Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: YRomyB261XfWDPalv3Emwik2cno9/ONctHS7ONq+a4g=
Subject key identifier: 37:66:FC:F7:E5:47:E6:2F:49:6C:D8:53:3C:F8:1F:E4:5B:9D:78:50
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 01968623DCD4DA9A82C4136617005A835E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 1242
Signing time: Wed 30 Apr 2025 10:00:19 +0000
Manifest this update: Wed 30 Apr 2025 10:00:19 +0000
Manifest next update: Thu 01 May 2025 10:00:19 +0000
Files and hashes: 1: BepPUqJmcox6vrPVeFLnic_YFR0.roa (hash: C5IbNUmrfVvGpmpP7H7NCibsdAPbj5KKxAELI101al0=)
2: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: DZKMLmk9DaeKxxK0hggvRJdMHt5wkehRBY4rgNT43IQ=)
3: yKqwm37t4yVmxr4NwzTqfwD-IDY.roa (hash: MxaSTIqKL5tTZsGpRXKzjl3dEdK1M2+iZYuBArbrbWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:23:dc:d4:da:9a:82:c4:13:66:17:00:5a:83:5e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Apr 30 10:00:19 2025 GMT
Not After : May 1 10:00:19 2025 GMT
Subject: CN=3766fcf7e547e62f496cd8533cf81fe45b9d7850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:c6:4d:f0:83:8d:b9:b3:01:de:76:d6:6a:
0a:53:3b:24:ac:22:5b:31:d3:28:18:20:5d:b5:e2:
58:cb:8f:8e:ad:a2:04:8d:6f:b0:78:f6:e4:56:dc:
2d:8f:60:a9:6a:6c:aa:41:7a:bd:7f:ff:af:a5:a3:
30:df:70:8a:50:28:f7:4d:49:9c:ad:62:ec:8d:02:
6c:86:8b:9e:c1:c5:ab:ba:fb:1a:94:11:92:ef:38:
c2:9c:73:bf:e6:86:ae:6a:cd:59:2d:36:e3:d6:7d:
58:91:1c:73:07:66:0d:55:f7:91:68:50:56:a8:06:
8a:21:83:3b:33:bc:8b:13:af:29:1a:3c:03:41:a3:
7f:41:1d:27:71:97:0f:2e:dd:02:ab:17:0a:77:11:
ca:6c:76:d3:d4:5a:a8:8d:14:e9:6a:79:13:8c:5d:
53:9d:c3:9a:35:8e:31:8f:05:a7:44:09:e3:ac:22:
a9:97:be:44:94:ce:68:bd:67:ed:ac:96:0b:f9:f2:
ba:bc:db:39:1b:fc:c9:b7:b1:d6:6b:55:97:2e:eb:
cb:f7:a0:fc:1d:13:c2:f1:5a:11:e5:58:31:7e:9f:
05:1c:b2:a7:98:90:6e:5c:33:68:16:ef:57:58:b6:
79:1e:64:7f:75:6e:06:43:6d:69:96:89:49:6d:85:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:66:FC:F7:E5:47:E6:2F:49:6C:D8:53:3C:F8:1F:E4:5B:9D:78:50
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5f:5d:74:99:11:c8:5d:43:84:56:db:e2:00:6e:6e:79:ca:
66:a7:aa:ab:1d:25:2c:e3:78:3f:96:7b:36:e5:cb:0d:07:a2:
3c:0b:df:de:4b:47:6d:73:7c:fb:b3:75:bc:51:cc:7d:c9:9e:
7a:a5:98:37:77:55:c7:21:fc:18:cc:e1:e5:f7:97:02:e6:21:
da:40:cb:d6:66:60:93:b3:5c:b5:37:df:44:04:e9:25:ac:6b:
18:c6:7c:d7:6a:18:63:89:a1:76:df:b9:39:f7:c3:b8:19:94:
f7:c6:1c:dd:fd:14:29:1c:e1:e1:19:68:41:d0:cc:67:96:65:
94:c5:99:00:76:76:43:26:06:ef:ed:90:27:cb:ec:e6:ef:8a:
0c:4e:b5:e0:04:ef:ab:fb:90:9b:fd:2a:dd:0a:d4:31:c0:94:
1d:3b:7c:95:6c:71:25:69:da:40:32:6d:af:04:05:19:56:ae:
cb:20:d4:12:6d:f7:de:71:f6:d7:c6:7b:99:13:f8:fe:4e:7f:
96:d1:64:a9:40:64:72:97:d4:03:8b:86:be:2a:88:a1:a5:d7:
63:5f:39:8a:66:87:75:ae:6b:12:8d:ef:7c:ee:84:39:68:04:
17:49:43:af:4b:21:bf:07:cb:8f:f3:f0:bd:0b:68:d3:26:fd:
b6:9a:26:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:31:06 2025 by rpki-client