Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: 8VAKHw9vT96I/a6AxhB6gN4Lu4HgLsoigRgm8ajC74A=
Subject key identifier: EC:BC:C5:F2:31:8A:E6:CB:4A:5C:23:12:2E:88:27:B0:AA:42:12:EC
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 019679B1FF1713BAE76A0B5EE542C3AA10C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 1031
Signing time: Mon 28 Apr 2025 00:00:30 +0000
Manifest this update: Mon 28 Apr 2025 00:00:30 +0000
Manifest next update: Tue 29 Apr 2025 00:00:30 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: rRinWpBN7STL4k2pCa5ZoJqzxYPKwaOZqQlGI5pvH6s=)
2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:ff:17:13:ba:e7:6a:0b:5e:e5:42:c3:aa:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Apr 28 00:00:30 2025 GMT
Not After : Apr 29 00:00:30 2025 GMT
Subject: CN=ecbcc5f2318ae6cb4a5c23122e8827b0aa4212ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:f1:52:3d:d1:c0:3e:39:46:9e:62:73:86:
8a:37:f8:e7:58:cc:bd:0a:e8:33:fa:a9:cb:a3:8c:
0d:0c:ee:45:30:90:05:c2:87:82:e0:d7:98:d1:62:
ba:3e:45:2c:ce:74:bf:ce:29:8f:b6:e8:28:45:eb:
bd:1b:9d:a0:91:20:4b:c5:39:52:f3:ef:f9:18:96:
33:c9:5c:d2:42:2a:c5:0c:9d:1c:6c:04:64:66:65:
28:e0:9d:e5:2d:a7:9b:41:6a:38:d3:ad:38:c9:5a:
4b:1c:61:9e:d8:b9:18:32:6d:d8:de:a5:4f:74:8d:
7e:90:f6:e2:34:a5:d6:82:d6:6c:c8:02:23:0d:d3:
04:01:d3:a1:1f:d6:7a:7c:f4:12:29:ac:22:cf:89:
2a:c3:ee:53:f8:a9:3f:af:c5:f7:d6:ec:0c:e6:2d:
08:8a:8c:62:f9:d9:d4:18:49:24:23:58:73:57:e4:
fd:06:07:93:85:5c:b2:16:15:5a:31:d8:c7:55:8b:
ac:6f:75:c7:e8:9d:c8:ca:03:0d:4a:39:50:09:4f:
89:c8:58:2b:4f:a4:19:48:15:5b:6f:71:fa:4e:24:
0d:95:36:24:c8:51:8b:b2:cd:49:8d:6b:f5:d1:29:
c2:5f:3a:14:2d:a2:2a:cf:69:d2:a8:25:6d:2a:a0:
3c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BC:C5:F2:31:8A:E6:CB:4A:5C:23:12:2E:88:27:B0:AA:42:12:EC
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:97:88:19:c9:12:18:65:2f:d4:8e:5f:1b:e6:19:1b:d1:a3:
ea:fb:17:51:36:19:3f:67:20:b6:4d:10:8c:19:96:71:78:bf:
de:85:20:aa:e5:63:e6:91:52:2e:69:7d:30:8f:f5:f2:a0:a5:
75:b8:1b:3b:cd:05:a7:09:41:2a:c0:96:7a:de:67:c2:e0:55:
61:64:18:3c:6f:18:25:95:e2:c7:0c:36:d2:5c:cb:35:50:ff:
26:88:72:67:40:d2:27:ed:44:8b:64:69:4e:f3:50:59:ef:9a:
6c:71:4d:e1:5d:6b:c8:4a:e9:2a:71:cd:fd:ad:ec:f3:e0:8a:
74:46:d2:f0:41:a8:cd:98:29:3d:1b:7f:11:52:e8:41:f3:03:
e9:aa:f2:a2:b5:43:02:69:ed:c7:07:8c:81:d9:92:a9:db:62:
4c:aa:e3:9c:d2:b2:81:55:b5:6d:47:ac:ec:65:55:db:0c:08:
85:fa:75:5c:ee:44:65:59:1e:f7:21:ac:7c:ca:af:37:64:28:
3e:53:fc:b0:7e:39:2c:86:51:e2:f2:ed:cb:60:75:60:0a:f7:
57:63:d9:e5:be:96:ce:6e:dc:9c:f7:e4:95:2f:13:14:d5:0a:
30:c2:84:5e:2b:42:f2:fc:59:3f:cd:fe:85:ce:da:cc:d8:bf:
38:50:b6:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5sf8XE7rnagte5ULDqhDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOGJjYTFhMGU4NjQ0OGI3M2RhNTRjNDJjYjBkNzU3NjUz
NzNmMjcwHhcNMjUwNDI4MDAwMDMwWhcNMjUwNDI5MDAwMDMwWjAzMTEwLwYDVQQD
EyhlY2JjYzVmMjMxOGFlNmNiNGE1YzIzMTIyZTg4MjdiMGFhNDIxMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni/xUj3RwD45Rp5ic4aKN/jnWMy9
Cugz+qnLo4wNDO5FMJAFwoeC4NeY0WK6PkUsznS/zimPtugoReu9G52gkSBLxTlS
8+/5GJYzyVzSQirFDJ0cbARkZmUo4J3lLaebQWo40604yVpLHGGe2LkYMm3Y3qVP
dI1+kPbiNKXWgtZsyAIjDdMEAdOhH9Z6fPQSKawiz4kqw+5T+Kk/r8X31uwM5i0I
ioxi+dnUGEkkI1hzV+T9BgeThVyyFhVaMdjHVYusb3XH6J3IygMNSjlQCU+JyFgr
T6QZSBVbb3H6TiQNlTYkyFGLss1JjWv10SnCXzoULaIqz2nSqCVtKqA8lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOy8xfIxiubLSlwjEi6IJ7CqQhLsMB8GA1UdIwQY
MBaAFAqLyhoOhkSLc9pUxCyw11dlNz8nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xODZmZDQtM2M2NC00ZGJmLWE5MDAt
YTc5OTA2MjU4OWEzLzEvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8xODZmZDQtM2M2NC00ZGJmLWE5MDAtYTc5OTA2MjU4OWEz
LzEvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJeIGckS
GGUv1I5fG+YZG9Gj6vsXUTYZP2cgtk0QjBmWcXi/3oUgquVj5pFSLml9MI/18qCl
dbgbO80FpwlBKsCWet5nwuBVYWQYPG8YJZXixww20lzLNVD/JohyZ0DSJ+1Ei2Rp
TvNQWe+abHFN4V1ryErpKnHN/a3s8+CKdEbS8EGozZgpPRt/EVLoQfMD6aryorVD
AmntxweMgdmSqdtiTKrjnNKygVW1bUes7GVV2wwIhfp1XO5EZVke9yGsfMqvN2Qo
PlP8sH45LIZR4vLty2B1YAr3V2PZ5b6Wzm7cnPfklS8TFNUKMMKEXitC8vxZP83+
hc7azNi/OFC23Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:11:52 2025 by rpki-client