Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
File: coB1pPvaq0LFuhkzxwL7anhBAio.mft (raw, json)
Hash identifier: ZJV4LOfCnanPaV6Bb+dCKvaj/6Pa4mee2cPBNB1tPks=
Subject key identifier: 8D:86:10:D3:39:B7:73:66:21:75:D8:DB:11:61:CB:E2:56:03:BC:13
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Certificate issuer: /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial: 01988168041070F56F5AD74D709515140727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
Manifest number: 0A2C
Signing time: Wed 06 Aug 2025 22:02:14 +0000
Manifest this update: Wed 06 Aug 2025 22:02:14 +0000
Manifest next update: Thu 07 Aug 2025 22:02:14 +0000
Files and hashes: 1: KtyjoHVh-jWQ52KLDWiih3wa8dM.roa (hash: nNl4uWGbOXfH9a0zpwdYcXAwLZ/cX6WnZQrYg+krLsg=)
2: MlaxuC-MvqxdJWc5pKLiaE76NMk.roa (hash: tH+D4l6q8LLHR1Hf7c2XhR7vBl5T4KLwCh8ScplJjz8=)
3: coB1pPvaq0LFuhkzxwL7anhBAio.crl (hash: DEXeo7oHL1hPm8MQ+6ID6/6v7201tphVkYRreSMwJp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:04:10:70:f5:6f:5a:d7:4d:70:95:15:14:07:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Validity
Not Before: Aug 6 22:02:14 2025 GMT
Not After : Aug 7 22:02:14 2025 GMT
Subject: CN=8d8610d339b773662175d8db1161cbe25603bc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:1b:32:42:fd:94:4a:a5:fa:ad:66:a1:cf:
ca:96:2d:09:3f:32:3f:aa:ec:18:e9:17:27:6b:f5:
6a:1a:bf:47:58:1e:c2:4b:24:41:2d:b9:ad:c7:bd:
e1:76:d7:b8:de:00:d0:08:50:07:d5:da:8c:df:23:
fe:3c:aa:f9:1b:2b:69:7b:3c:f6:c9:58:ae:2a:cb:
3d:18:79:9b:d2:f3:0b:6d:b1:78:fa:a4:cb:27:6e:
cb:8f:db:c8:dc:7d:af:50:d3:57:64:10:a0:5d:5e:
e9:7a:e2:f4:ae:09:1c:39:c6:6e:fa:cd:ae:cf:1e:
67:7f:d9:46:aa:dc:45:1d:9f:e5:1f:03:e3:f4:d8:
97:43:ca:88:71:a3:0d:1a:00:0f:c3:97:8b:5d:56:
cc:60:7e:94:8e:92:98:45:1e:cc:ba:d4:22:18:24:
9b:7d:69:57:38:98:40:11:77:b6:72:c0:46:88:89:
7c:4f:45:f2:3f:dd:ac:d7:0c:69:06:22:b2:97:a4:
2d:d2:c3:0b:0c:80:b6:15:9d:3e:dd:9a:80:5e:95:
24:40:3d:2c:a5:ed:5d:7f:16:76:5d:78:cc:56:db:
14:92:ea:f4:e9:8f:a9:06:c6:c4:36:39:95:a7:05:
fd:a7:84:9d:3d:ea:c2:6f:7b:9c:95:fb:75:ba:af:
71:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:86:10:D3:39:B7:73:66:21:75:D8:DB:11:61:CB:E2:56:03:BC:13
X509v3 Authority Key Identifier:
keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:be:3f:0f:33:47:20:89:c9:0b:5d:5e:38:6a:58:ec:8c:21:
69:4a:1b:ab:04:ac:40:1a:3e:33:66:c3:2b:fd:74:79:e6:01:
51:74:bd:38:ee:e0:f1:38:77:e8:e6:f5:bd:7f:b4:d0:d8:08:
2f:18:3f:b0:4e:4b:b5:ed:e5:58:bd:d9:85:95:62:35:d6:01:
a3:25:4c:f9:25:21:96:d4:2e:01:f1:01:08:d6:b7:a1:50:8e:
e2:3c:c2:df:2d:46:a0:48:6e:31:47:23:b8:1d:d7:c8:a8:dd:
8e:a2:37:1b:cc:36:3e:a8:1c:f0:28:0e:6c:4d:b7:85:25:86:
41:09:e3:d9:1b:1c:e1:48:a4:ab:ee:89:df:67:d3:30:9b:85:
29:a8:36:24:bb:d1:7e:c8:5f:2d:24:20:30:28:f7:d7:12:90:
c5:a6:2b:5e:6c:a9:cf:f0:1d:0e:16:a3:2a:48:af:3f:28:71:
20:46:ba:3e:bb:c0:a0:fd:54:44:41:80:3e:78:e3:16:0e:bb:
c0:29:02:85:76:4e:58:ca:10:1b:3d:29:9b:7b:a8:63:10:16:
3c:2f:0b:1e:da:28:25:de:ec:08:4e:ff:ff:71:3b:a5:68:d2:
77:70:69:32:69:ed:77:1c:af:33:87:85:71:b3:df:81:e4:19:
78:e5:ac:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:00:02 2025 by rpki-client