
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: KFR3+mfNlJQtlZtmZ8WujtMNSRZcB1rwU9PruqRFYlM=
Subject key identifier: 17:D9:B2:1E:F8:A0:F7:C1:2B:06:6C:2A:7E:18:B2:1E:F2:1E:82:FF
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 019873E1E46D1AD33E8F1645DA93B3B3B9D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 1137
Signing time: Mon 04 Aug 2025 07:00:40 +0000
Manifest this update: Mon 04 Aug 2025 07:00:40 +0000
Manifest next update: Tue 05 Aug 2025 07:00:40 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: dQJTa5lKT4KKDTKoZd+wEaUnXEc/gSkOx5qgAvWWHW4=)
2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:e4:6d:1a:d3:3e:8f:16:45:da:93:b3:b3:b9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Aug 4 07:00:40 2025 GMT
Not After : Aug 5 07:00:40 2025 GMT
Subject: CN=17d9b21ef8a0f7c12b066c2a7e18b21ef21e82ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:a1:40:2f:55:ee:46:cd:8e:f7:fb:c0:49:
c9:08:af:74:f7:d4:2c:66:26:4c:a8:db:40:e5:e6:
c5:fd:e9:b5:f8:08:c6:3e:d1:48:cb:9b:9a:7c:9f:
2f:81:42:a7:4e:64:63:9d:55:3b:8c:86:05:98:1b:
4b:72:2f:4d:7e:db:db:7d:12:94:77:a3:13:f9:3a:
cd:fd:ac:41:d6:41:f3:ca:61:8e:30:bb:87:14:f9:
aa:3c:48:d2:b5:4c:29:06:96:62:bd:80:7f:da:81:
00:86:db:f3:d4:dc:57:de:8b:f3:f8:50:64:1c:c9:
c9:92:7f:cb:53:e7:4d:df:55:37:ca:35:d8:3f:ec:
7e:04:27:f5:f6:20:8a:68:d8:0a:35:b8:56:41:b6:
02:15:1a:e0:27:93:db:00:f2:f9:a9:7f:da:e0:3d:
b0:a5:a9:e1:91:f4:26:e8:e4:e3:f4:1f:dd:79:08:
d5:ac:7f:e0:d5:20:45:81:bc:be:b0:dc:d1:b4:68:
a2:9b:32:88:23:07:62:ec:d6:6f:a5:4d:05:71:44:
7e:c0:db:03:22:4f:5b:cc:e0:67:c0:de:a5:aa:84:
f0:2e:5a:fb:56:e9:b7:b3:a1:a3:39:d6:ff:0c:1e:
0b:32:6b:67:ba:2a:4e:11:44:5b:56:91:1f:3c:dd:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D9:B2:1E:F8:A0:F7:C1:2B:06:6C:2A:7E:18:B2:1E:F2:1E:82:FF
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c3:89:9a:e9:32:33:77:dd:30:24:e7:cc:fd:f5:80:98:d3:
95:c1:32:77:68:0c:9f:81:d1:86:7e:d4:17:af:47:56:6f:18:
24:df:3a:20:6b:1e:16:4b:e1:20:64:57:52:09:99:ba:cf:1e:
a5:64:48:ef:65:46:ec:98:8f:2d:ec:7d:82:80:21:da:fe:11:
97:6a:be:a0:6c:1c:11:c6:d2:24:85:29:ac:61:91:63:25:aa:
9c:ae:99:93:89:d5:35:ba:70:fc:12:8c:9e:3f:9a:3f:5b:88:
9b:d0:2c:de:9e:a3:e0:46:3f:03:83:0b:f2:4e:ec:46:6b:50:
ef:83:aa:0e:0e:50:82:57:b3:9b:31:28:2e:21:29:0a:64:34:
a1:cd:b7:5c:f4:0a:b2:b9:20:36:48:83:55:4c:c9:96:c6:22:
8a:88:fd:41:c6:1b:9b:9c:5c:71:6d:97:0f:cd:ec:0a:83:9c:
d6:ae:fe:68:a0:e3:89:f3:67:12:59:60:36:45:66:5a:ce:9c:
7b:fe:ce:89:3a:5b:a5:12:ca:83:5c:34:be:57:4b:e1:30:86:
46:3d:f7:67:fa:f3:05:c7:51:3d:f4:fb:ae:00:64:47:5b:3b:
25:a6:85:21:dd:27:45:a3:c2:5d:2c:1e:e9:51:1a:7b:b8:76:
62:5f:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:38 2025 by rpki-client