Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
File: Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json)
Hash identifier: 9bpYk8bHKnN0jxtytySu5LElMDKLgurRJjOORNbMc0g=
Subject key identifier: 2A:56:54:5F:9F:9C:60:A3:99:63:9E:B3:8B:84:7B:97:E3:33:06:3F
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial: 01983616D278A39D1AC55902A99668392F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
Manifest number: 02FC
Signing time: Wed 23 Jul 2025 07:02:01 +0000
Manifest this update: Wed 23 Jul 2025 07:02:01 +0000
Manifest next update: Thu 24 Jul 2025 07:02:01 +0000
Files and hashes: 1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: RCWY3lOn0VrxIWES95NyOw5SrZ9MHsQorw1YjjW/C5o=)
2: Fzr1By55ZDL1AtjsLrCzN_F0gos.roa (hash: Qt6aTT1EiGUDBJx7fPAgx7FJH8IrDb++OhiY8fc3GRU=)
3: TVVwgauLv5P4p_N1MbSMDHrhgkU.roa (hash: nBwDhWyQjjSPhhqjp9xgHoZZMM8YBA0mhGeSxmJeXVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:16:d2:78:a3:9d:1a:c5:59:02:a9:96:68:39:2f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Validity
Not Before: Jul 23 07:02:01 2025 GMT
Not After : Jul 24 07:02:01 2025 GMT
Subject: CN=2a56545f9f9c60a399639eb38b847b97e333063f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:ee:61:0e:73:ae:e7:c2:dd:ec:c0:88:70:
c3:7b:d9:48:bb:d3:8a:18:78:cb:ab:21:0b:0b:61:
f4:fc:94:76:6e:83:5e:a3:0a:a1:2c:b4:73:1b:fc:
15:28:fe:0a:19:5e:de:cc:79:85:ef:45:02:93:e2:
54:f4:30:7d:6d:a9:b0:78:bd:ed:8f:5a:cb:b5:2a:
a8:db:aa:d0:2c:36:d9:7f:62:10:89:51:bb:3b:29:
33:83:0b:37:e3:50:5d:24:96:33:01:78:7f:3d:3b:
8d:2c:21:20:99:cf:48:0f:e8:a3:ca:d5:bb:34:f4:
4a:25:49:a5:67:a4:c1:e8:63:ae:56:b8:3c:06:bf:
24:4d:f4:3f:d5:7d:5e:8f:f0:19:c8:ad:9e:b8:54:
e5:e2:09:2a:f8:8c:45:c7:df:80:7e:0f:df:a0:1e:
29:20:8c:b5:a5:3b:fe:cc:e9:14:6a:25:f6:52:bb:
1d:e7:1d:06:f4:23:2d:a9:f9:ca:13:ec:e3:14:4f:
00:e1:6a:66:2a:e5:fc:dc:12:d6:e0:8b:fb:4a:2d:
c6:da:9a:ea:1d:76:34:38:40:2d:2a:de:3d:95:1c:
83:a2:67:18:bf:50:46:1b:b5:cf:d2:1d:47:1f:96:
ce:54:04:ba:d3:30:3b:75:3f:bf:0f:38:07:a3:1a:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:56:54:5F:9F:9C:60:A3:99:63:9E:B3:8B:84:7B:97:E3:33:06:3F
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:75:5e:47:54:8d:26:08:4f:ea:e3:35:be:58:8e:08:f8:38:
e6:91:e5:0d:e8:a2:27:e2:03:6b:7b:0a:f4:7f:04:05:15:7f:
dc:60:ee:15:43:13:c7:d9:0c:0c:ea:9f:af:8c:71:9e:6b:d1:
4c:85:bd:ae:a3:51:93:1f:fe:bd:88:84:0f:b7:47:5e:d0:ca:
a5:15:0c:9c:38:23:3b:5c:93:e5:71:ed:32:95:b1:b7:ed:0b:
62:a3:2e:33:08:c4:10:cf:e9:fe:15:64:ea:55:d9:5b:e5:18:
f7:e9:2f:44:6f:5a:7e:0d:d6:18:db:81:54:52:92:a0:0f:75:
73:d2:6b:78:00:b1:c2:98:cc:14:37:34:d6:56:52:85:a6:b2:
ca:20:b0:d5:43:8d:39:47:6c:78:34:3d:2a:8d:1b:df:65:7e:
36:f1:9c:ff:90:06:b6:ad:41:a8:b3:11:ee:ea:56:3e:34:53:
ff:60:9e:de:97:66:46:5b:2d:f5:d0:28:01:74:bc:14:10:e7:
a2:87:cb:29:57:b8:f1:da:f7:3f:fb:5f:f3:de:f3:9f:50:ca:
78:c7:61:58:4d:d6:f1:16:e3:3c:2d:cc:ab:ab:fb:27:63:f7:
eb:6e:e7:24:ae:3a:9e:09:de:73:77:e9:6d:b8:cb:e0:e1:da:
79:13:aa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:17:46 2025 by rpki-client