Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier: XupvGinkuAw/FMuGEoKth6UoYyuNUbZTcEahmNF44T4=
Subject key identifier: D1:D3:2F:AA:EB:F2:7C:35:57:0A:C5:4F:CE:73:E9:F2:C0:71:8D:5C
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial: 0196D0D09D3DB70A2DDFE6A0CC8406374428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number: 14D0
Signing time: Wed 14 May 2025 22:00:54 +0000
Manifest this update: Wed 14 May 2025 22:00:54 +0000
Manifest next update: Thu 15 May 2025 22:00:54 +0000
Files and hashes: 1: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: yoIJAOm2VMqBzh6t12j9+MBKY8L7Dh1bYRtNdH+cy/8=)
2: wZl766gEgIlD1PBWErT8JXtbQ6E.roa (hash: GJKy6CeHDJyN+o1oRpRHchOhI0KPIFrY454WKeTW5CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:d0:9d:3d:b7:0a:2d:df:e6:a0:cc:84:06:37:44:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Validity
Not Before: May 14 22:00:54 2025 GMT
Not After : May 15 22:00:54 2025 GMT
Subject: CN=d1d32faaebf27c35570ac54fce73e9f2c0718d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:40:fe:cc:48:65:85:38:9d:b2:c8:13:80:
dc:08:11:1a:95:31:c8:52:3c:3f:26:bf:27:0d:16:
1d:81:08:a8:81:3b:28:15:36:91:ea:15:56:fa:df:
42:d0:97:27:a9:d6:d4:0b:df:50:ad:fc:22:e2:05:
50:77:b8:7a:52:bc:48:20:27:39:9c:19:31:98:d8:
62:78:ec:d8:b4:ce:55:83:01:a8:f5:f5:e8:67:aa:
02:2e:2d:58:ef:73:6f:ee:f1:c8:9f:13:fa:dd:b7:
61:b2:bc:5d:99:a9:72:7b:92:ba:b0:16:ad:1a:3c:
4e:9f:f7:f6:d0:5b:71:a0:b2:2c:64:a9:59:87:08:
e4:75:24:b4:0f:a6:3c:d5:b5:db:e6:00:f7:90:8a:
03:59:52:5d:1c:04:62:97:84:eb:ab:1a:39:54:29:
b8:56:e5:8f:3f:1a:fb:73:14:31:37:29:15:c5:43:
92:35:71:6e:46:76:dd:48:43:41:54:b4:6f:02:45:
76:2b:f5:41:e0:16:0c:77:93:70:e3:05:ef:d8:5d:
2a:a9:8d:40:38:2a:61:52:6b:30:a0:fc:1e:c1:c2:
d8:04:f2:1e:30:5b:32:4d:50:ea:53:0b:cb:e4:72:
29:35:98:f3:c2:4b:f2:d6:d3:70:09:12:e9:6d:d0:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D3:2F:AA:EB:F2:7C:35:57:0A:C5:4F:CE:73:E9:F2:C0:71:8D:5C
X509v3 Authority Key Identifier:
keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:90:bb:c5:54:1e:e9:1f:1a:e1:39:37:9f:77:23:3f:0a:57:
ab:d4:3f:e2:2a:be:0d:78:e0:ec:8b:de:8e:9c:a5:19:57:ed:
4d:a2:c5:bc:63:e8:9d:97:71:64:d3:f5:ec:4a:35:77:5b:50:
98:5d:5c:9c:dc:78:34:4f:6d:c7:3f:42:6c:40:fc:25:17:ec:
78:77:aa:46:00:75:73:a7:25:94:60:36:a3:c4:66:7a:01:05:
29:79:9c:02:e8:3d:8c:6c:77:b5:fc:ef:5c:67:f5:bd:97:43:
59:0f:62:0a:14:e4:31:03:4f:b0:60:13:49:74:da:90:30:44:
85:06:ef:33:03:2d:b4:2e:0e:9f:2b:26:84:3e:38:61:38:83:
95:3a:c7:6d:a5:e4:df:9a:13:62:e5:50:e0:3b:56:10:55:17:
26:06:50:30:b0:a0:c2:9b:8a:a0:16:f3:47:fd:d1:7e:cd:b3:
70:92:9f:98:a5:51:a3:ca:7a:35:33:48:62:04:09:62:06:90:
67:42:62:67:0a:fc:87:7b:50:67:14:d4:dc:c4:ca:41:42:b4:
41:73:0e:4f:6c:6d:9b:4e:63:d9:60:f1:0b:97:7b:a6:33:4e:
d3:bf:9d:b7:f2:f6:5b:11:e7:e2:a3:e5:83:e0:87:b0:c4:b6:
d5:70:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:21:32 2025 by rpki-client