Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
File: COfXs7xMB5HAz_4_FVWrdz4-0W4.mft (raw, json)
Hash identifier: mCh5kY31ZkSZiubQ6n4kXNiDPF7NPWc6OPWM28XXjBU=
Subject key identifier: E5:67:C9:F7:B8:92:CA:F3:2B:63:9A:B6:30:6A:2F:C2:71:9C:83:22
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial: 01976EF4FCABB337303BB07BE640A219C489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
Manifest number: 07BD
Signing time: Sat 14 Jun 2025 15:00:38 +0000
Manifest this update: Sat 14 Jun 2025 15:00:38 +0000
Manifest next update: Sun 15 Jun 2025 15:00:38 +0000
Files and hashes: 1: COfXs7xMB5HAz_4_FVWrdz4-0W4.crl (hash: wC1BR7359fb7eaMGKe59J/deFWEAv7sdZoZ3xcKFk7Y=)
2: khFY4LCzs_C_2FKxTxDOR-38KnY.roa (hash: XM0c5kYBwYH9YLOtd32YXHex7zgvtOBEgciRDVMSUbU=)
3: qvPm57YEBA1Gnl47iz-cQbRx7UY.roa (hash: tBKdpc8P9meJArJGr//IYbXNDI8iochN8kxy5UtDRE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:fc:ab:b3:37:30:3b:b0:7b:e6:40:a2:19:c4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Validity
Not Before: Jun 14 15:00:38 2025 GMT
Not After : Jun 15 15:00:38 2025 GMT
Subject: CN=e567c9f7b892caf32b639ab6306a2fc2719c8322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:70:1e:fc:e0:0d:98:91:84:67:78:8b:d8:7e:
e7:3f:c1:92:6d:f5:fa:76:ee:2a:fa:c0:0b:8d:66:
65:07:60:f3:2f:82:8f:ac:de:e0:07:e1:27:19:25:
c2:f2:3c:80:27:99:fe:18:e7:b9:6b:90:aa:e2:4d:
02:9a:7c:e6:3f:29:84:4b:28:2e:a2:ff:44:46:6a:
6c:55:f5:35:57:8f:a2:bd:65:a1:da:d5:18:07:31:
8d:f9:45:82:0b:0c:41:ea:c6:ce:b1:57:99:e1:50:
49:c5:01:5b:d5:7e:6b:05:84:69:a3:e0:59:a5:bf:
d0:1b:47:9a:42:40:7a:31:9d:89:18:9e:d3:e6:52:
11:e0:4b:e7:23:1a:fe:66:20:2e:e3:b9:1e:af:1f:
d8:b9:63:b0:8a:40:27:fb:26:02:23:2f:85:c6:c6:
27:38:c5:d7:dd:ea:9d:df:5d:41:74:67:9b:08:0f:
fe:2d:35:2c:7a:27:42:b9:da:fa:c1:e4:24:77:be:
fc:4a:c0:61:f0:2d:38:ff:15:37:91:10:74:b0:de:
25:dc:85:38:df:a0:7f:ff:11:5f:e2:2a:10:22:14:
a0:c5:bf:f8:89:73:5a:91:fa:70:23:42:d1:de:d0:
71:32:df:c4:fb:a4:14:ba:ba:52:e6:a2:34:8d:66:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:C9:F7:B8:92:CA:F3:2B:63:9A:B6:30:6A:2F:C2:71:9C:83:22
X509v3 Authority Key Identifier:
keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9f:d4:1b:4a:d5:14:92:31:09:26:42:50:74:4e:42:f9:14:
76:0b:47:17:45:42:4b:4a:cd:15:6f:30:5b:d8:0b:41:f6:15:
88:ce:1e:db:f6:39:49:42:27:c0:dd:8e:d1:9f:91:b3:ef:36:
d0:d1:03:ae:7c:56:2e:0a:27:8b:d1:9f:f3:c0:67:ad:fe:ef:
f5:05:34:7c:04:55:9f:80:56:db:7c:71:ef:ce:60:59:19:2e:
d5:6a:61:b0:95:dc:cc:44:2c:e5:68:ea:2b:a5:83:57:e6:13:
d4:5e:43:03:37:7e:00:0c:03:53:1b:66:5d:db:00:21:1d:52:
40:2c:6a:0d:66:c0:08:cc:47:c9:1c:42:b7:77:d7:33:72:86:
74:85:89:81:79:bb:8b:7f:de:8c:8c:c3:7e:bc:89:09:fb:c9:
ff:7b:39:07:26:d5:1f:d1:3f:87:50:71:30:c7:24:1c:ee:f8:
b6:12:fc:52:cd:8e:eb:7d:ae:1a:48:b9:75:5a:9d:2c:81:13:
ff:84:0c:2e:e5:9c:65:bd:55:91:e7:df:4c:d0:36:58:15:5f:
8d:f9:5d:bc:62:a4:a7:6d:24:51:a5:eb:1c:50:7d:a3:55:6c:
68:46:2c:ec:e6:e1:b3:2d:6e:17:98:d5:f5:44:3a:b2:80:69:
09:9a:fd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:21:01 2025 by rpki-client