Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: Xi1oDIcZaRolbQUpbyYyLZx/fuFSCxrQvQCMAdiTtfE=
Subject key identifier: 4A:9B:B3:72:28:86:2C:DF:1D:8E:98:4D:DC:9A:1A:5C:0A:B8:17:95
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 01967C7C5E2B6BE3C8BC78A5E7F4DEA79151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0A92
Signing time: Mon 28 Apr 2025 13:00:47 +0000
Manifest this update: Mon 28 Apr 2025 13:00:47 +0000
Manifest next update: Tue 29 Apr 2025 13:00:47 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: ZXZmd5PHxtIvug8BonxV04V4jPR07h3FDbum2+Igv0g=)
2: Uj6BezAzB94GByjzrVUNlk0ht78.roa (hash: dN/7lNPFzPzip+lXMHPQrtHop8fW612WIaM/9STYSBo=)
3: i6d_wSF6B7XpMiMocY9g5Bflzus.roa (hash: Ie39FF54w1T4xPfnonYM6fmqfVN96lUmKfBb590VzVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:5e:2b:6b:e3:c8:bc:78:a5:e7:f4:de:a7:91:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Apr 28 13:00:47 2025 GMT
Not After : Apr 29 13:00:47 2025 GMT
Subject: CN=4a9bb37228862cdf1d8e984ddc9a1a5c0ab81795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:12:af:6d:b4:aa:01:a8:1a:53:2a:15:06:5a:
84:37:c7:f7:5d:02:34:8e:cb:85:be:2a:78:27:7f:
64:0e:64:0f:9c:6d:ab:04:cd:46:43:b0:f1:27:43:
a7:c1:37:db:03:88:62:28:19:d3:18:e3:7b:75:03:
7e:b1:2e:26:dd:c7:b7:1b:e7:31:d9:50:49:99:19:
fa:bd:86:f1:ae:24:27:d5:8d:35:c0:bb:90:f4:e6:
dc:7f:c4:55:5b:64:2a:2c:e0:a0:28:b0:e2:bf:c1:
50:86:52:63:42:12:5d:35:86:0b:77:6b:77:e0:1c:
b9:1a:9a:30:d4:b7:5b:44:9d:0b:53:22:e8:97:fc:
48:f7:86:e8:1e:88:69:68:68:c5:6d:de:e9:62:49:
fb:2c:75:90:bc:a7:a3:0c:13:b2:06:b7:1a:92:05:
1c:5e:36:07:e0:0b:06:39:b5:fb:4c:3a:84:d7:f9:
28:03:e6:f6:ce:20:a7:75:22:a9:00:6f:53:85:1b:
56:72:9e:a8:2f:7a:72:0f:76:27:6a:69:b6:7e:ef:
5f:aa:23:cd:51:d5:e0:39:2d:b8:b6:6b:a8:b0:9e:
49:e5:6c:21:33:6f:43:10:f1:1f:a5:82:3b:c7:d9:
62:29:35:5d:79:68:59:9a:f9:86:4e:40:3a:cb:55:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9B:B3:72:28:86:2C:DF:1D:8E:98:4D:DC:9A:1A:5C:0A:B8:17:95
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:17:2a:45:c1:57:d7:da:97:e7:6f:37:9d:cf:ff:1a:38:66:
dc:1a:a9:66:94:90:dc:c7:0d:45:c5:13:3c:2e:c8:a2:68:c6:
45:4d:db:42:e3:23:53:b7:95:35:f9:f5:8c:bc:87:35:7b:e0:
55:92:ba:90:e1:11:1e:6d:d8:90:91:e7:28:a0:e1:f6:01:9e:
e1:f6:3b:75:74:4a:3a:cf:73:23:8f:db:9d:f1:0f:f9:5a:da:
03:b8:11:13:6c:81:6d:db:41:52:76:24:87:68:82:c7:e4:c7:
48:0f:b4:d7:aa:2a:ef:81:09:c1:e2:6e:3b:0f:2d:78:1f:e4:
5d:a1:f3:62:5d:e0:e1:fc:d1:76:4d:b7:9b:d5:6a:ec:c6:d4:
4c:3b:15:a3:cc:de:11:8d:60:20:18:35:79:50:25:40:3f:bb:
18:15:bd:00:6e:9d:40:ba:0d:18:2d:ce:20:3f:9c:30:33:05:
ae:89:16:b6:2b:84:fa:83:fc:88:9b:3e:ae:c9:4a:17:12:06:
43:98:ff:dd:0e:e3:87:93:b3:ad:13:7a:fe:04:8f:54:61:65:
c5:ac:af:6f:c8:c9:63:1b:c5:a4:78:72:61:ba:e0:63:4b:b9:
64:9a:22:d3:94:7b:ec:c0:9c:aa:7f:6f:1c:3d:a0:f1:64:f9:
22:c0:30:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:14:50 2025 by rpki-client