Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: JY14k6eAxUDPTo/k+b4TH7PzCuaNvwDUvDPDAPgfABM=
Subject key identifier: 56:C3:34:F8:F2:CD:7A:66:D3:35:52:7E:11:5C:FC:37:64:5F:47:66
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 01976997E73AA1ABB087E98FF1CAF557F7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 069A
Signing time: Fri 13 Jun 2025 14:00:52 +0000
Manifest this update: Fri 13 Jun 2025 14:00:52 +0000
Manifest next update: Sat 14 Jun 2025 14:00:52 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: ogOF+WajW2u4dosmkaHUcQqsDtP6XCKJR5isrKfShpw=)
2: Z-dfosDrlzVSKVFTGJ7LYewGU6w.roa (hash: lSxGudn5Fs3j65oqD2ZSmu7gAATGql89N/KwokwP/NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:e7:3a:a1:ab:b0:87:e9:8f:f1:ca:f5:57:f7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Jun 13 14:00:52 2025 GMT
Not After : Jun 14 14:00:52 2025 GMT
Subject: CN=56c334f8f2cd7a66d335527e115cfc37645f4766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:46:52:cf:0a:52:8d:52:7a:c3:44:e3:8b:
1f:93:f3:c7:0b:5b:16:62:d4:26:8a:9f:88:b5:80:
3e:03:fd:fa:ae:cb:cd:08:36:8c:0e:f8:3a:f3:a8:
f4:2c:ca:87:b0:ce:2d:2e:40:b2:66:64:2e:1d:ec:
03:79:37:dc:63:50:c2:67:01:01:01:2c:76:18:0b:
08:e9:b7:19:7d:da:b8:40:9a:e3:01:7c:10:d1:6e:
38:ab:a6:00:84:e6:a8:eb:5a:ed:e3:fc:8e:30:d6:
ec:f0:fe:64:75:ba:9b:c5:be:00:2f:3d:76:dc:54:
db:b9:54:49:99:25:ea:7c:49:70:69:51:24:50:7e:
35:74:04:81:0d:7c:bd:8a:c0:f1:ac:8c:9a:77:92:
f1:60:eb:fe:f5:0f:3f:4f:19:3c:fa:0c:ee:03:4f:
70:09:85:d6:36:84:16:d4:9b:26:e0:f8:a0:e8:be:
5f:ab:37:f2:1c:79:15:d7:d0:cb:65:9e:27:eb:0e:
3e:62:e8:07:74:c7:ae:c6:dc:47:93:16:0e:11:48:
54:f3:a5:2f:a7:07:1c:69:3f:b4:5d:36:6d:95:68:
73:1a:d6:1e:46:7d:7e:ec:1f:a7:64:af:6e:b7:b8:
6d:63:66:61:e8:1f:0c:98:46:e4:2e:04:29:b4:56:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C3:34:F8:F2:CD:7A:66:D3:35:52:7E:11:5C:FC:37:64:5F:47:66
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:59:41:c2:57:66:9b:1d:16:c0:ad:9c:2c:a7:e7:ae:99:11:
5d:4c:3a:7f:6e:cb:1f:3b:05:66:0e:bf:c6:25:38:99:1f:af:
e9:ab:01:51:50:51:1d:9a:c7:f5:91:cd:d3:80:7f:e4:32:98:
9a:fe:a2:8c:f4:c0:44:1a:39:fc:88:a1:0e:d7:e7:91:72:61:
19:8d:31:5d:12:cb:ac:09:14:76:a7:08:26:5c:e2:6f:11:45:
b7:a7:d7:6f:75:38:e1:42:ef:ee:97:a0:d3:f5:f9:d8:70:9c:
d6:01:2e:d4:4b:82:d6:1b:a0:71:03:29:8d:75:a6:84:d3:1b:
37:49:9a:a0:6e:18:5d:5e:bc:3d:4f:6f:cb:b5:6b:50:04:25:
d1:dd:24:1d:10:2d:5a:41:a0:61:90:12:a4:34:8a:c1:88:c8:
a1:65:3e:a3:74:b8:fa:89:93:cf:c9:43:75:6d:83:69:61:b9:
91:8c:7b:c0:87:99:29:b4:fe:d2:e0:f5:a0:07:83:33:de:81:
b6:76:45:3b:37:17:63:37:a1:83:fa:6a:da:2c:7a:a4:55:77:
3a:a1:6f:c1:2f:2b:87:93:2f:85:e3:1f:6f:ec:e5:ae:9a:a0:
75:5d:b4:23:46:1f:5f:5e:69:3c:0d:7b:ad:73:34:ea:43:c7:
9e:73:73:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:45:12 2025 by rpki-client