Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
File: coB1pPvaq0LFuhkzxwL7anhBAio.mft (raw, json)
Hash identifier: wmpYZ+TPxo40heEDTNGwERRLeSiRdSYGuvLslm14j/4=
Subject key identifier: 43:7F:69:E4:10:95:6A:0C:6D:CC:9F:7A:44:DC:53:60:9A:10:A0:56
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Certificate issuer: /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial: 019698CF4162BD84DED01AB72200D782C04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
Manifest number: 092F
Signing time: Sun 04 May 2025 01:00:41 +0000
Manifest this update: Sun 04 May 2025 01:00:41 +0000
Manifest next update: Mon 05 May 2025 01:00:41 +0000
Files and hashes: 1: KtyjoHVh-jWQ52KLDWiih3wa8dM.roa (hash: nNl4uWGbOXfH9a0zpwdYcXAwLZ/cX6WnZQrYg+krLsg=)
2: MlaxuC-MvqxdJWc5pKLiaE76NMk.roa (hash: tH+D4l6q8LLHR1Hf7c2XhR7vBl5T4KLwCh8ScplJjz8=)
3: coB1pPvaq0LFuhkzxwL7anhBAio.crl (hash: bGvGG9T93M8tvYKo71YQw31HDSAid5Yhrst43KjPUgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:98:cf:41:62:bd:84:de:d0:1a:b7:22:00:d7:82:c0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Validity
Not Before: May 4 01:00:41 2025 GMT
Not After : May 5 01:00:41 2025 GMT
Subject: CN=437f69e410956a0c6dcc9f7a44dc53609a10a056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:e7:03:dc:b9:fb:06:db:de:92:6b:fc:35:
70:f7:b9:e0:fb:a3:c4:25:c9:68:e4:9b:86:2b:51:
71:7d:b4:32:a1:75:9a:8e:04:23:47:12:a6:14:ad:
9e:c5:96:a5:df:c4:2c:ca:96:0f:c4:ef:e4:02:04:
f4:15:bc:b8:a7:ad:94:e9:a2:dd:f7:3d:de:0a:6f:
6a:02:e0:58:ae:24:95:53:70:21:67:6d:5a:49:b0:
96:83:b9:a7:a9:62:17:83:1b:f9:3a:90:6c:bb:95:
bc:94:0e:5a:1e:44:e0:43:48:2e:68:1c:91:93:f3:
3d:19:41:3b:21:53:82:4a:b2:05:e2:b2:67:51:d7:
5e:e5:76:ff:c9:b0:bf:68:c9:b1:5b:3f:01:da:51:
88:02:50:be:a8:0d:3e:3d:f7:c8:b8:08:17:7a:98:
45:4d:9a:1d:22:d2:66:94:61:99:e4:8d:cb:f5:02:
1c:e8:f5:66:18:29:e1:f4:76:04:f1:17:38:91:e8:
55:05:c1:54:d7:9a:73:d7:d0:60:1f:83:98:38:56:
0e:4b:bb:0b:67:dd:e7:e6:0c:e6:1b:7b:a8:a5:18:
99:8d:88:a9:9b:10:d9:d3:d0:4a:da:25:b4:57:cf:
93:7a:25:cc:ed:85:03:a6:01:a6:6e:d0:c7:89:be:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7F:69:E4:10:95:6A:0C:6D:CC:9F:7A:44:DC:53:60:9A:10:A0:56
X509v3 Authority Key Identifier:
keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d6:3a:c9:c4:36:c2:d9:1f:c8:63:d1:d5:7a:69:9e:a0:3c:
95:06:06:a2:ba:a1:63:27:17:ef:95:28:75:af:ad:63:b8:f0:
