Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
File: coCW6KzXbpqhfz62eAQG49pWPtI.mft (raw, json)
Hash identifier: PvP75Yq9D9J82UUhzVOtlal7p8q9kVzK/B9Rem0htxw=
Subject key identifier: EE:41:83:75:14:77:AD:56:E3:0E:D8:C8:3A:49:22:DD:A4:59:EF:42
Authority key identifier: 72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
Certificate issuer: /CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
Certificate serial: 0196DB543F9EA28B394BB59954C58BC71748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
Manifest number: 13FD
Signing time: Fri 16 May 2025 23:00:53 +0000
Manifest this update: Fri 16 May 2025 23:00:53 +0000
Manifest next update: Sat 17 May 2025 23:00:53 +0000
Files and hashes: 1: coCW6KzXbpqhfz62eAQG49pWPtI.crl (hash: rq29dl7IWpXzyYpEPRhmG//wtbKTPuqAL11xMV7nofw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:54:3f:9e:a2:8b:39:4b:b5:99:54:c5:8b:c7:17:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
Validity
Not Before: May 16 23:00:53 2025 GMT
Not After : May 17 23:00:53 2025 GMT
Subject: CN=ee4183751477ad56e30ed8c83a4922dda459ef42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d2:24:88:5b:95:5b:fe:fa:91:31:e1:97:b7:
c0:23:6d:88:59:cd:6b:1e:b5:b1:81:4a:05:87:10:
18:67:d6:a8:a4:19:2d:a3:b1:60:65:29:d3:7c:f8:
1d:5e:0c:a8:31:ef:1d:31:e2:e6:27:18:d8:f8:ea:
a7:2f:6c:bd:87:4c:89:c4:da:7b:1e:a1:e1:73:ed:
96:1f:10:36:e3:c8:13:46:36:6b:22:7a:35:2b:40:
da:b9:f0:bd:9c:35:6f:6d:0d:5a:f6:38:66:01:3a:
9c:ea:45:8b:d4:ed:4e:4f:ad:06:94:f5:29:43:f4:
9a:e6:10:d7:19:74:44:68:ef:93:bc:38:12:5f:48:
41:97:a7:16:61:51:e9:36:9a:e0:9c:b5:15:c4:5a:
7f:ed:8c:e7:b0:a0:7a:c6:28:84:32:04:1b:c9:01:
33:72:76:04:14:23:c4:05:3f:8a:1a:02:75:0b:f1:
d4:0a:2f:53:f3:1d:83:46:e0:f9:5d:d4:a9:83:bc:
40:0d:73:fa:b1:c5:e1:ed:b6:40:e4:7e:0b:43:f4:
b5:7f:f1:8f:2e:23:d0:1d:e2:6b:aa:ec:a3:13:f5:
c5:d5:f8:0f:1b:8b:2f:41:81:c9:f0:75:2d:1c:27:
7c:63:78:3f:01:37:7f:27:92:1b:b1:2b:cb:08:33:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:41:83:75:14:77:AD:56:E3:0E:D8:C8:3A:49:22:DD:A4:59:EF:42
X509v3 Authority Key Identifier:
keyid:72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:53:64:36:d1:da:15:ef:9b:67:1e:27:77:f1:d5:34:0b:9b:
a3:a2:6a:0f:99:2e:a4:be:25:cc:29:56:6f:a4:11:ca:32:66:
cc:cf:d8:0f:93:3c:4d:50:36:95:c2:a2:7e:d2:44:65:b8:90:
2d:43:ce:50:35:05:aa:d2:1f:a5:e9:1e:c7:c3:e2:62:6c:7b:
3f:fa:33:42:44:ab:65:d9:78:a9:e2:b7:bf:66:b0:0d:96:ed:
56:dc:0b:bd:cb:25:8e:ac:e0:ba:47:73:5f:89:a5:1f:65:f9:
9a:14:50:01:a8:2b:3e:71:eb:04:78:d0:1e:0f:71:1a:57:af:
d1:be:91:c5:cc:64:91:da:8f:2b:71:3d:db:67:52:f1:26:da:
c4:08:9d:1d:ae:f1:08:07:ea:d1:d9:f0:27:f2:17:69:d9:c0:
07:7e:bc:0f:7d:d2:4c:15:b6:fa:7a:c0:53:26:cc:11:5a:2b:
49:50:9b:28:1c:10:1d:65:e3:a4:37:2f:8c:8d:41:7f:49:fe:
82:c7:e3:49:5d:b7:8f:fa:00:ab:d7:5e:31:a1:ed:22:12:2d:
46:e8:c8:a0:4f:08:0b:93:d1:ec:bb:e0:a4:0e:1a:16:a7:8e:
51:4f:b3:bb:2c:ba:78:2b:d6:0f:9a:d8:6e:77:d1:7c:8e:04:
a8:27:7f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:30:13 2025 by rpki-client