Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: uH1YYrY6Vx/uYaTJtd2Dpmtsi2UUe+zWGxijLNw+K2Q=
Subject key identifier: BB:AF:BE:1C:AE:03:27:2D:F3:F8:B3:7B:19:D9:D4:6F:0C:13:FF:DC
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 01959073A7F3277E9C39CAF597461A735C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 05A5
Signing time: Thu 13 Mar 2025 17:00:53 +0000
Manifest this update: Thu 13 Mar 2025 17:00:53 +0000
Manifest next update: Fri 14 Mar 2025 17:00:53 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: Xtkj1UiwSmbeupQX56bgTrS7p7WgAiBoMu4v/5xaes8=)
2: Z-dfosDrlzVSKVFTGJ7LYewGU6w.roa (hash: lSxGudn5Fs3j65oqD2ZSmu7gAATGql89N/KwokwP/NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:73:a7:f3:27:7e:9c:39:ca:f5:97:46:1a:73:5c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Mar 13 17:00:53 2025 GMT
Not After : Mar 14 17:00:53 2025 GMT
Subject: CN=bbafbe1cae03272df3f8b37b19d9d46f0c13ffdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3b:67:d6:cd:f6:0d:74:8b:d3:4b:6c:19:f5:
52:79:46:a3:5d:51:b6:db:d1:ee:2f:04:75:e3:cf:
34:85:2b:98:f8:38:0a:5c:f0:f0:c1:52:12:2f:aa:
91:0f:c4:60:a7:64:2c:86:48:e0:3e:98:93:99:03:
3d:e1:46:95:df:2c:b2:6d:05:2b:7b:c6:a8:6f:6e:
07:3b:ee:1b:6c:1a:05:3a:ec:21:7a:0a:58:a7:bb:
2b:76:c7:7c:ca:87:8f:cb:a6:40:b4:36:a1:8c:2e:
04:5c:3b:d0:af:fa:20:d7:be:2d:e0:e5:6f:34:e1:
6b:97:a5:9e:b1:e2:35:93:95:29:b2:1f:1c:3f:6c:
7e:5f:1a:26:f8:a5:68:0b:6f:33:f3:1f:9d:47:fe:
f6:84:f2:dc:97:4d:dc:20:7c:3a:ec:72:1b:4a:14:
75:10:a5:77:75:fa:ab:10:b5:52:25:97:f4:01:c3:
29:74:4e:66:8f:dd:ef:3a:93:4c:96:c9:5f:5c:7a:
31:34:24:a5:fe:5c:e0:b9:8c:16:52:1e:b4:b6:e3:
89:4b:25:6c:84:b5:fc:97:cf:32:ac:55:fa:25:fa:
80:16:14:08:0d:5c:21:f4:e0:ab:7d:d1:e9:73:2a:
6f:d5:3b:e6:03:b7:ea:49:bc:07:0b:43:66:a5:d9:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AF:BE:1C:AE:03:27:2D:F3:F8:B3:7B:19:D9:D4:6F:0C:13:FF:DC
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:87:f8:d2:ac:5f:2d:46:ab:c8:2a:e8:8d:9f:45:ff:18:69:
0e:65:59:60:d2:8b:50:24:2c:0d:bf:db:7d:6d:33:cf:ea:94:
0e:2f:26:ac:aa:5a:f1:ee:32:48:64:b8:49:9f:65:30:15:ab:
5b:1f:f7:74:ee:ce:69:79:39:ed:3d:d2:d2:87:93:f5:df:6f:
05:aa:bb:70:89:d8:aa:bd:3f:64:59:0d:9d:4c:69:af:e1:75:
39:87:b7:ee:17:ee:3b:ae:30:2d:1f:1a:bd:75:9d:2b:14:57:
31:81:12:5a:83:84:e8:8a:90:b0:04:97:43:42:b5:db:c3:87:
58:db:dd:08:8f:f6:82:73:d0:65:1e:f6:ef:11:6c:bd:7a:e6:
5c:4e:f2:85:d5:a4:db:55:e9:aa:c4:95:35:65:b5:c3:c4:c1:
d7:21:25:8c:49:9c:be:d1:cb:98:70:8c:4a:6d:df:71:e1:fa:
82:b7:c6:57:1f:18:17:f7:3d:2f:a8:40:fa:fb:a6:af:8b:28:
d3:e0:2e:be:a1:67:d0:76:87:f9:98:90:48:b4:4c:b3:9e:16:
e9:15:f1:70:f1:56:1a:1d:3e:61:2f:ed:d8:ef:21:48:af:c8:
9d:41:e4:19:46:16:59:53:07:29:54:c8:cd:b1:f8:f5:59:59:
c5:1e:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:48 2025 by rpki-client