Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: erxW10sdXJ1qRxmc8HQSocYUwAm5245/16xPdbmsG90=
Subject key identifier: 96:E0:77:28:FE:D3:D4:63:19:37:60:92:6F:87:15:2E:C3:7F:B8:24
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 01967FEAE273621510729E1EB3E3F2F9ABEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0621
Signing time: Tue 29 Apr 2025 05:00:21 +0000
Manifest this update: Tue 29 Apr 2025 05:00:21 +0000
Manifest next update: Wed 30 Apr 2025 05:00:21 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: pYp+4++7quvPq5e2oO5HMh+n+VV5ohYHALZ7u+65ZaA=)
2: Z-dfosDrlzVSKVFTGJ7LYewGU6w.roa (hash: lSxGudn5Fs3j65oqD2ZSmu7gAATGql89N/KwokwP/NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:e2:73:62:15:10:72:9e:1e:b3:e3:f2:f9:ab:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Apr 29 05:00:21 2025 GMT
Not After : Apr 30 05:00:21 2025 GMT
Subject: CN=96e07728fed3d463193760926f87152ec37fb824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:dc:49:6b:c1:53:7c:ba:1c:04:64:5b:fe:
d2:00:55:91:85:db:e3:b8:3b:bc:ff:9f:0e:c8:68:
1c:f2:7b:67:e8:b5:a4:fe:7c:ca:d4:9d:4b:1b:2a:
34:44:92:05:fb:ad:40:77:14:2f:a7:fa:8e:f8:d1:
8c:87:40:8e:94:3a:63:89:0b:69:c1:48:e7:82:ec:
b0:a7:44:9d:27:52:46:ed:ee:b7:04:21:7b:56:7a:
d8:60:2f:66:1e:32:69:db:e1:62:97:29:f0:11:d0:
04:4c:07:6b:2d:19:b4:47:c5:86:fa:3f:f5:de:5a:
c4:b9:e3:8b:88:bf:06:bd:32:5c:1a:a1:f9:18:ca:
b7:09:40:7b:c1:27:c5:38:e3:b9:45:ca:76:84:09:
16:d2:12:98:63:ea:86:12:27:28:71:41:2d:7d:bd:
13:2b:66:c5:45:b6:46:71:16:ba:4c:03:26:75:3c:
c3:d8:a2:e0:2e:eb:b3:d5:8e:78:f2:95:b4:1a:d9:
d7:30:4a:10:7e:f3:a6:ee:92:8a:f0:1b:ad:08:3e:
a3:74:45:bf:bc:85:64:07:90:72:c1:0d:95:71:f6:
21:c9:9e:e8:3e:a1:66:0a:42:c3:33:89:29:4a:48:
d8:42:90:b2:be:64:30:de:ba:b0:9d:b3:f0:b6:5f:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E0:77:28:FE:D3:D4:63:19:37:60:92:6F:87:15:2E:C3:7F:B8:24
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:fb:9c:46:cf:c7:a1:55:28:a8:eb:eb:ca:cd:e7:c4:5a:54:
6f:38:95:99:cb:dd:b2:8e:84:c7:8c:d3:e4:c4:2d:e0:16:0b:
7b:ab:73:32:a9:89:79:08:ea:b3:12:bd:99:0d:69:bd:e4:22:
74:ec:7c:93:b9:f7:00:c7:d3:b0:0c:09:e4:45:2c:a2:f8:5c:
b7:90:01:ef:f8:8f:d2:3a:f4:27:07:3a:ed:45:c2:d1:2e:18:
13:a3:42:3f:62:54:84:40:97:4c:65:95:a7:65:5b:17:1d:43:
4c:1f:48:23:d5:32:0e:f1:29:88:cd:d2:50:d7:47:66:de:cf:
c3:1e:1c:e5:df:03:84:dc:22:b9:66:4b:28:f9:4d:12:bb:ca:
2a:a1:32:f3:09:be:dc:1f:25:15:d2:7b:06:fe:37:dd:1f:1d:
34:40:9e:77:7a:9d:d5:48:3f:fa:ab:0a:9c:62:8d:8c:7e:97:
d2:e1:88:df:f3:d6:aa:37:c8:61:a8:9f:14:f2:a4:5b:d6:47:
e5:cf:cc:57:0a:97:92:27:18:17:c0:c4:9c:02:9e:0c:93:95:
8b:3e:19:37:2b:a3:97:58:47:9c:39:c5:7a:36:ff:c6:60:4a:
dd:bd:c9:05:b4:a6:13:54:31:67:6d:3c:13:de:59:24:ed:e7:
dd:5d:0e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:28:48 2025 by rpki-client