Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
File: coB1pPvaq0LFuhkzxwL7anhBAio.mft (raw, json)
Hash identifier: uTqSAQEhzlAk0WzSPinpWGhhRZN/ZSGRAWEp1M3w1Vs=
Subject key identifier: 55:D4:51:DB:CF:E5:E9:95:E5:4F:BB:34:D2:D2:7C:31:D0:00:5B:C6
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Certificate issuer: /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial: 0196BD80E0E5D6C769DFE4939214E6EF8B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
Manifest number: 0942
Signing time: Sun 11 May 2025 04:01:01 +0000
Manifest this update: Sun 11 May 2025 04:01:01 +0000
Manifest next update: Mon 12 May 2025 04:01:01 +0000
Files and hashes: 1: KtyjoHVh-jWQ52KLDWiih3wa8dM.roa (hash: nNl4uWGbOXfH9a0zpwdYcXAwLZ/cX6WnZQrYg+krLsg=)
2: MlaxuC-MvqxdJWc5pKLiaE76NMk.roa (hash: tH+D4l6q8LLHR1Hf7c2XhR7vBl5T4KLwCh8ScplJjz8=)
3: coB1pPvaq0LFuhkzxwL7anhBAio.crl (hash: /pyn9qfce+lT+6Qd/meh2zlFkQeIGfJvf0jUeEFimJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:e0:e5:d6:c7:69:df:e4:93:92:14:e6:ef:8b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Validity
Not Before: May 11 04:01:01 2025 GMT
Not After : May 12 04:01:01 2025 GMT
Subject: CN=55d451dbcfe5e995e54fbb34d2d27c31d0005bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:49:61:bb:2f:ed:87:4d:a1:c8:cd:70:84:58:
c9:38:f3:4c:72:c4:3d:45:d5:5b:ac:bc:b1:ea:83:
e0:89:42:b4:40:bb:d3:7b:b5:49:e0:53:eb:40:26:
60:94:c0:d9:e9:91:1a:00:93:ec:47:fd:fb:dd:ef:
48:55:65:ad:44:b5:33:2a:dd:d1:99:d1:df:90:54:
57:11:23:45:52:33:fb:93:fb:35:c9:f1:ab:94:51:
0e:87:3b:47:9f:27:94:40:56:8b:32:2b:a2:09:ca:
4a:a6:27:5f:f7:57:98:1c:b6:4d:ea:0d:1e:16:f1:
dc:31:08:bd:02:bf:05:77:73:c0:dc:b2:2c:1e:eb:
82:df:1f:53:69:d2:9c:d1:9f:2b:81:1f:5b:1e:50:
f0:16:c6:f4:f0:ac:32:ef:66:59:e6:0d:ba:8d:49:
c3:ee:76:63:03:39:bd:0b:03:ed:ee:f1:84:87:23:
ca:f8:20:ca:cb:ce:e6:a1:66:9b:b8:51:51:73:18:
b9:9d:ee:89:3f:2b:29:2b:09:5e:89:56:c2:22:35:
e7:bc:7f:46:0b:5c:24:ec:e3:12:04:d0:c8:7d:5d:
cf:a6:cd:e9:85:89:e6:ad:ec:0a:eb:a6:d5:91:bd:
a7:cf:80:5a:72:7d:3e:14:35:90:ea:3b:f2:11:b6:
e7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D4:51:DB:CF:E5:E9:95:E5:4F:BB:34:D2:D2:7C:31:D0:00:5B:C6
X509v3 Authority Key Identifier:
keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:70:ae:79:1b:2b:c6:09:d9:3e:6f:8e:b5:79:a0:14:f0:35:
7c:82:d9:e2:59:84:b2:09:7f:6c:3a:c8:ff:52:06:ac:b4:82:
25:a7:b1:19:52:af:48:4a:a1:4e:35:b1:40:db:9f:93:63:a8:
16:fe:6e:33:12:7b:99:10:e0:e5:1a:b0:49:64:76:34:68:80:
e9:3a:f5:c9:ab:69:e8:d3:c9:65:9b:8b:92:64:5a:a5:b7:f8:
c2:90:cc:da:5e:34:61:ad:8a:17:1c:35:31:6e:1d:dd:e1:6e:
74:70:b8:7c:f5:ac:e0:63:5f:f7:95:00:ca:65:1f:4a:7d:d0:
87:73:b4:a5:07:f0:16:88:6f:48:ef:f7:93:e1:f4:2e:8c:88:
77:f1:1b:cf:43:88:0a:86:0a:af:dd:79:f7:fa:a5:dd:ab:6d:
14:f4:fe:61:f9:f9:7d:30:63:cd:5f:46:be:6d:16:86:85:88:
ff:89:ab:64:7a:03:70:3f:5c:de:6e:58:e3:e9:57:a0:5e:d0:
6a:68:d9:82:1c:54:91:93:2d:6e:72:0d:d9:2f:76:39:12:a4:
c6:53:dd:75:d9:0d:a3:f8:20:12:f8:62:47:78:2b:a8:8e:10:
29:bd:cf:9a:e3:ee:61:07:73:58:e7:f8:06:dd:d1:6a:7b:61:
5f:55:21:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:36:31 2025 by rpki-client