
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
File: Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json)
Hash identifier: hQQuwc3UocCvzscdb0AhUTUH5BaUFATn7MRmaSfVRgo=
Subject key identifier: BB:03:D1:AD:E4:FF:CE:6F:73:13:7A:15:4C:77:B1:82:82:ED:72:00
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial: 01988B0F1E65E72E591B9692C4229F7DC52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
Manifest number: 0328
Signing time: Fri 08 Aug 2025 19:01:20 +0000
Manifest this update: Fri 08 Aug 2025 19:01:20 +0000
Manifest next update: Sat 09 Aug 2025 19:01:20 +0000
Files and hashes: 1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: +Dm7hkCUubZ5qQ2IcLvCR10VbAo9B7eikXfj9g1t0KQ=)
2: Fzr1By55ZDL1AtjsLrCzN_F0gos.roa (hash: Qt6aTT1EiGUDBJx7fPAgx7FJH8IrDb++OhiY8fc3GRU=)
3: TVVwgauLv5P4p_N1MbSMDHrhgkU.roa (hash: nBwDhWyQjjSPhhqjp9xgHoZZMM8YBA0mhGeSxmJeXVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:1e:65:e7:2e:59:1b:96:92:c4:22:9f:7d:c5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Validity
Not Before: Aug 8 19:01:20 2025 GMT
Not After : Aug 9 19:01:20 2025 GMT
Subject: CN=bb03d1ade4ffce6f73137a154c77b18282ed7200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:e3:c6:45:bc:c7:eb:87:e5:b7:c5:e7:4f:
12:87:f4:ae:cf:e2:06:73:0a:a8:1e:ff:c5:aa:5f:
bd:c0:f2:36:57:21:4b:b5:d8:38:cd:ba:37:d5:96:
6b:31:f7:0c:0e:3e:ee:b8:e0:eb:24:6b:18:68:f3:
b1:a0:46:02:11:cf:f6:8f:61:0b:7a:06:ae:60:a1:
7b:45:0b:ca:97:d3:ac:fc:e7:db:a6:60:c0:ea:7b:
fd:16:1c:70:57:31:e4:6f:60:45:2a:07:35:c8:ea:
ce:1a:9e:98:36:c7:16:d3:77:72:25:10:5b:c6:2a:
48:e4:1a:ae:0a:e5:f9:b7:06:73:e0:d1:d2:2f:fe:
01:0d:25:56:e5:a7:23:74:33:b3:2c:f1:a1:6a:21:
e9:f6:c1:0d:0c:c8:ab:ae:07:8c:cb:6d:2f:56:42:
56:16:02:af:ff:dd:73:1e:26:65:55:a1:2d:de:cd:
6b:7d:0b:8c:a3:33:a4:58:48:aa:1f:4c:dc:a6:fe:
93:06:c8:01:22:8a:9f:f7:c6:56:a0:ca:96:7d:be:
d4:e2:44:30:c4:3b:10:6e:6c:3e:d6:b6:5e:72:93:
ad:00:29:9f:61:8e:91:fc:49:31:fc:35:9d:c3:46:
30:99:d8:fc:12:ec:f0:b6:bd:4f:93:b3:3f:6a:82:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:03:D1:AD:E4:FF:CE:6F:73:13:7A:15:4C:77:B1:82:82:ED:72:00
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:96:c9:7c:cf:c4:95:1b:ea:76:1e:26:ba:ad:72:e2:43:75:
39:fc:56:f6:bf:c9:0e:11:48:96:d5:1b:3b:33:2c:df:2e:be:
63:d7:94:1f:ed:98:ef:1f:4a:3e:7d:eb:95:b4:73:5d:83:85:
ea:99:96:56:c4:5b:fb:8d:28:31:e9:29:35:fe:0c:ba:e1:00:
20:34:26:d9:02:e2:47:7b:04:cc:02:96:f0:9c:6e:dc:c1:8e:
59:13:28:cd:4b:49:ee:7c:85:a1:9c:51:2f:1a:ee:d6:15:23:
ed:c0:e8:5d:c9:28:9d:f9:11:2c:43:8c:a5:01:fc:89:16:67:
29:c4:b5:6a:ef:93:a8:f1:c0:02:5c:73:b9:b7:e2:79:9c:73:
b1:e8:08:08:df:55:84:b4:8e:6d:29:0a:99:19:eb:ff:18:35:
6d:66:99:c5:16:59:54:c2:b0:4d:4d:71:42:62:17:58:4b:ec:
32:b8:c2:7b:1b:5e:c2:15:fb:67:6a:fd:a0:5b:69:71:08:e0:
02:28:8c:3e:ac:b4:44:b6:27:b7:95:70:80:5f:6b:ec:ed:2b:
69:97:aa:cb:db:64:64:3d:56:fe:df:5e:f5:18:bf:c5:55:8a:
53:b2:c8:45:19:85:13:a0:3d:08:72:42:5e:d2:b0:a6:1c:0d:
46:89:f6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:41:24 2025 by rpki-client