Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: Jsecf2Z0qQHDWc4eXrkom6OJ1GeNWsQWRS4NKw+iZ80=
Subject key identifier: FC:F4:3F:7B:B2:63:77:BB:C5:92:CF:83:C5:41:C1:7B:B3:6C:62:F3
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 0197B74530F1F6246A113E69DF1E4E4AA160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 12E0
Signing time: Sat 28 Jun 2025 16:00:54 +0000
Manifest this update: Sat 28 Jun 2025 16:00:54 +0000
Manifest next update: Sun 29 Jun 2025 16:00:54 +0000
Files and hashes: 1: BepPUqJmcox6vrPVeFLnic_YFR0.roa (hash: C5IbNUmrfVvGpmpP7H7NCibsdAPbj5KKxAELI101al0=)
2: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: RDSwTCxja6LNBJXKTR//XTSvEMeWRmyft7pS6i9j0Ik=)
3: yKqwm37t4yVmxr4NwzTqfwD-IDY.roa (hash: MxaSTIqKL5tTZsGpRXKzjl3dEdK1M2+iZYuBArbrbWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:30:f1:f6:24:6a:11:3e:69:df:1e:4e:4a:a1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Jun 28 16:00:54 2025 GMT
Not After : Jun 29 16:00:54 2025 GMT
Subject: CN=fcf43f7bb26377bbc592cf83c541c17bb36c62f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:ea:0a:ca:5a:81:cf:37:f6:51:b8:ee:74:
dd:72:c7:80:fa:df:50:b4:c5:47:96:ff:6a:20:6e:
e2:4e:cd:83:d3:58:95:c3:c4:1d:7b:b0:bc:be:91:
67:e2:94:69:23:b3:6a:75:8d:97:1e:38:1d:5b:8a:
d0:39:7c:21:e6:7a:da:82:12:a7:a4:d1:1b:c4:06:
7f:b4:6a:9d:fc:b0:7d:af:a3:e4:42:ba:ac:b6:8d:
b7:b8:32:0f:26:6b:13:eb:26:70:91:6b:03:b3:a7:
7d:d3:f5:ab:f7:15:de:f8:eb:54:cc:1f:09:c5:b4:
00:e0:1e:b7:18:9f:89:51:4b:9e:f6:59:58:aa:e7:
d1:94:ce:13:96:60:24:08:d8:1a:a0:c2:84:fe:0f:
20:79:4e:33:49:04:11:f0:b6:c1:2a:67:29:11:d0:
08:a2:a8:64:f5:81:59:eb:8b:be:99:2e:f6:8d:6a:
0b:b3:39:a3:a4:05:e4:37:74:eb:83:b4:f7:ee:a1:
25:55:32:07:60:5e:6b:49:01:90:ed:98:0a:44:64:
64:8f:03:10:d4:66:73:90:57:a4:f2:1b:62:0b:ed:
07:86:1b:c6:71:46:5f:bd:03:76:96:2f:1c:d6:02:
6c:4c:b3:4f:81:d2:59:57:79:da:2d:ca:7f:28:b5:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F4:3F:7B:B2:63:77:BB:C5:92:CF:83:C5:41:C1:7B:B3:6C:62:F3
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1d:1f:1c:71:fa:d6:b1:7b:74:40:4a:f2:55:a4:1a:c7:c4:
6e:3c:c7:39:bf:93:72:64:f1:bd:50:77:3f:1f:df:82:3e:75:
6e:6e:a5:cc:32:a3:63:a2:58:41:f4:d9:8b:c7:31:47:ae:9a:
69:e0:dd:58:bb:5e:07:9d:83:37:60:69:05:c4:4d:ca:f5:45:
15:49:87:63:29:ba:71:39:fe:9a:80:bd:84:d0:ff:19:f5:9a:
53:fe:83:48:12:9e:6b:64:b1:9f:68:9e:62:22:ce:5a:0c:84:
d2:17:48:f8:6d:7e:47:52:61:e7:f9:34:c5:b4:b8:b8:6f:59:
91:15:14:fa:a5:82:24:f9:d6:c4:dc:e6:6c:9e:31:76:03:ca:
c7:65:86:ac:73:25:4c:22:e4:56:65:70:b7:1c:b3:93:5c:52:
4e:e4:dc:94:71:02:64:7c:46:cb:c7:f5:33:13:ad:cf:ed:4d:
61:58:55:b0:6e:e2:f8:00:e0:e5:69:a9:ad:d2:4a:f0:2e:58:
de:5b:f6:b5:a0:23:42:c2:e5:03:f5:f9:fc:dc:08:c0:45:4a:
df:64:cf:7c:27:9b:c8:83:80:21:09:f1:12:8a:6b:c7:70:35:
46:3a:b0:43:43:7c:3c:a7:87:78:d6:61:04:2a:2d:6c:69:fa:
aa:1e:99:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:41 2025 by rpki-client