Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
File: cOetBZggimr50VAKdA1zvPKPA4Q.mft (raw, json)
Hash identifier: xwKCktgonEuzkyeAvRDqGEZh0X6CfPCuJqm+NRO8SmM=
Subject key identifier: 13:97:68:E6:08:D1:C0:E6:F8:ED:D0:D2:35:87:E1:27:25:F1:03:47
Authority key identifier: 70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
Certificate issuer: /CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Certificate serial: 01974FA1226589A72FB09C38A8FC59D3DCE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
Manifest number: 12A3
Signing time: Sun 08 Jun 2025 13:00:49 +0000
Manifest this update: Sun 08 Jun 2025 13:00:49 +0000
Manifest next update: Mon 09 Jun 2025 13:00:49 +0000
Files and hashes: 1: HH4kNc1X7Vv3MoqhViTWK_E_VGI.roa (hash: O3Hf94Oha/v7Hh9wzuFaVr7kYXEFrWI2haBjKaDT/FA=)
2: QRWbN9gDLtiBKX0OHWitK4sar4Y.roa (hash: 9r207a3pRIUCl7V+9HyJcMsCjA45mcSFholzvZsRQ5g=)
3: cOetBZggimr50VAKdA1zvPKPA4Q.crl (hash: uLycbn54utyhPcjB/cnxGF26xohzO8Zn4tTtmpaiaZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:22:65:89:a7:2f:b0:9c:38:a8:fc:59:d3:dc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Validity
Not Before: Jun 8 13:00:49 2025 GMT
Not After : Jun 9 13:00:49 2025 GMT
Subject: CN=139768e608d1c0e6f8edd0d23587e12725f10347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:07:9f:be:b3:d9:94:ca:be:07:04:e6:92:
b7:67:ac:75:dc:e4:15:c4:62:ea:02:34:ef:e7:96:
4d:98:ad:ce:9f:0c:3a:91:e9:96:47:96:24:ff:bb:
22:10:ba:43:46:9e:b4:5a:12:59:2e:0d:5b:72:78:
09:1c:e1:b8:d5:d4:c9:b5:03:96:27:6c:a8:66:4b:
64:7a:f1:32:ac:0d:fe:9b:3a:71:e2:2e:ed:67:16:
bc:61:a0:84:18:e9:20:a9:44:da:e4:62:c1:7b:b0:
a2:fc:ff:c1:29:f9:2f:08:49:36:c2:97:7e:e2:b0:
8f:e8:e8:12:60:87:0c:bc:3e:8c:e2:50:37:79:ef:
50:5e:6f:09:7f:15:b3:c7:ce:ef:e2:37:4a:9c:c7:
10:6d:ea:4d:27:95:75:65:e4:07:29:77:a9:53:b7:
77:24:23:91:19:65:1c:02:aa:df:74:bb:c2:5f:c0:
19:53:62:01:56:06:da:3f:91:59:0f:13:ef:21:6b:
c3:4f:02:98:79:2d:b8:5d:e7:9b:99:04:e5:a4:3b:
42:2e:1e:8c:3a:74:a6:4c:af:ae:34:f8:5b:c2:46:
c4:1e:12:64:18:bb:c4:bc:84:df:87:8e:bf:0e:fa:
77:8c:35:ae:ac:66:e6:0a:14:46:37:19:90:b3:1a:
d0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:97:68:E6:08:D1:C0:E6:F8:ED:D0:D2:35:87:E1:27:25:F1:03:47
X509v3 Authority Key Identifier:
keyid:70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:05:9a:87:26:c7:70:94:46:b0:6f:f1:50:33:2f:e2:88:08:
2b:6d:2d:b1:9c:54:eb:93:37:82:0e:31:2a:70:27:91:64:8a:
b1:a5:13:f9:26:6e:94:b0:b3:fc:58:2c:2c:4b:58:26:f9:41:
d8:ed:b3:89:98:02:14:c9:a9:13:d6:24:b7:95:6c:2a:b9:90:
8f:4d:41:2d:8c:a1:9a:95:51:d5:d8:a3:67:dc:fb:5f:20:70:
83:4d:e3:3a:b4:3e:aa:19:a1:7d:19:7d:4b:13:77:f6:92:18:
0d:f8:ba:e9:19:60:8e:c9:25:47:d0:1e:95:62:d2:37:c6:3b:
e8:82:59:7a:63:65:4f:bf:19:73:8a:ae:a7:04:67:12:38:60:
60:51:53:83:2d:da:cd:d5:61:f0:6d:be:44:46:86:28:61:92:
18:f5:f6:f7:66:86:15:15:5d:7c:91:25:00:de:da:15:0d:8a:
8b:7e:ff:2a:91:21:a3:bc:09:ab:e0:9d:d7:e6:ae:90:56:46:
77:20:d7:80:78:97:cb:0f:78:b0:86:32:e3:5b:4f:2d:cc:41:
4b:8e:87:87:2f:12:19:09:ad:cf:02:56:b6:45:76:01:22:10:
89:23:84:5f:ae:89:9c:76:92:4d:bd:3d:ed:e5:8e:54:8b:6b:
ca:39:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:52:36 2025 by rpki-client