Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: xu1faSC6U1fmg4jZCzphKaFuJO63+o8N1sTPMOn7mew=
Subject key identifier: AB:C3:AB:1A:D9:BA:26:E1:03:E7:0A:D3:93:7A:4C:C4:DB:75:BF:C1
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 0197B6A154D049F312DFD3884ED17ED1AA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 10D5
Signing time: Sat 28 Jun 2025 13:01:55 +0000
Manifest this update: Sat 28 Jun 2025 13:01:55 +0000
Manifest next update: Sun 29 Jun 2025 13:01:55 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: F705wR8IlmiOjs4qJ4hOkGIAL5dQmrl2pyzU16K10FI=)
2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:54:d0:49:f3:12:df:d3:88:4e:d1:7e:d1:aa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Jun 28 13:01:55 2025 GMT
Not After : Jun 29 13:01:55 2025 GMT
Subject: CN=abc3ab1ad9ba26e103e70ad3937a4cc4db75bfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:ec:dc:4b:25:bf:c6:87:30:93:67:c7:7a:
cf:8a:a7:44:3d:54:16:bb:4c:1b:e2:53:5f:df:ef:
79:a5:fd:ec:4e:f1:ab:e8:c9:61:14:68:c9:54:d2:
2c:8b:61:ce:e3:7f:9c:e9:17:5e:ad:a1:b6:03:c2:
f2:0b:67:a3:f3:0a:0b:f6:95:74:03:5e:4b:44:ea:
8d:ee:29:48:ab:ac:50:75:1d:e5:4c:31:77:4c:66:
46:c4:e5:4d:1d:d2:3d:11:7a:69:4a:4c:f0:3a:79:
16:3c:4e:67:00:9e:4e:1a:18:ea:17:67:52:17:b6:
1c:7e:2e:73:ae:6b:55:fc:f2:3d:b8:4e:1a:28:48:
27:62:f0:6a:f4:17:ac:35:3d:b9:61:dc:47:8f:d5:
28:6f:a9:ca:f8:96:c4:bf:09:05:e8:94:50:46:a1:
da:42:41:b9:5a:00:2e:54:08:1e:19:ad:2c:c0:e0:
62:ab:f9:d4:05:17:e0:ab:8d:33:bd:31:25:ce:ff:
4e:e6:9f:7c:ad:65:55:7e:b2:d1:ed:14:f4:9f:c9:
bc:7e:2b:26:c3:be:86:e5:9a:00:86:94:37:62:3b:
4c:db:61:51:56:df:d8:b1:9f:ff:19:80:ed:26:ba:
71:4b:fe:16:8f:b2:c8:8d:ee:af:77:5b:9e:a7:06:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C3:AB:1A:D9:BA:26:E1:03:E7:0A:D3:93:7A:4C:C4:DB:75:BF:C1
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3a:1f:e2:ea:ee:b2:82:50:5c:4e:82:83:09:b0:59:55:2a:
37:e8:d0:b4:43:f8:ec:c8:f8:d5:12:c6:d1:27:89:1b:99:31:
90:5d:f3:36:fe:58:d4:e4:72:da:33:d2:2b:61:f3:f8:8e:55:
d0:74:70:21:4c:a8:a3:01:2d:79:da:7c:19:4f:23:65:cf:8f:
68:b7:1f:6f:d7:c6:b9:e7:72:af:f6:4f:c8:a8:c1:02:f5:53:
4b:4d:c4:93:8a:d4:20:79:27:8b:60:38:2f:d2:b9:5f:dd:1b:
3d:ea:e6:a1:c1:0c:00:d2:39:d4:70:27:3f:b0:6e:51:c7:1d:
49:11:94:0c:0e:34:2f:38:2f:8c:51:c1:df:d2:8c:94:78:ac:
42:63:93:a9:c8:a7:69:18:e3:43:41:95:53:4a:fe:76:ab:80:
fb:d2:aa:b2:62:78:58:4e:73:c9:1f:1f:97:2c:f0:48:ac:72:
18:16:4a:39:9a:8a:d9:2a:66:90:71:ad:28:a3:68:fa:09:51:
dc:db:ff:14:4e:1f:6b:66:17:97:f8:69:3e:56:05:c0:22:6a:
7d:4b:7b:81:a6:21:85:59:ed:15:62:10:ab:25:c9:7b:5b:25:
7f:52:9d:f0:eb:02:9e:cc:d9:bf:f7:eb:84:6b:a1:a5:8e:9a:
a0:cd:37:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:44 2025 by rpki-client