoet2PpE63in4=
Subject key identifier: 7C:6A:B7:AB:D2:3A:DB:57:0C:0B:1E:E9:0D:D3:EB:EA:94:9A:F1:33
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 0197507CB1DB3470E57FE0912BD785F1C4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 068D
Signing time: Sun 08 Jun 2025 17:00:38 +0000
Manifest this update: Sun 08 Jun 2025 17:00:38 +0000
Manifest next update: Mon 09 Jun 2025 17:00:38 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: J5Flbn9jK+paXxv2E4PDbMZRU4AveMLsxOM5Z/oDEY0=)
2: Z-dfosDrlzVSKVFTGJ7LYewGU6w.roa (hash: lSxGudn5Fs3j65oqD2ZSmu7gAATGql89N/KwokwP/NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:b1:db:34:70:e5:7f:e0:91:2b:d7:85:f1:c4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Jun 8 17:00:38 2025 GMT
Not After : Jun 9 17:00:38 2025 GMT
Subject: CN=7c6ab7abd23adb570c0b1ee90dd3ebea949af133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:83:7b:ec:d9:1f:fe:84:cc:5c:71:14:dd:d8:
df:33:83:94:b7:91:9e:78:8f:9c:92:c6:12:ff:c4:
3d:b2:4e:cc:e0:c3:56:df:0f:b3:c9:8c:f1:d6:db:
2d:c1:5e:13:21:02:36:3f:ae:5d:2a:d3:6d:69:3e:
f5:7b:ae:68:b4:96:78:56:85:12:69:3f:d5:92:19:
85:24:7d:8a:cb:b4:1c:27:b6:98:91:03:70:75:d1:
d2:e6:e7:e7:bc:48:b5:6e:c2:9a:ea:e2:c7:be:7c:
f9:5e:e9:32:32:c1:37:c4:f3:15:e3:05:da:fa:fc:
06:0a:88:02:47:81:14:72:23:53:19:73:69:9f:42:
b9:c3:95:21:3e:6a:65:f5:0f:45:52:45:d9:d8:53:
d5:2a:a0:d8:1d:b0:63:81:4f:d6:6b:c4:7b:31:a7:
ff:39:41:fc:79:32:1f:8c:63:1a:1e:33:ea:56:74:
7e:43:ac:03:60:dd:6f:0f:2b:db:93:65:04:47:ad:
33:02:6d:5c:13:0d:46:ec:a9:a4:5d:6e:45:f5:04:
ec:a1:a2:d2:fc:25:52:74:ff:97:b2:7c:68:f5:26:
cb:95:a2:6e:6d:54:69:ca:d3:74:4f:b9:d1:9b:72:
32:e6:49:6c:22:bd:27:ae:bd:26:90:a8:a4:99:31:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6A:B7:AB:D2:3A:DB:57:0C:0B:1E:E9:0D:D3:EB:EA:94:9A:F1:33
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ad:fa:3d:2a:fa:be:39:79:4a:c9:19:de:88:03:f7:e0:be:
52:5f:78:07:fa:27:70:79:1b:f4:54:19:9d:a2:70:6f:24:15:
ed:8e:30:ed:13:48:f9:39:21:d7:a2:b5:0f:58:cf:ec:db:4f:
ca:34:ac:97:4a:0c:fd:71:53:f0:ac:66:89:0d:81:b6:a7:6b:
31:38:32:b5:66:6c:ec:29:ae:7e:42:96:e6:bc:32:c0:f8:18:
16:49:4f:27:c8:fb:87:2e:53:17:eb:87:d7:05:29:b8:66:d9:
c1:65:ba:5e:81:c3:3e:e6:ea:57:82:4b:36:67:18:14:ac:25:
c4:2c:c7:63:fc:71:3b:86:f7:72:9c:78:e7:8a:da:1d:69:d2:
8a:76:3c:aa:95:03:7e:49:7c:db:57:b7:dd:9a:ac:09:98:47:
a2:47:6d:64:1b:84:fd:88:32:96:a5:1f:aa:fb:19:cc:aa:dd:
2b:f5:a3:54:8a:00:bd:9c:b6:0f:d1:32:33:08:16:c3:3f:9e:
34:09:1d:f2:2e:93:ef:94:01:13:59:35:71:66:60:17:64:fb:
9c:3d:51:98:53:6c:6e:05:fe:9a:51:b8:06:fb:f1:3e:6a:8d:
73:19:e2:37:c0:26:84:2b:d0:ab:ae:8f:57:c3:9b:0f:c7:b8:
51:05:89:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:24:41 2025 by rpki-client