Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: AINrW/30aU7b61jDf9QGpGwSUhk82Bxtw4gKNAMqPFk=
Subject key identifier: 0E:FA:58:D1:9E:4F:60:8A:0C:1B:4F:B2:4E:46:4C:25:4E:9C:EA:68
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 0196A2401949052FCAFFDCA2ECF0E6F90035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 1046
Signing time: Mon 05 May 2025 21:00:31 +0000
Manifest this update: Mon 05 May 2025 21:00:31 +0000
Manifest next update: Tue 06 May 2025 21:00:31 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: LDebcbMGRehtTeQm+lhnVUDkFeaShD37yGPzmqnFzSk=)
2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:19:49:05:2f:ca:ff:dc:a2:ec:f0:e6:f9:00:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: May 5 21:00:31 2025 GMT
Not After : May 6 21:00:31 2025 GMT
Subject: CN=0efa58d19e4f608a0c1b4fb24e464c254e9cea68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:48:63:7f:37:0a:70:21:99:90:a0:bc:c0:
bd:95:8d:26:12:0e:56:83:35:77:ed:3e:aa:06:48:
60:56:4f:3c:2b:6c:bb:bf:4d:96:ff:43:b5:01:01:
6c:93:5b:53:3b:7c:5e:ff:80:8e:61:77:8e:e7:b3:
20:73:8c:3e:49:1d:2e:b6:54:f4:f1:a5:ab:a5:e4:
31:60:a4:46:cf:a7:69:1a:62:fa:37:a0:d7:be:d2:
e1:bf:8f:eb:01:da:72:3e:11:9e:42:46:01:cb:fd:
41:20:44:36:e9:ac:1f:5e:0f:c9:02:8d:9f:87:75:
5d:8f:69:f5:e6:03:0e:86:54:9b:43:c2:b1:6e:e5:
8b:0e:e8:fa:2f:a2:4d:bd:bb:4f:40:e7:40:90:de:
e7:95:d1:c5:c2:bf:2b:e6:ab:71:e5:6b:b3:af:cb:
71:98:cf:1e:2d:89:79:dd:c2:d2:ec:e8:b5:f6:1d:
76:22:a6:20:48:9d:86:b7:97:d9:ff:89:fe:d5:e6:
02:1e:c1:8a:4c:6c:95:e5:b1:53:42:dd:18:2a:39:
75:ba:a3:5b:5e:ad:a3:9f:33:88:c5:0a:5a:ec:59:
37:7b:f7:6f:e9:46:06:7d:14:74:93:28:c9:e3:db:
48:ca:ec:80:46:d9:66:90:c3:ca:b7:fb:73:d4:32:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FA:58:D1:9E:4F:60:8A:0C:1B:4F:B2:4E:46:4C:25:4E:9C:EA:68
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d5:7f:af:84:83:dc:5c:77:23:78:74:3a:8a:5c:de:ae:73:
a5:b3:62:69:57:b6:b0:9c:a7:1c:e9:7d:1b:6b:14:92:33:99:
b1:74:ba:4f:d7:eb:cb:29:0e:b7:fe:f8:8a:96:03:83:68:49:
3f:50:a9:6f:de:7c:e5:ea:3a:25:cb:d3:4e:c9:64:0f:9b:e9:
0c:c9:fa:24:50:cb:b1:ae:5a:0b:c2:16:4f:67:30:0a:66:0c:
e6:a0:d2:81:54:13:92:b5:dd:b8:bb:74:10:2b:61:53:45:91:
b9:18:da:2a:58:ec:bf:73:7e:8a:af:84:75:76:a1:79:ac:9f:
57:85:08:30:87:bd:49:cd:79:b3:58:25:e8:d2:2b:e6:ab:f9:
d5:49:d6:37:c5:ba:2b:36:eb:37:35:c5:5e:21:9d:ce:72:b5:
a0:f7:d7:0a:fd:4f:53:49:9c:ef:f3:99:da:35:75:1f:36:9a:
80:74:9b:ff:cb:8b:eb:a4:5c:7a:0b:9c:65:c1:ca:d0:99:72:
a5:b5:7e:13:9f:4a:23:81:f4:71:61:73:e1:c6:46:bc:21:e7:
41:05:42:aa:e5:59:2c:c1:19:ad:d8:fe:aa:f5:47:b8:9f:85:
33:3e:ea:88:55:2e:64:93:c6:37:02:2a:0f:76:b6:75:6f:11:
89:88:3c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:43:16 2025 by rpki-client