Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
File: Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json)
Hash identifier: WQt+v+p7pMCqjo06BlgvaPRbYRb/db5Oq4XuCVxuDZ0=
Subject key identifier: 16:7F:91:95:C6:06:CB:35:2B:2F:62:5B:6A:F8:4F:30:18:A9:49:03
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial: 01967DC5ABDC02105703E70E9D34A5F890C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
Manifest number: 0218
Signing time: Mon 28 Apr 2025 19:00:28 +0000
Manifest this update: Mon 28 Apr 2025 19:00:28 +0000
Manifest next update: Tue 29 Apr 2025 19:00:28 +0000
Files and hashes: 1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: 1Dxl38SFs1mAqxbutp4lZ9O59z3iVFPgBjEakTsMbe4=)
2: Fzr1By55ZDL1AtjsLrCzN_F0gos.roa (hash: Qt6aTT1EiGUDBJx7fPAgx7FJH8IrDb++OhiY8fc3GRU=)
3: TVVwgauLv5P4p_N1MbSMDHrhgkU.roa (hash: nBwDhWyQjjSPhhqjp9xgHoZZMM8YBA0mhGeSxmJeXVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:ab:dc:02:10:57:03:e7:0e:9d:34:a5:f8:90:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Validity
Not Before: Apr 28 19:00:28 2025 GMT
Not After : Apr 29 19:00:28 2025 GMT
Subject: CN=167f9195c606cb352b2f625b6af84f3018a94903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:ba:8c:84:da:d5:69:8c:f3:fc:5e:ba:32:
3c:a1:75:16:fc:2b:95:30:69:48:55:bc:0d:23:59:
54:40:f9:24:ae:db:ae:9f:7f:df:70:00:a2:b3:26:
da:40:ae:56:55:b1:1d:d1:2c:3a:5a:35:51:ed:e3:
5a:ee:21:f3:2e:1f:cf:42:9b:2a:75:58:2b:96:13:
59:9c:34:6d:e7:90:30:73:9f:2b:6c:23:a4:32:4c:
71:27:74:be:a4:84:c5:94:18:fa:fe:88:a8:86:bc:
6a:39:81:88:7b:08:bd:17:a4:f4:16:de:bd:87:cf:
e3:fd:8a:eb:76:47:01:c1:a5:b2:05:05:ec:19:49:
a0:4f:9b:71:b9:9b:a1:d1:11:dd:a5:91:34:b5:65:
a9:0c:58:91:75:1d:17:7a:e9:a2:13:bd:ee:ba:7c:
b2:ca:7c:6e:bb:af:4a:be:fb:7e:63:69:f8:20:8f:
4c:c3:1c:99:00:70:37:b2:f1:dd:05:42:8f:d7:b9:
47:fe:d7:22:b4:e2:41:70:8b:8e:b4:d4:10:77:48:
2e:bd:0f:53:5f:36:d3:a7:26:65:dd:cd:19:3f:48:
ab:d8:3b:ec:eb:ce:9a:4d:97:67:a4:1d:48:9a:48:
ca:05:21:39:fe:a6:0c:38:cb:88:fe:eb:a7:c6:b7:
91:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7F:91:95:C6:06:CB:35:2B:2F:62:5B:6A:F8:4F:30:18:A9:49:03
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:01:ad:b1:2e:bc:52:2c:18:01:1f:80:50:47:46:28:fc:f1:
37:e0:af:dd:40:57:33:5a:80:a3:8f:94:13:23:18:94:5a:d3:
63:bc:a6:40:07:41:38:0c:5c:e3:01:8f:8b:97:b9:de:d6:3b:
34:85:6b:ba:1f:77:a1:b5:e0:f6:f8:9b:9c:cd:67:d5:87:7f:
bd:f1:f8:56:fd:b2:bf:95:8d:c5:0d:fe:f1:68:00:f5:4a:82:
59:47:02:33:66:a8:f7:03:00:0f:c4:43:80:7f:ab:27:34:5c:
06:ce:e5:f5:32:43:02:b9:d5:3b:1b:a9:cf:b8:9b:be:35:a4:
bb:ed:a1:1a:f5:b8:5c:08:3e:33:d5:92:3b:46:74:91:4d:81:
74:4a:f7:89:b1:2d:27:65:9d:29:f6:7a:78:e1:d2:c5:ca:aa:
07:d9:e4:b6:43:28:24:9b:b7:ab:29:d9:42:b6:e3:a5:a6:63:
47:e9:5a:0f:41:da:3c:57:09:b7:de:12:65:ac:60:e0:3b:60:
34:48:0e:5f:ad:86:53:8d:da:e6:17:23:eb:1a:01:1a:41:8d:
3f:4a:9b:85:45:7e:09:42:a6:48:05:26:a7:24:75:74:5c:0e:
4f:e8:b3:50:7f:bb:40:5b:7e:32:19:94:70:31:41:dc:ee:1a:
43:37:cc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:20:06 2025 by rpki-client