Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: /NVY0x83XLQLr/Ja4l6eG+070Rw1DAnFtAj69H2+x0k=
Subject key identifier: C0:38:BE:3C:73:10:72:B3:05:1E:E8:7A:C2:B9:8C:8C:E0:51:90:64
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 0198496620FF485DA03A6D89860E95EED597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 1121
Signing time: Sun 27 Jul 2025 01:01:26 +0000
Manifest this update: Sun 27 Jul 2025 01:01:26 +0000
Manifest next update: Mon 28 Jul 2025 01:01:26 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: Y6KwYGdulpRO+mH3EHSv3VDi2NGGtI5dtTyN9WdEC3w=)
2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:20:ff:48:5d:a0:3a:6d:89:86:0e:95:ee:d5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Jul 27 01:01:26 2025 GMT
Not After : Jul 28 01:01:26 2025 GMT
Subject: CN=c038be3c731072b3051ee87ac2b98c8ce0519064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:3f:bd:c8:56:8f:d6:d0:e1:73:12:cd:a2:
94:d0:26:0f:74:a4:0c:3a:ad:4d:10:88:8f:55:33:
5e:fe:1a:9d:8b:1a:cc:8a:91:2c:1a:37:88:89:66:
23:c6:a5:66:ed:55:45:cf:3c:84:3a:80:ac:e8:d5:
57:11:93:ed:9a:ac:3c:2c:af:b0:41:ea:cf:09:8d:
b2:1b:07:1a:7e:db:0b:f8:c9:9f:8c:7c:86:f0:91:
f9:cc:96:1d:07:76:81:e1:f0:2c:e8:b2:22:07:1d:
66:61:10:d2:aa:5b:eb:43:f6:c0:c6:c4:ae:8d:91:
78:d9:99:58:b6:36:d2:af:84:e8:9f:4d:40:cc:90:
40:5f:c7:cd:de:4b:18:5a:8d:87:e0:c2:28:63:07:
e4:2c:e8:88:52:5a:f5:c0:64:1b:47:cd:f5:f2:e6:
59:5a:38:66:4d:aa:3c:f3:1d:91:26:30:ed:e2:23:
52:53:33:1f:27:6e:d2:c5:1d:46:d3:76:7c:62:45:
65:65:6c:5b:58:2f:d8:7f:c4:95:24:d8:2a:8b:c4:
9c:60:51:93:6a:d9:94:3b:ad:94:19:ea:a9:7e:40:
7f:b8:c7:6b:2e:0f:55:61:10:ee:5c:a4:2b:77:89:
59:ab:6e:6e:f5:f9:4b:34:5c:6d:4c:de:a9:45:82:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:38:BE:3C:73:10:72:B3:05:1E:E8:7A:C2:B9:8C:8C:E0:51:90:64
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5d:1a:35:9c:55:42:f5:f1:0b:cd:33:15:94:f2:5c:cf:c2:
05:5c:5a:e7:0e:77:c2:2f:72:f6:41:14:67:8e:b8:c1:0a:ac:
11:27:da:1f:b1:d1:0b:02:2c:b3:a5:4c:09:fa:b2:1b:97:2c:
18:ba:85:29:61:e4:61:7e:da:38:6e:7b:46:89:df:f1:cd:dc:
ad:41:56:40:da:0a:ee:d8:02:68:da:30:6d:fd:07:dd:61:8e:
d8:af:1c:00:23:47:62:e8:03:f4:0c:b5:5f:fe:13:4e:5e:e2:
ee:64:ed:73:f0:00:6d:c2:2b:0b:be:cf:09:21:36:15:89:92:
c9:aa:5c:10:19:52:7e:7f:df:f2:bc:ee:fa:12:56:0a:6a:f6:
68:a3:62:ac:6e:32:8d:bc:5a:ba:b6:24:e1:41:53:a9:65:13:
2b:44:a0:95:d7:4d:39:69:62:2d:29:26:2e:22:df:7d:c8:3b:
b1:bd:3d:75:c2:0a:d6:10:b3:9b:f8:b4:73:f6:eb:55:a9:a0:
79:65:73:c6:31:e3:79:f9:ca:15:46:dc:c2:ca:a6:30:70:3b:
66:18:7e:e8:8f:14:e7:a3:f7:c1:95:04:8d:05:8e:10:0c:b9:
76:fa:41:c6:83:ed:71:8a:8c:5d:8b:a4:db:2f:53:22:47:01:
11:a6:89:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:24:51 2025 by rpki-client