Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
File: Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json)
Hash identifier: podZBRBE8O8w4rSTg9FuKYo+O3M8OXYl2y7xov9GByg=
Subject key identifier: 60:52:9F:5E:B5:8F:5C:64:E0:E0:4D:9B:05:C8:8E:EA:5D:18:AD:F8
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial: 0196C15CEA1CC21314FCC236A4BCED27EEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
Manifest number: 023B
Signing time: Sun 11 May 2025 22:00:13 +0000
Manifest this update: Sun 11 May 2025 22:00:13 +0000
Manifest next update: Mon 12 May 2025 22:00:13 +0000
Files and hashes: 1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: 3xNNigcrPjaM6qGACQlfGM0ubSVyFI2GpKPEwYUURcI=)
2: Fzr1By55ZDL1AtjsLrCzN_F0gos.roa (hash: Qt6aTT1EiGUDBJx7fPAgx7FJH8IrDb++OhiY8fc3GRU=)
3: TVVwgauLv5P4p_N1MbSMDHrhgkU.roa (hash: nBwDhWyQjjSPhhqjp9xgHoZZMM8YBA0mhGeSxmJeXVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5c:ea:1c:c2:13:14:fc:c2:36:a4:bc:ed:27:ee:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Validity
Not Before: May 11 22:00:13 2025 GMT
Not After : May 12 22:00:13 2025 GMT
Subject: CN=60529f5eb58f5c64e0e04d9b05c88eea5d18adf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:63:99:66:ed:a5:42:72:bc:00:ad:17:cf:96:
a7:9f:df:30:1d:bd:29:1b:23:d0:4c:9a:33:de:45:
45:9e:0f:a0:18:88:18:f1:e8:e8:85:ef:16:14:64:
f2:d5:6e:ea:bb:41:8a:ca:05:bc:e1:24:4b:06:c6:
7a:e2:5c:0e:a9:cd:24:0b:0c:5f:03:2e:4f:1f:b4:
71:2e:85:9d:7c:5d:f5:5b:21:12:27:5c:84:71:ed:
36:74:a3:ec:d3:95:53:0b:28:7f:b5:57:55:f4:ce:
a4:0b:ed:9d:be:36:dd:3d:f6:00:67:0e:53:06:7b:
c2:1c:c7:3b:e4:16:47:b8:c9:18:b0:c6:19:1f:c2:
b1:da:21:c6:e9:2f:b5:3b:76:21:c5:4f:01:36:65:
b8:55:96:53:10:da:b6:85:ef:6b:02:a3:45:81:48:
87:70:6d:51:33:21:3c:99:ab:62:79:90:ef:9c:e3:
84:ae:b5:34:ea:c8:ff:18:33:a7:09:a1:5d:40:ed:
cc:a7:4e:fa:2c:da:c1:86:75:70:8d:55:c8:62:57:
9c:fa:ba:fb:a8:25:ae:a5:90:9d:7c:e2:c3:73:38:
ba:86:73:e0:ad:35:bf:b3:fd:14:1c:69:c7:81:05:
dd:33:7b:92:94:0a:da:af:7f:78:17:c6:83:39:54:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:52:9F:5E:B5:8F:5C:64:E0:E0:4D:9B:05:C8:8E:EA:5D:18:AD:F8
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1c:d1:02:7c:3e:ea:fa:a2:8c:de:ed:5d:54:67:71:55:e2:
a8:13:45:6e:f0:e0:4b:ae:c8:25:e0:b4:2c:70:c1:d1:3b:4b:
38:1a:98:b3:98:f3:10:de:f3:f5:c3:a7:e1:1c:5a:b4:55:9b:
3c:5e:b4:9b:b5:9f:33:53:e7:83:50:d3:aa:27:14:3b:d5:99:
09:7e:b2:00:7c:18:0c:c6:28:17:4e:91:d9:e0:01:25:f3:8d:
08:24:3d:28:c3:25:d6:67:6d:9c:64:3d:bf:a0:64:70:6f:18:
9a:1c:8f:d5:c8:9f:e2:32:c8:9f:6e:de:5a:2a:62:7e:7a:fa:
56:75:6c:42:6b:b6:99:ec:fc:53:55:f8:99:bb:09:dc:87:1a:
d0:20:72:0e:6e:9d:d8:df:57:3e:b9:c2:5d:04:25:95:61:3b:
5a:27:d0:90:80:c1:28:a4:a6:c9:9a:26:dd:36:2d:8e:57:e8:
19:34:a2:44:38:68:b8:e9:65:f8:38:c0:a8:65:af:46:ce:42:
85:40:de:70:9c:e2:2d:9f:67:36:bb:af:20:89:ea:5f:28:f1:
6d:9a:e1:d0:3e:ae:a7:b6:aa:81:99:53:bc:ae:c8:a8:1a:ed:
01:e7:bd:5a:b0:f6:36:ac:42:ba:5c:bb:5e:bf:35:5e:96:58:
5b:85:60:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:26:43 2025 by rpki-client