Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
File: Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json)
Hash identifier: lyQeJKQfE/tLSN+yGI2RkMOfPwTUv7xRo9rvHB6F4Tw=
Subject key identifier: 37:43:3C:38:25:8B:D1:50:CF:BC:F2:E8:B0:B8:01:A0:30:7A:4A:03
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial: 01976D3E68E2FEC27A86EA35C3BC3FD3EF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
Manifest number: 0294
Signing time: Sat 14 Jun 2025 07:01:35 +0000
Manifest this update: Sat 14 Jun 2025 07:01:35 +0000
Manifest next update: Sun 15 Jun 2025 07:01:35 +0000
Files and hashes: 1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: ZyYke4KDpLojEanrQz1n7aqme5jCeDuavgW6KJjqPAY=)
2: Fzr1By55ZDL1AtjsLrCzN_F0gos.roa (hash: Qt6aTT1EiGUDBJx7fPAgx7FJH8IrDb++OhiY8fc3GRU=)
3: TVVwgauLv5P4p_N1MbSMDHrhgkU.roa (hash: nBwDhWyQjjSPhhqjp9xgHoZZMM8YBA0mhGeSxmJeXVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:68:e2:fe:c2:7a:86:ea:35:c3:bc:3f:d3:ef:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Validity
Not Before: Jun 14 07:01:35 2025 GMT
Not After : Jun 15 07:01:35 2025 GMT
Subject: CN=37433c38258bd150cfbcf2e8b0b801a0307a4a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:6d:da:2a:67:08:3d:f3:e2:e2:3d:6f:34:
24:1a:b9:78:1f:95:32:d8:f5:ef:bd:27:54:3d:34:
ec:a9:e4:fe:25:82:31:90:5b:7e:13:cb:52:21:da:
dc:4b:67:27:c0:99:17:eb:60:f9:24:9d:76:2a:5c:
f7:db:51:e5:cc:f1:61:3f:9c:31:b1:05:16:e8:23:
a4:32:4c:18:37:2e:07:53:65:64:3b:6f:3a:57:70:
fe:1b:b5:b4:6f:cd:bb:86:cd:a4:42:98:ce:44:32:
7d:4e:55:44:00:20:80:07:fa:4f:18:c0:cf:24:2d:
6f:67:4c:1c:4e:8b:62:eb:a2:1d:d1:f7:10:34:4e:
0c:5b:4d:89:23:2c:9f:d2:d2:f7:05:66:4f:ab:65:
95:03:7a:81:b1:8b:1b:5e:50:c6:a9:4e:11:00:1d:
fa:ed:50:ba:ef:53:a1:73:2a:18:66:9d:7b:6f:39:
54:14:88:fb:fd:6e:ba:af:33:97:6e:5a:14:0f:88:
91:73:5c:8b:bb:b6:80:94:68:d2:cc:9f:d3:f8:17:
16:d7:3e:29:1f:d0:25:39:a0:07:a3:2d:fa:ba:c0:
ce:ad:72:9b:69:0b:f8:ce:fe:08:7f:fd:b7:8b:92:
54:95:5e:20:45:0c:c9:f3:1c:16:77:86:8d:2f:e0:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:43:3C:38:25:8B:D1:50:CF:BC:F2:E8:B0:B8:01:A0:30:7A:4A:03
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:93:28:97:a0:c8:a6:de:bd:87:5f:e5:d7:ed:0e:cd:a4:8a:
ee:c7:65:7e:22:6c:29:08:87:41:e9:ae:13:c6:97:a3:0f:a1:
9b:48:4a:78:4e:75:d2:d4:3e:a5:34:ee:e2:c7:15:b4:e1:1d:
16:6f:ee:51:16:12:60:39:3d:88:36:bd:c2:bb:45:61:ec:d9:
8e:56:8f:09:ec:69:f1:a6:13:e7:cd:03:df:00:c4:29:ad:7c:
01:1e:60:e2:95:29:c9:40:2b:09:e4:f0:63:cf:85:bb:ac:a3:
66:16:32:67:25:4a:59:36:9c:ca:40:2e:85:29:89:2c:ba:58:
52:1d:75:88:dc:12:49:d5:f3:fd:06:b0:78:6c:fc:f8:a8:b2:
a5:3e:97:52:ad:a1:e6:1f:dc:b7:ff:ba:72:be:34:f9:bc:ca:
91:ac:64:94:89:82:97:32:4e:33:a3:30:c3:e4:12:13:81:21:
a2:d0:7f:f8:c1:1a:50:12:bc:9c:3c:ab:89:0d:75:2b:f2:0f:
24:24:39:8b:a5:ce:74:66:23:91:11:eb:d3:3e:c2:1c:5d:73:
f4:8c:72:f5:fe:db:b6:bb:8a:6b:15:2c:47:6d:17:99:8f:17:
de:94:a1:45:ed:1d:32:30:5d:08:88:9f:31:a6:08:37:7a:fd:
af:61:17:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:56 2025 by rpki-client