Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
File: COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json)
Hash identifier: pqkKXInffN88DAHlF/YtXiL2vK4rIXzw8n41yANbkb0=
Subject key identifier: 12:BE:C6:22:2C:23:09:B8:44:BC:60:D7:AB:DD:4F:2A:BA:65:6B:62
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Certificate issuer: /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial: 0197B77C139656D79F5332AFF0690CB14102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
Manifest number: 01D4
Signing time: Sat 28 Jun 2025 17:00:51 +0000
Manifest this update: Sat 28 Jun 2025 17:00:51 +0000
Manifest next update: Sun 29 Jun 2025 17:00:51 +0000
Files and hashes: 1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: vaIclG9Z4Vi9+LZYDACWMBDCV+N0blII2SslaEJI258=)
2: xBEy6xBfQ6xkWNnMM3b-8Ps1FR0.roa (hash: Ym4zKNNqMflGb0dAEycHEmUQAQN+DoJITr/UvN/UU8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:13:96:56:d7:9f:53:32:af:f0:69:0c:b1:41:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Validity
Not Before: Jun 28 17:00:51 2025 GMT
Not After : Jun 29 17:00:51 2025 GMT
Subject: CN=12bec6222c2309b844bc60d7abdd4f2aba656b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c7:03:32:87:8a:6d:7b:df:99:e2:b2:9a:a7:
2b:4e:b9:bb:c7:20:3a:a7:5b:ad:c9:de:7b:7b:ba:
2a:85:c8:f4:5d:28:d7:65:54:ab:84:61:e7:3d:a7:
6d:a0:31:d4:86:84:d7:49:03:ca:9a:c7:f6:d3:53:
0b:8f:f1:19:dd:68:74:01:6d:16:e8:ab:c7:f5:b2:
36:60:b3:3d:4e:87:0a:2c:37:5c:d8:31:4e:7e:f6:
94:d5:31:e1:8e:9a:ff:d8:1a:15:55:ba:54:b0:d4:
2f:2d:7f:9a:96:22:ae:b1:56:6b:14:64:53:e8:39:
da:eb:0d:e0:81:b8:8d:c1:4b:44:5e:e7:3b:6e:84:
97:08:8c:c5:90:d9:c5:1e:4a:ce:25:8a:0a:4d:9e:
20:df:37:7f:4b:ef:fe:7c:71:fa:8d:4c:cb:8a:65:
fd:19:fa:54:3a:ef:e0:1c:87:42:87:90:c7:e1:b9:
5b:ad:26:71:d8:bb:a7:0d:dc:08:18:20:cc:19:2a:
76:ea:3b:d5:19:f5:58:98:5e:e0:e9:dc:a1:87:97:
ac:65:02:5d:62:05:9c:66:df:20:23:3f:69:8d:59:
3e:5a:99:54:7c:28:40:a3:c8:db:2c:3d:ef:85:56:
e7:45:86:ca:4f:e2:ac:90:f5:df:76:f3:dd:96:4a:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BE:C6:22:2C:23:09:B8:44:BC:60:D7:AB:DD:4F:2A:BA:65:6B:62
X509v3 Authority Key Identifier:
keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:04:72:6d:2d:58:d7:4f:6e:f4:7a:f4:f1:9c:f4:76:ea:63:
7f:03:5d:17:3a:8b:36:ce:bf:c7:ae:1c:4d:f6:5f:2f:7e:68:
07:1f:f0:c5:bf:fb:c5:a7:12:39:c8:d5:74:25:4c:0c:c3:f4:
ff:05:0c:5d:a2:5b:65:5b:80:42:20:e4:e8:de:e8:e7:1c:36:
90:ef:6d:f5:d8:20:67:9c:8f:f6:9e:39:fd:79:73:fe:7c:d4:
83:b8:a0:a5:9d:d5:08:93:31:57:93:24:3b:fb:74:f8:c4:c8:
09:aa:eb:6e:9c:67:bb:29:9b:38:c5:c5:ad:d0:d6:54:55:e3:
61:76:fb:5a:4f:21:6e:b7:12:bb:0b:23:23:b5:8c:2b:8f:e2:
f9:44:60:36:52:fc:17:2d:61:fb:ff:c9:78:af:9e:2b:ae:e4:
7f:37:8c:ca:ea:39:42:46:0c:68:af:7f:2c:f6:b0:ee:15:10:
ba:b4:a7:1c:69:a5:82:32:99:65:a6:18:69:1f:33:e9:c5:f5:
f9:3b:8b:3f:26:c8:1d:2b:2e:25:fe:2d:ee:25:5e:1c:9b:4f:
4d:57:da:73:25:ef:e6:26:1a:75:52:3b:ea:7e:98:3e:f8:52:
02:00:15:59:6d:f8:9c:e1:c2:89:a9:bd:9d:f0:52:df:2a:1b:
90:7d:06:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:17 2025 by rpki-client