Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
File: cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft (raw, json)
Hash identifier: 3XN6yEmbOxFmRJ9SRPRxhdnlwsvsbQmbl51eRYC8rzY=
Subject key identifier: 90:D2:05:14:F2:E7:A2:6D:52:AD:72:66:27:9A:EB:57:D8:0E:4C:8B
Authority key identifier: 70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76
Certificate issuer: /CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
Certificate serial: 01976C61D6B2328072C1AD2405BBD54A9322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 03:00:40 +0000
Manifest this update: Sat 14 Jun 2025 03:00:40 +0000
Manifest next update: Sun 15 Jun 2025 03:00:40 +0000
Files and hashes: 1: cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl (hash: g5vt7PZlF9bhmIW/hkoyFW2DYAn8kGyhqbQiLEW1EXE=)
2: hR1_ZEXfbdX4pGc2ctPKXHrqf78.roa (hash: ObK4r8CGHqPQX4CfItMJydsCSmFEvL3F0L64naX6VJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:d6:b2:32:80:72:c1:ad:24:05:bb:d5:4a:93:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
Validity
Not Before: Jun 14 03:00:40 2025 GMT
Not After : Jun 15 03:00:40 2025 GMT
Subject: CN=90d20514f2e7a26d52ad7266279aeb57d80e4c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:3e:8f:02:26:37:7d:7e:2e:87:9c:a5:97:
1b:1c:df:39:f5:db:ac:87:4d:fd:49:fc:02:7f:61:
59:c1:1e:e5:91:66:8a:bc:29:e9:b6:6c:99:c7:44:
e8:31:61:f5:b5:28:b4:86:df:3c:3f:a4:53:b3:6d:
c0:d3:c1:55:a7:e9:5c:77:c0:28:56:be:b2:17:a8:
5a:93:5a:d7:e8:b1:31:23:d0:ca:7b:c9:25:a7:dc:
6b:36:03:78:0a:4f:0f:ef:3a:cc:e6:0e:44:f9:0c:
90:3a:0e:56:10:ff:ef:40:47:f6:a4:b6:f7:85:1a:
2a:b0:25:e5:d5:7a:35:dd:b6:06:22:25:e6:fa:ca:
0a:bc:0a:18:42:3f:72:45:21:fb:0a:f5:d5:c5:fd:
c1:23:be:43:88:04:86:78:71:87:d4:d3:34:51:56:
5c:6c:9f:3c:ee:fe:2e:44:97:2e:e3:2a:72:90:69:
d9:03:32:c8:d1:9d:4d:29:ac:0e:fe:f3:40:b9:26:
c5:a5:45:64:7b:65:33:a6:55:d2:33:c6:38:f6:29:
f5:6a:4f:27:9f:30:1e:30:99:cc:a2:b0:fc:cf:9b:
a3:fd:80:d2:43:a6:88:95:92:fa:6a:58:05:28:dc:
92:d1:2f:8f:96:7b:3e:29:d3:a7:2d:fe:ee:81:f7:
16:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D2:05:14:F2:E7:A2:6D:52:AD:72:66:27:9A:EB:57:D8:0E:4C:8B
X509v3 Authority Key Identifier:
keyid:70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a9:20:bf:3a:18:8b:70:71:eb:34:a4:b3:b5:26:36:e8:7f:
d0:58:4b:13:17:c1:70:81:82:b5:8c:5c:d1:93:f4:d0:c3:13:
05:82:91:2f:fc:6f:ae:ae:83:7d:8b:70:92:b8:b3:06:f4:96:
a1:1b:00:c9:30:ae:56:48:68:05:5a:a3:09:44:d8:e7:e7:78:
79:23:01:63:d3:f9:45:b4:0d:03:41:04:f2:77:a9:c9:5e:c6:
39:0f:0e:15:73:2a:fc:ab:6d:f7:59:72:bb:30:8c:e3:fc:20:
52:46:b6:6d:f5:56:8d:60:a7:4a:a7:9f:40:2f:b4:95:6c:29:
0a:ae:59:5e:53:94:3b:4e:97:7b:91:34:ae:17:df:a8:17:d0:
44:a6:da:75:40:9f:08:15:ba:ff:14:e5:1b:ed:c2:50:b8:09:
41:4b:5d:1b:a1:be:7d:e0:80:44:4d:21:00:f5:0a:96:7d:30:
af:18:f4:3a:9b:1e:bb:38:08:ab:e9:49:f4:06:db:13:47:fd:
a4:2f:b8:72:9f:d8:be:17:90:91:79:cf:1f:71:2a:4e:33:e5:
c9:b5:ed:ff:42:e9:67:ce:0b:8a:3d:10:b9:98:4d:3d:9a:77:
94:6f:ad:a0:5f:8c:ea:32:e9:f8:68:7a:e5:69:ad:3a:ee:bf:
cc:44:e8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:25:58 2025 by rpki-client