Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: 0I+ROHAY2z1uD9daN5tY5Ckh+joY4fgnPmZOKJcA+3s=
Subject key identifier: 0D:AC:36:60:8B:98:7F:33:72:45:2A:E4:22:99:AA:BD:15:F8:B5:AE
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 01976BBD11BD40852CAD561FD68598A29A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 00:00:42 +0000
Manifest this update: Sat 14 Jun 2025 00:00:42 +0000
Manifest next update: Sun 15 Jun 2025 00:00:42 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: dwLCGNLRL+G9eudo2W1LKiqwUrpSe7z88tMGbouz6xU=)
2: PUu9JBqT0q_kMegzLpokDy8FZpg.roa (hash: GZSimUwCl58YJS+NoDvHAGPvWk0bb2fLNY1EJxjHl3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:11:bd:40:85:2c:ad:56:1f:d6:85:98:a2:9a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Jun 14 00:00:42 2025 GMT
Not After : Jun 15 00:00:42 2025 GMT
Subject: CN=0dac36608b987f3372452ae42299aabd15f8b5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:c8:4b:dd:9b:fd:46:9c:27:f9:01:5a:43:
82:1f:b2:c7:0a:58:61:b3:31:d8:32:ec:c5:34:9c:
5e:6e:48:31:33:13:4d:90:8b:8a:ce:45:30:91:02:
2a:52:30:63:a3:bb:cc:c1:ef:3b:3c:6c:39:d8:f5:
44:e1:32:70:f3:e7:99:4a:22:c0:8d:82:1a:87:83:
c0:b7:19:80:73:a6:2b:02:4b:c4:d5:ac:a6:1b:29:
a6:22:89:24:4e:3f:cd:d6:1a:b3:84:47:d0:83:52:
bc:2b:f8:fe:30:52:47:d7:fd:19:9a:a0:8d:cd:2c:
1d:6f:fb:ea:6c:56:68:8a:8c:c8:ad:b4:bd:ab:9f:
89:37:c1:4e:76:e5:c5:0a:19:4b:fb:14:a0:db:f2:
07:f5:66:95:e1:a5:42:f6:3f:2f:f4:e7:16:41:a0:
09:2a:74:8f:64:19:4b:53:72:c4:41:37:ee:ad:0c:
61:41:6d:75:23:28:91:7b:43:e2:b0:3c:c6:a7:29:
c0:d5:e2:93:58:fa:7c:f9:22:56:db:cd:0b:9a:0b:
f5:6e:61:c9:d4:31:f9:4d:42:79:01:60:0f:f0:8f:
db:bb:68:1b:c0:bf:b5:76:24:16:31:3f:46:c8:99:
e9:06:05:3e:52:f2:e2:7a:13:d7:5b:e8:77:c8:ac:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:36:60:8B:98:7F:33:72:45:2A:E4:22:99:AA:BD:15:F8:B5:AE
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b6:d9:4e:6d:a6:34:55:75:f6:16:4d:af:18:24:b2:97:79:
f7:ae:c9:b5:cf:80:0b:c9:0f:10:93:29:da:8b:d6:1f:39:b0:
ec:bf:df:5b:a8:85:2f:c8:d4:48:52:4a:66:f5:16:9f:bd:6f:
69:c2:69:07:60:57:15:9c:38:4f:c3:1f:f1:98:9b:e3:0c:88:
cb:fa:4e:be:ba:20:03:66:e6:98:df:50:80:10:3a:53:1e:be:
93:53:0c:af:a9:a1:21:13:32:13:be:81:69:c1:bf:68:57:b4:
70:3c:06:d9:62:de:c4:c9:00:b4:e1:c2:4f:85:05:15:27:80:
a4:1f:94:6b:df:88:8f:f9:fb:f8:d5:a2:28:8e:f9:a4:5e:6b:
5e:0a:ad:ca:57:3f:14:a3:41:65:86:3a:79:c7:0f:7c:2c:62:
25:37:af:f2:42:5a:f2:9d:3c:79:ea:ba:bc:cb:59:46:d5:d1:
3f:32:f1:08:65:2d:9f:61:07:a4:3d:a3:51:df:be:d1:9f:d2:
dd:c5:84:4d:4f:17:d1:71:6e:40:7c:0d:73:fe:44:2c:a5:05:
c5:dc:57:f6:ea:fa:fb:1d:49:d4:41:52:9f:d7:14:23:74:7f:
2c:8a:45:47:3a:60:b8:83:dd:d0:30:93:3c:34:11:09:4d:7b:
cb:26:56:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:44 2025 by rpki-client