Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: Il2W/ednQWRH9HYvySd5AgtKORH7Oe2PUgRU1aBXvn0=
Subject key identifier: 08:71:35:09:B8:0C:23:B1:7B:7C:6C:E6:61:87:1D:DD:9C:EA:D8:FF
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 01976929F12930A5BCE8B89A175C8CA599FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 10AD
Signing time: Fri 13 Jun 2025 12:00:45 +0000
Manifest this update: Fri 13 Jun 2025 12:00:45 +0000
Manifest next update: Sat 14 Jun 2025 12:00:45 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: cnrSLVCt3IK2t0zCe7lhlff5eTbeEwpxq2VA0YK+Tac=)
2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:f1:29:30:a5:bc:e8:b8:9a:17:5c:8c:a5:99:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Jun 13 12:00:45 2025 GMT
Not After : Jun 14 12:00:45 2025 GMT
Subject: CN=08713509b80c23b17b7c6ce661871ddd9cead8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:c5:dc:0b:96:c7:bb:8b:72:a3:e4:3c:51:
05:e2:5f:c1:ea:67:d4:45:32:3d:e1:8b:11:2f:08:
d6:79:77:28:06:31:00:6a:4d:09:13:11:67:0a:a0:
94:9f:22:42:f2:2a:64:4e:86:e8:a2:5f:e7:34:a5:
2a:cf:33:c3:ae:90:f5:4e:78:ab:62:8e:45:fe:e9:
8b:95:0d:e7:10:7e:44:18:0d:2f:00:e9:4a:25:0e:
df:75:74:95:39:d5:e0:ec:39:1b:44:69:e5:6c:1a:
d8:1b:65:31:55:78:d4:8b:69:5b:94:b0:29:a3:de:
61:36:0a:76:23:13:26:4b:85:51:cc:fc:90:c8:b6:
d3:c7:e9:9f:d5:f9:e7:69:db:e4:7c:34:d7:8b:7e:
82:38:9b:34:63:8c:9c:3d:9d:d7:0a:ea:f6:64:15:
23:7e:66:65:23:fb:9b:09:bc:a3:7f:7c:72:2d:2f:
6d:f2:db:68:46:44:6b:2a:c0:4d:08:a8:8f:f7:7a:
1b:7a:c7:26:98:6a:1b:0f:cb:fa:71:af:5e:04:28:
73:4d:d8:76:a0:b3:63:a4:92:f5:55:9d:29:a9:93:
83:7f:ac:45:c2:ad:1d:ed:b0:7a:cf:da:07:a5:3b:
c6:34:e5:77:93:64:18:de:28:9e:00:41:b4:9c:f3:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:71:35:09:B8:0C:23:B1:7B:7C:6C:E6:61:87:1D:DD:9C:EA:D8:FF
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ec:c6:15:54:26:31:50:95:87:60:3b:e5:d5:0f:a1:20:25:
79:44:83:5c:c4:6f:92:cf:6c:cf:5f:49:94:a1:77:d1:a6:af:
e8:2c:16:69:4d:79:b9:46:df:97:2e:e9:79:60:56:ed:3c:9d:
7e:51:b4:2c:15:f3:04:4e:11:fb:25:3d:dd:5d:0e:32:9e:69:
e3:18:ae:ee:c1:e4:38:c3:9c:ab:d7:67:1c:08:1b:dc:1b:35:
98:3a:a8:5b:87:ea:2f:5e:70:d2:b2:83:a5:a9:4e:16:19:0d:
b7:80:f5:89:5b:47:24:eb:21:35:c6:ec:af:64:a5:92:66:9a:
cd:0a:0b:4e:8c:de:09:04:a0:ca:71:3a:a0:35:0d:53:77:93:
3a:e8:ae:41:0c:3c:67:a3:96:91:1f:ac:6e:27:d1:73:e2:7c:
8c:bd:c2:cb:18:8f:ea:41:6d:c4:6d:28:c4:d3:8d:cd:c3:23:
1a:98:09:66:8e:58:ba:0f:7e:86:50:f7:e5:95:15:e8:f0:b4:
ea:69:09:f3:dc:7d:ac:b7:eb:77:dd:3e:99:10:f2:9a:bd:3b:
e8:db:7b:e0:9d:5e:17:9e:96:b6:ed:a1:80:e8:18:ae:2f:62:
d0:d9:8f:71:90:33:3d:37:55:37:20:81:d3:46:d5:1f:a1:bd:
fc:5e:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:32 2025 by rpki-client