60:a8:3b:1f:69:43:7c:7d:0d:12:f6:13:eb:1e:48:6d:3e:cd:
4c:e6:a8:93:ff:94:45:6b:9a:14:75:f1:6c:63:4f:52:8e:fa:
4f:4b:8a:f9:5e:9c:9f:cf:16:9e:14:94:3a:bf:18:3c:ad:f5:
44:2a:8f:28:92:c1:59:23:51:36:1b:f3:59:26:67:89:3c:2b:
80:de:48:05:5a:b8:f2:9b:e3:55:df:42:54:d3:d0:71:1b:4d:
c0:11:b9:ae:5b:95:74:4a:e4:25:b5:61:e3:3d:75:8e:c6:67:
6e:45:1f:fb:2f:59:1d:78:47:95:2f:ca:b0:de:86:a4:d1:89:
18:9f:c7:68:16:02:d2:84:4c:9e:cb:39:29:54:91:17:1c:3e:
6d:aa:94:37:28:bd:a5:24:06:24:34:7b:c7:5d:50:46:46:27:
31:05:ba:f7:30:61:55:e1:d0:4a:da:04:06:d3:44:d3:42:bc:
f9:ef:30:c2:a7:53:53:21:26:50:1f:49:df:9f:bf:45:2d:a8:
6f:bd:6c:49:31:eb:9f:d9:a3:f4:1e:11:0c:8b:4b:ad:9e:32:
cc:7d:5a:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaYz0FivYTe0Bq3IgDXgsBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyODA3NWE0ZmJkYWFiNDJjNWJhMTkzM2M3MDJmYjZhNzg0
MTAyMmEwHhcNMjUwNTA0MDEwMDQxWhcNMjUwNTA1MDEwMDQxWjAzMTEwLwYDVQQD
Eyg0MzdmNjllNDEwOTU2YTBjNmRjYzlmN2E0NGRjNTM2MDlhMTBhMDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTrnA9y5+wbb3pJr/DVw97ng+6PE
Jclo5JuGK1FxfbQyoXWajgQjRxKmFK2exZal38QsypYPxO/kAgT0Fby4p62U6aLd
9z3eCm9qAuBYriSVU3AhZ21aSbCWg7mnqWIXgxv5OpBsu5W8lA5aHkTgQ0guaByR
k/M9GUE7IVOCSrIF4rJnUdde5Xb/ybC/aMmxWz8B2lGIAlC+qA0+PffIuAgXephF
TZodItJmlGGZ5I3L9QIc6PVmGCnh9HYE8Rc4kehVBcFU15pz19BgH4OYOFYOS7sL
Z93n5gzmG3uopRiZjYipmxDZ09BK2iW0V8+TeiXM7YUDpgGmbtDHib7AvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN/aeQQlWoMbcyfekTcU2CaEKBWMB8GA1UdIwQY
MBaAFHKAdaT72qtCxboZM8cC+2p4QQIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY29CMXBQdmFxMExGdWhrenh3TDdhbmhCQWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9iNzUwOTEtM2FhNC00MDMyLWEzOTQt
ZWNkMjhhMjVmZWVmLzEvY29CMXBQdmFxMExGdWhrenh3TDdhbmhCQWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9iNzUwOTEtM2FhNC00MDMyLWEzOTQtZWNkMjhhMjVmZWVm
LzEvY29CMXBQdmFxMExGdWhrenh3TDdhbmhCQWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdY6ycQ2
wtkfyGPR1XppnqA8lQYGorqhYycX75Uoda+tY7jwYKg7H2lDfH0NEvYT6x5IbT7N
TOaok/+URWuaFHXxbGNPUo76T0uK+V6cn88WnhSUOr8YPK31RCqPKJLBWSNRNhvz
WSZniTwrgN5IBVq48pvjVd9CVNPQcRtNwBG5rluVdErkJbVh4z11jsZnbkUf+y9Z
HXhHlS/KsN6GpNGJGJ/HaBYC0oRMnss5KVSRFxw+baqUNyi9pSQGJDR7x11QRkYn
MQW69zBhVeHQStoEBtNE00K8+e8wwqdTUyEmUB9J35+/RS2ob71sSTHrn9mj9B4R
DItLrZ4yzH1aLA==
-----END CERTIFICATE-----
Generated at Sun May 4 11:02:13 2025 by rpki-client