Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
File: coB1pPvaq0LFuhkzxwL7anhBAio.mft (raw, json)
Hash identifier: JFSMZMuwn2+DtwN5sVnPVbEDQcEHcup2qDDwQULfGyo=
Subject key identifier: D8:74:DF:B0:AF:1D:89:23:19:20:2F:E0:52:DD:F5:A2:32:4A:61:D3
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Certificate issuer: /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial: 0197C42540E0D592E722E9943ADC36F516AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
Manifest number: 09CA
Signing time: Tue 01 Jul 2025 04:01:05 +0000
Manifest this update: Tue 01 Jul 2025 04:01:05 +0000
Manifest next update: Wed 02 Jul 2025 04:01:05 +0000
Files and hashes: 1: KtyjoHVh-jWQ52KLDWiih3wa8dM.roa (hash: nNl4uWGbOXfH9a0zpwdYcXAwLZ/cX6WnZQrYg+krLsg=)
2: MlaxuC-MvqxdJWc5pKLiaE76NMk.roa (hash: tH+D4l6q8LLHR1Hf7c2XhR7vBl5T4KLwCh8ScplJjz8=)
3: coB1pPvaq0LFuhkzxwL7anhBAio.crl (hash: 0uKsg39kajWCpQeGaFhIBHNfwxihHMVanXFYamndRYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:25:40:e0:d5:92:e7:22:e9:94:3a:dc:36:f5:16:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Validity
Not Before: Jul 1 04:01:05 2025 GMT
Not After : Jul 2 04:01:05 2025 GMT
Subject: CN=d874dfb0af1d892319202fe052ddf5a2324a61d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:ee:c4:ea:34:3b:7e:0e:ae:85:00:f5:53:
3d:5e:07:47:f0:30:21:65:e1:dc:9c:07:0e:15:54:
8c:b2:9d:fb:06:77:51:cd:df:5e:f3:15:47:13:d7:
0b:db:cd:0a:3b:98:41:e7:36:1b:77:1d:8d:6d:1c:
e1:34:de:e5:58:1a:7f:5f:36:54:69:bc:76:58:a2:
12:94:1b:16:cb:12:b8:a7:f1:3e:c2:01:b3:1f:1d:
f9:6b:59:66:52:b8:f3:75:07:f2:1e:ff:80:49:fc:
73:45:f5:69:8b:94:7c:89:cd:c1:76:7b:90:3b:78:
b1:87:12:2c:d4:1f:d3:12:74:ed:ba:2f:a0:d5:73:
41:36:08:ee:5c:b9:b6:e9:a3:b4:f7:e9:95:40:33:
5d:0d:36:c7:5e:38:c9:86:95:57:27:48:62:04:8d:
9d:c8:bb:c2:10:d3:ea:62:ec:26:cc:c9:f2:44:b7:
47:a4:9f:c7:90:df:11:cb:db:d2:00:ec:49:0e:42:
3a:a2:dd:24:12:85:c7:ae:1a:17:c4:56:b5:af:9e:
6c:77:7c:47:73:35:ab:f0:27:9e:cc:c3:cb:ba:48:
f4:b9:1f:1e:39:96:2c:bd:7a:1b:60:e8:0a:4b:e2:
07:83:d9:85:0c:9d:f3:80:57:7a:f0:e8:1a:49:8d:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:74:DF:B0:AF:1D:89:23:19:20:2F:E0:52:DD:F5:A2:32:4A:61:D3
X509v3 Authority Key Identifier:
keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d1:52:83:2f:c5:12:ea:55:3f:d3:1d:dc:1c:b7:57:34:dd:
09:5b:12:98:45:ad:23:f0:48:6b:a6:47:70:f4:ca:e7:5c:18:
48:fb:b5:65:06:88:70:e5:87:7b:bc:2f:a7:a9:b1:7c:c9:74:
dd:2c:26:2a:17:ed:03:ef:6e:6a:d8:c9:9f:d4:73:1e:34:91:
ae:5e:65:dc:be:4a:e4:5a:d0:d3:ec:e1:8e:b5:54:7d:25:48:
15:23:94:5c:2e:80:07:03:d7:31:db:ba:b2:f0:d6:6b:14:c8:
d5:8b:b1:ec:89:45:71:b4:2e:ec:64:c9:6e:fe:22:b1:66:3e:
41:cd:ba:f9:a4:f2:9b:aa:f9:39:d0:9f:a6:d4:70:4c:88:bf:
37:2d:72:71:8e:8e:87:f1:fc:ad:8e:f5:c9:52:a1:1d:24:0c:
45:32:80:52:bf:8d:ae:5c:a6:f8:82:ae:a8:64:43:fb:b0:ff:
9e:30:81:dc:de:07:f2:cb:81:98:5b:e8:fa:b2:24:92:8a:bd:
25:60:fb:25:38:ba:67:70:31:ed:52:78:b8:3d:65:f3:88:e0:
0b:13:d8:62:dd:1c:27:b4:dc:f2:80:c0:4b:5d:5d:09:9d:09:
0b:51:8e:ae:d3:89:10:28:74:e0:2f:36:67:fa:75:43:48:40:
20:8e:70:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:37:12 2025 by rpki-client