Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: p/ovKzswGWA6SZ78Hgk+wVa5sVZeSz/vD6sUfUVTqI0=
Subject key identifier: E5:B0:2B:25:DC:DB:EB:94:18:3B:71:E1:D3:46:AF:C5:C0:DC:47:EF
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 01967B32F399AF58DAD5D2655A142ADF90E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 0CB8
Signing time: Mon 28 Apr 2025 07:00:58 +0000
Manifest this update: Mon 28 Apr 2025 07:00:58 +0000
Manifest next update: Tue 29 Apr 2025 07:00:58 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: uufzeCLj587Onv36V8U/npR6TCCWtTr68UpYuiRaXV8=)
2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:f3:99:af:58:da:d5:d2:65:5a:14:2a:df:90:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Apr 28 07:00:58 2025 GMT
Not After : Apr 29 07:00:58 2025 GMT
Subject: CN=e5b02b25dcdbeb94183b71e1d346afc5c0dc47ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:91:f7:73:ac:85:3c:be:aa:dc:21:a6:5f:85:
5a:ed:6b:24:23:54:6c:54:91:7c:6e:86:cb:10:54:
e5:8e:51:6b:20:5a:25:4d:a7:cc:c7:67:72:05:ae:
a3:fc:1c:96:e3:39:3b:bb:e8:57:05:fb:a6:54:14:
1c:42:c7:82:b6:bc:ea:1e:de:0d:72:79:70:68:5a:
80:8b:45:fb:f7:ed:53:ab:c0:84:8d:bd:f1:a9:ae:
08:8d:b7:f2:39:41:3c:23:20:2a:3d:29:80:84:76:
19:24:28:35:ed:5a:17:0a:e3:f6:8d:a8:b7:bd:50:
f5:13:a3:fc:00:f2:84:87:ae:8d:93:5f:f7:fb:59:
a1:03:6f:6a:32:91:01:64:37:1a:8f:81:35:b2:84:
8f:2f:ab:75:81:b1:4c:70:b8:06:49:ac:dc:1c:b0:
7f:ff:9b:f2:b3:37:18:52:64:e7:11:36:dd:08:39:
8b:97:a1:2e:16:13:d1:e6:61:aa:2f:2f:f3:fc:84:
05:c0:06:82:34:27:19:51:0b:71:2d:98:dc:33:4c:
4e:9b:23:84:f9:86:63:e2:04:c4:24:b7:35:9a:72:
ce:e5:b9:6b:65:2e:42:f8:48:77:82:24:a8:fe:91:
35:18:cb:cb:43:e4:c2:a8:51:fc:67:5c:35:dd:ea:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B0:2B:25:DC:DB:EB:94:18:3B:71:E1:D3:46:AF:C5:C0:DC:47:EF
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bf:cf:fb:f1:aa:e2:bb:e7:46:4a:98:f5:e9:60:c0:44:32:
23:e1:09:f2:ee:95:99:2d:3b:85:bf:4f:af:f2:d1:df:c5:dd:
7d:02:e2:66:87:45:04:47:d8:ba:68:98:d9:f6:1f:3a:1e:29:
fc:b3:e0:83:07:2f:87:27:c8:1d:fe:00:64:0d:b1:36:1a:a4:
e7:1f:96:91:20:dd:02:26:52:52:d3:66:d4:a4:1b:43:98:32:
13:69:56:7e:06:b0:62:00:7f:e9:6a:ff:9a:93:68:be:5f:0f:
a2:45:84:b6:ec:4b:d7:80:9b:2e:17:45:ef:77:3e:c6:16:12:
7b:4b:4b:a8:70:6a:6c:53:64:dd:7e:32:f6:e7:18:5e:92:cb:
d3:24:a3:5b:2a:26:5f:69:83:f0:f5:c4:17:e0:19:de:55:19:
24:f0:9e:3c:bb:85:4f:65:a0:3c:f5:11:5e:3e:a2:fb:bf:7a:
fa:57:ed:1e:d4:5e:0f:99:52:3a:18:0f:62:69:aa:01:5d:3f:
ef:6b:5e:09:5c:41:09:bc:d2:2c:41:34:49:02:52:50:a8:4e:
8c:5d:f6:37:1f:3d:d6:aa:23:fb:ef:94:54:07:2a:51:e6:08:
00:9a:1d:32:ba:c0:6e:89:bb:35:92:b9:b1:15:d4:e9:43:fa:
63:07:fb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:34:45 2025 by rpki-client