Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: h5yubCgwIpS22P/UH0FfjCdIuDMS3C8q45gERPgTefk=
Subject key identifier: 07:1B:5E:8F:AF:DB:DC:68:D9:35:8C:23:6C:78:62:8B:76:40:36:AF
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 019638E4F3F81AB5C50F4CC15F20A65B3124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 121A
Signing time: Tue 15 Apr 2025 10:00:50 +0000
Manifest this update: Tue 15 Apr 2025 10:00:50 +0000
Manifest next update: Wed 16 Apr 2025 10:00:50 +0000
Files and hashes: 1: BepPUqJmcox6vrPVeFLnic_YFR0.roa (hash: C5IbNUmrfVvGpmpP7H7NCibsdAPbj5KKxAELI101al0=)
2: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: sIsCn82eDc0TuSopH4N8L8CKxTZHfz9F9AWU+C/uqak=)
3: yKqwm37t4yVmxr4NwzTqfwD-IDY.roa (hash: MxaSTIqKL5tTZsGpRXKzjl3dEdK1M2+iZYuBArbrbWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:e4:f3:f8:1a:b5:c5:0f:4c:c1:5f:20:a6:5b:31:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Apr 15 10:00:50 2025 GMT
Not After : Apr 16 10:00:50 2025 GMT
Subject: CN=071b5e8fafdbdc68d9358c236c78628b764036af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:27:c5:05:96:f9:9e:2b:70:4a:b1:1d:03:
35:5d:ed:f4:1c:11:d6:40:9f:3b:41:8d:51:68:0a:
d8:08:a7:8f:9e:72:91:e7:9f:82:33:1b:5d:1f:1b:
0a:32:fe:b8:17:bf:42:03:3c:85:b4:78:55:b3:97:
bd:25:f4:8b:b2:1d:07:c8:68:f1:d1:0d:32:ee:70:
c8:cc:8e:73:9a:ec:71:b2:f8:13:ab:d5:ea:a5:58:
01:52:6e:64:7f:8a:99:cd:69:34:db:f2:05:b7:a2:
33:81:d0:9d:49:f8:31:9b:89:fa:e4:cf:1f:07:64:
72:01:89:dd:ca:a0:97:b3:47:ec:9a:f0:a4:87:19:
c5:83:bc:44:06:5d:2a:ab:e1:41:14:ac:d4:fd:6c:
d8:26:ab:bc:e2:ff:f9:0e:2e:11:ce:9f:9e:73:c8:
e5:c1:1c:5c:d5:f0:f1:c5:4a:43:60:a8:93:1c:49:
72:83:d9:ea:d2:61:dc:51:2d:59:73:34:e4:e2:09:
27:c7:98:24:6a:5a:a1:a3:06:36:d0:86:7b:b1:b0:
f1:8f:51:2c:3b:3e:99:0d:04:a7:46:79:5e:85:14:
a6:98:72:b6:6f:ca:21:f1:d4:00:dd:37:04:6b:4f:
ee:41:96:de:26:fd:75:72:42:be:f0:c8:b7:94:32:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1B:5E:8F:AF:DB:DC:68:D9:35:8C:23:6C:78:62:8B:76:40:36:AF
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:80:72:66:84:e6:93:58:09:06:f1:9f:2a:05:fa:31:c8:8b:
d2:6c:b2:a9:57:11:95:62:74:44:f0:a3:b2:01:a8:30:10:bb:
ad:34:f0:ba:83:c1:54:02:47:c6:15:fd:9f:d1:7c:c4:bb:3a:
a7:58:9c:16:5e:fd:1c:2d:fc:6f:e0:8c:35:20:d0:d6:fb:f5:
69:af:76:00:13:c7:d3:23:c8:bf:c8:11:22:a8:30:90:f6:03:
f5:96:ef:80:f9:41:76:7d:25:55:8f:8b:4b:4f:0d:53:17:20:
71:22:7c:e1:54:34:12:fb:3e:7a:45:9c:ff:20:3a:4e:2b:ad:
fe:6c:ac:96:d4:0e:50:56:25:c5:5c:24:dd:8b:5c:99:1a:40:
16:39:52:ea:a9:31:bf:f7:e7:a0:ad:2d:ed:fe:a9:19:36:c6:
d5:f1:1d:df:9b:be:ec:43:57:de:d6:ab:b9:08:0e:43:78:15:
40:ed:df:5b:e0:5b:5b:2d:a0:95:59:a5:a2:98:83:b7:5f:68:
73:3d:0c:82:90:77:de:e7:04:af:20:4b:c5:96:47:68:0f:ed:
2b:ff:1b:4f:54:a2:33:82:08:fa:5a:a5:46:59:df:75:76:95:
b7:0b:26:e4:c4:c6:1a:1b:8d:d0:a0:4b:95:e9:3d:f4:58:40:
ea:4b:f3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:57:32 2025 by rpki-client