Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
File: COfXs7xMB5HAz_4_FVWrdz4-0W4.mft (raw, json)
Hash identifier: e9SQyqSohTmAY6WjzTGviFUQXl/IwfRVe5y6V+2i5tM=
Subject key identifier: 55:4A:B8:6B:FF:40:FC:97:09:6D:79:78:93:0F:B2:94:FB:78:F4:2E
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial: 01974A436B907DE9A722063BF93B424E9D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
Manifest number: 07AA
Signing time: Sat 07 Jun 2025 12:00:21 +0000
Manifest this update: Sat 07 Jun 2025 12:00:21 +0000
Manifest next update: Sun 08 Jun 2025 12:00:21 +0000
Files and hashes: 1: COfXs7xMB5HAz_4_FVWrdz4-0W4.crl (hash: KbAAf3eBJZ6TnK5PBAEselAHgjPLbGV22wfr91xevcw=)
2: khFY4LCzs_C_2FKxTxDOR-38KnY.roa (hash: XM0c5kYBwYH9YLOtd32YXHex7zgvtOBEgciRDVMSUbU=)
3: qvPm57YEBA1Gnl47iz-cQbRx7UY.roa (hash: tBKdpc8P9meJArJGr//IYbXNDI8iochN8kxy5UtDRE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:6b:90:7d:e9:a7:22:06:3b:f9:3b:42:4e:9d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Validity
Not Before: Jun 7 12:00:21 2025 GMT
Not After : Jun 8 12:00:21 2025 GMT
Subject: CN=554ab86bff40fc97096d7978930fb294fb78f42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:85:b1:2f:93:0b:df:95:54:a4:02:7d:88:93:
0a:d3:47:e7:43:06:03:f9:32:28:5b:cf:d6:cb:31:
58:3f:f9:01:6b:f8:bb:12:ec:de:f7:81:90:bd:62:
7f:c9:0e:7b:5c:a1:ea:03:0a:34:90:87:8a:4e:5a:
0e:6b:d2:f6:55:b4:9a:be:94:12:0d:04:ba:c5:3d:
33:38:87:b0:ef:29:0f:35:83:12:ea:3f:bc:7d:28:
3a:46:90:49:cd:41:58:e2:8b:d1:a6:39:2b:f1:13:
40:12:77:ea:72:f3:6c:c3:3b:a9:ad:df:c5:c1:c5:
75:a0:41:49:14:29:ac:e3:d8:3e:2e:81:89:25:21:
f3:68:2d:22:5b:7a:08:a2:f3:4d:16:0d:f2:13:35:
93:6d:79:db:d5:6b:d8:38:6a:7f:92:1b:c6:c0:af:
77:22:20:2b:e6:f0:98:ae:8a:37:89:da:3f:18:70:
fb:df:52:1a:a9:f8:78:74:83:fd:3a:ec:b7:a4:b2:
0b:74:db:62:31:d0:19:18:f2:65:9b:1b:4e:b0:25:
04:5b:e6:be:8f:73:db:e5:7b:1c:54:96:1f:76:f5:
e1:5f:fe:f5:f4:dc:80:e5:c7:cd:8a:51:0b:51:18:
1f:69:a9:bc:d8:d6:5e:ca:0b:f2:bb:0e:43:a4:a1:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4A:B8:6B:FF:40:FC:97:09:6D:79:78:93:0F:B2:94:FB:78:F4:2E
X509v3 Authority Key Identifier:
keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e0:1a:7d:25:2d:f2:a9:00:a5:3f:40:f1:17:91:99:d3:fc:
b8:ab:43:14:47:14:08:9e:51:b7:e8:83:5d:bf:8f:7d:3e:1c:
4f:39:8b:d6:2c:f6:23:1e:26:2b:ac:d0:6d:39:0a:21:c2:17:
cc:39:27:09:7c:f0:f6:cd:d4:3d:8f:00:86:6d:7a:dd:5c:7e:
b1:6e:11:3f:d5:29:4a:19:33:80:3c:42:db:92:5b:b7:8b:ce:
0a:36:1c:39:37:98:7d:36:29:f9:d0:a5:52:fe:13:42:d3:1f:
b3:86:1b:9d:26:cd:f3:ec:a3:46:90:33:ea:36:43:8d:81:f1:
87:ad:0a:6b:8f:9b:69:0b:6d:70:ed:54:e8:63:fe:40:e0:76:
a4:f9:9b:00:53:53:da:09:2f:4c:dd:14:55:9a:8d:bb:77:10:
18:40:ca:95:75:00:7a:1e:6c:e1:78:15:de:a4:6c:91:87:12:
11:3d:40:62:f5:e9:14:26:42:4a:88:90:78:aa:62:c8:62:08:
e9:25:a6:07:1e:73:47:e1:67:4f:b7:7d:7d:6a:ef:46:fc:15:
20:ef:45:3f:21:d0:c5:db:f2:a5:38:d5:eb:8b:88:75:4e:e2:
60:64:66:a4:3c:52:cf:24:90:1d:55:07:f3:56:3f:ac:46:5d:
e1:f7:6c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:11:50 2025 by rpki-client