Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
File: Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json)
Hash identifier: 9yKEiG8MnOtC7ltW3Tw9kOYFZyGKEhVkNgtXQ+8R6E8=
Subject key identifier: D8:A9:ED:6B:65:8E:10:FF:84:F6:0F:09:B4:49:0E:4B:9C:AA:01:5D
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial: 0197B6A096F9AD0E1F09B89B05D2A2C3AF44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
Manifest number: 02BA
Signing time: Sat 28 Jun 2025 13:01:07 +0000
Manifest this update: Sat 28 Jun 2025 13:01:07 +0000
Manifest next update: Sun 29 Jun 2025 13:01:07 +0000
Files and hashes: 1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: +ldijA64yXGAyjHR2uvdBE/GdXvnAvqbxs0/v7t8MH0=)
2: Fzr1By55ZDL1AtjsLrCzN_F0gos.roa (hash: Qt6aTT1EiGUDBJx7fPAgx7FJH8IrDb++OhiY8fc3GRU=)
3: TVVwgauLv5P4p_N1MbSMDHrhgkU.roa (hash: nBwDhWyQjjSPhhqjp9xgHoZZMM8YBA0mhGeSxmJeXVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:96:f9:ad:0e:1f:09:b8:9b:05:d2:a2:c3:af:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Validity
Not Before: Jun 28 13:01:07 2025 GMT
Not After : Jun 29 13:01:07 2025 GMT
Subject: CN=d8a9ed6b658e10ff84f60f09b4490e4b9caa015d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9f:7c:91:a1:de:da:ec:1c:35:4a:35:45:ce:
6e:6e:e0:a4:b1:a1:8e:c1:f9:11:9b:b6:13:fa:30:
a4:15:4e:05:1f:05:0d:7b:1f:57:d5:2e:06:5a:97:
4c:a5:c4:7e:56:ae:98:81:96:87:08:e0:b7:69:28:
75:2f:ff:e2:8a:af:08:06:e9:3a:17:7d:70:3e:44:
9d:4c:c4:da:5a:e1:a9:17:98:e4:f3:a7:b8:42:47:
32:12:11:d7:23:83:0c:ae:3e:78:f6:6d:1b:ea:3f:
4e:fe:97:be:77:38:58:f1:6e:fd:dc:16:13:f9:c9:
69:ba:28:69:76:a6:5f:1a:e1:71:5b:4e:1d:e0:46:
9c:9a:47:b8:0f:89:72:fa:5e:8f:72:30:c4:ce:8f:
2b:78:0e:b3:a0:0d:6a:f2:7c:23:d4:ee:a6:88:82:
52:f6:b2:09:85:00:52:84:61:75:67:e1:3b:f7:32:
84:ef:18:77:be:a8:17:4b:2e:53:ec:9b:f8:c0:a0:
fb:a1:02:02:ce:4b:46:05:c7:a5:68:36:3e:7f:be:
3d:15:a3:14:3d:54:a1:a2:ab:87:65:fa:3b:39:02:
b4:b0:3c:b1:83:c5:84:24:66:c3:b2:1e:92:bc:38:
93:63:7b:7c:bf:d5:42:af:d2:1d:46:1e:e2:1b:c4:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A9:ED:6B:65:8E:10:FF:84:F6:0F:09:B4:49:0E:4B:9C:AA:01:5D
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a6:cd:cb:c5:bc:3e:73:09:07:a8:40:cc:0f:61:d0:65:d8:
a4:05:80:d3:a9:d4:cc:cf:b2:02:a7:43:e9:09:fc:a9:bd:f5:
59:06:81:37:6b:a5:03:65:06:33:02:4a:7d:f8:3b:d1:1b:3f:
6c:38:bc:b6:e7:45:e9:68:f7:7a:8e:14:05:69:05:5d:be:f3:
16:59:b8:3d:d3:b9:3d:4c:33:a9:03:38:36:5f:e7:15:ff:76:
f2:3b:5c:b0:73:1f:95:4d:20:eb:12:b9:31:46:0e:e7:87:26:
d1:32:c6:93:06:99:e9:55:4b:32:30:9a:aa:85:ad:2e:1c:b4:
c4:4b:a1:10:df:91:6d:ae:ee:4d:5d:1d:04:bb:66:1a:9f:54:
f1:45:70:63:98:53:74:02:f6:d0:8f:aa:49:f2:e4:d3:2d:52:
96:a9:85:7d:00:d6:55:15:ec:44:a0:4a:3b:51:6c:f9:db:83:
c4:66:25:3f:14:5c:ec:4d:b4:22:07:aa:2e:18:4d:33:02:eb:
87:f7:2d:b8:4f:f8:e8:b6:43:c4:a5:89:39:77:7a:1f:79:96:
3b:42:bd:d4:4a:a2:d2:5c:12:72:3e:90:36:9c:6c:65:14:f2:
a9:dc:e7:df:e4:4e:53:56:41:b6:24:1b:91:f0:ed:00:5e:a4:
d1:6d:c2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:34 2025 by rpki-client