Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: wBdjB1gTVb/4q981eRqObQf8evhWqmW1pDHActpxP7Y=
Subject key identifier: D5:44:17:AB:28:3F:0A:B6:A8:AE:33:AA:15:11:D4:3B:38:2D:2F:AE
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 0197778A88ED7D8ECD11F335987EB5FE5343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 12BF
Signing time: Mon 16 Jun 2025 07:00:57 +0000
Manifest this update: Mon 16 Jun 2025 07:00:57 +0000
Manifest next update: Tue 17 Jun 2025 07:00:57 +0000
Files and hashes: 1: BepPUqJmcox6vrPVeFLnic_YFR0.roa (hash: C5IbNUmrfVvGpmpP7H7NCibsdAPbj5KKxAELI101al0=)
2: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: 6+z1O6h9/KKa5118CpziMi9lRk+b1ZFnXJrj/owy7ew=)
3: yKqwm37t4yVmxr4NwzTqfwD-IDY.roa (hash: MxaSTIqKL5tTZsGpRXKzjl3dEdK1M2+iZYuBArbrbWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:88:ed:7d:8e:cd:11:f3:35:98:7e:b5:fe:53:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Jun 16 07:00:57 2025 GMT
Not After : Jun 17 07:00:57 2025 GMT
Subject: CN=d54417ab283f0ab6a8ae33aa1511d43b382d2fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e3:5d:1c:d7:22:f4:46:62:16:88:3c:23:ff:
d0:67:55:23:e6:09:fc:2d:b9:d8:c8:79:52:06:c1:
24:52:0c:77:8c:95:6c:fd:6e:85:8f:9e:3b:af:c1:
3c:a3:8c:3c:4d:85:a0:1d:7c:25:c9:45:99:a6:e3:
b3:6e:8b:c5:e0:9c:d1:8f:3b:2f:61:33:a4:dd:b5:
37:ef:6c:9a:82:52:d0:0e:80:e6:2b:28:30:47:70:
ca:ed:21:8b:30:f1:ab:1b:94:d4:15:3c:e3:d2:e7:
08:a4:69:40:a9:80:b1:5d:df:c5:25:1c:0f:bf:78:
8e:8e:90:d4:f7:54:8e:3e:b9:54:e5:50:39:e9:41:
4f:d9:80:a6:0b:bc:eb:df:a5:54:07:af:bb:3a:e8:
f5:cf:3d:4f:99:5f:b3:2e:bd:51:9a:3d:0b:fe:db:
cc:a8:41:ae:35:27:06:c2:39:ac:39:5c:e0:b7:cc:
aa:06:71:96:9a:e7:37:08:9d:ba:8e:59:28:46:05:
7f:76:51:f6:f4:fd:9d:97:e5:72:cd:ac:a1:a8:e8:
70:96:7f:2f:7c:6d:ad:39:ef:e5:22:32:b7:2f:dc:
5d:a1:67:de:4f:b4:e6:07:b5:15:46:ad:c9:7a:73:
52:bf:38:c6:3c:71:9b:4d:e4:ab:75:14:fa:b5:42:
85:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:44:17:AB:28:3F:0A:B6:A8:AE:33:AA:15:11:D4:3B:38:2D:2F:AE
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5a:98:ab:a8:d2:bf:b9:30:8a:99:7d:da:7c:ef:71:8e:15:
e4:ad:f5:ff:59:e9:62:76:c3:c5:ff:2b:9f:ff:97:5e:b4:3c:
32:24:ed:90:da:09:2e:93:bb:dc:c0:59:dc:b5:5d:9b:d6:94:
4c:74:b7:ae:18:90:b7:86:af:00:b5:bd:6a:85:c1:d7:48:81:
69:70:55:f0:bf:ce:d9:de:2e:31:db:5e:6a:b3:b5:6d:55:27:
d1:32:15:61:f7:0c:08:a3:f5:94:3a:fe:07:a9:7a:50:9c:35:
de:bc:a5:24:fb:dc:80:05:d6:ba:a1:8a:9d:bb:67:08:0d:94:
d4:09:06:28:60:0a:0f:45:a0:70:f9:bb:b1:38:c9:a0:42:10:
7d:12:67:6d:43:fa:1d:b3:cf:f8:cb:94:83:29:14:b7:96:f6:
b9:e0:6c:fa:99:47:c9:fc:38:0b:d1:76:cd:f3:7a:74:3c:01:
92:d2:3b:12:d3:b8:e5:fe:18:40:00:e0:4a:4f:f9:81:c9:7e:
1a:c8:5e:39:80:69:64:ac:e0:5c:ff:98:61:5c:75:ec:71:2a:
27:94:0d:d0:00:19:5a:da:84:84:89:79:eb:86:e3:9f:f6:cc:
0c:95:d3:5a:fc:66:aa:e8:38:52:66:8e:69:ea:2f:d1:a6:ed:
6d:56:b6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:37:10 2025 by rpki-client