Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
File: coB1pPvaq0LFuhkzxwL7anhBAio.mft (raw, json)
Hash identifier: BviGzbbAunoQoeliDWJwq+GoNI4wqkJivs0vQepdahA=
Subject key identifier: 1E:50:17:DC:2F:25:8E:70:74:4D:44:B7:F7:F3:6F:2F:99:CA:B2:E6
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Certificate issuer: /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial: 0198CCB8F47BAF8C37D96AA21D966A2900E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
Manifest number: 0A53
Signing time: Thu 21 Aug 2025 13:02:09 +0000
Manifest this update: Thu 21 Aug 2025 13:02:09 +0000
Manifest next update: Fri 22 Aug 2025 13:02:09 +0000
Files and hashes: 1: KtyjoHVh-jWQ52KLDWiih3wa8dM.roa (hash: nNl4uWGbOXfH9a0zpwdYcXAwLZ/cX6WnZQrYg+krLsg=)
2: MlaxuC-MvqxdJWc5pKLiaE76NMk.roa (hash: tH+D4l6q8LLHR1Hf7c2XhR7vBl5T4KLwCh8ScplJjz8=)
3: coB1pPvaq0LFuhkzxwL7anhBAio.crl (hash: u2xYd/Yh1wFQlrfzaPP+Q0vEI4K/LTWkqpY81pCvPRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:b8:f4:7b:af:8c:37:d9:6a:a2:1d:96:6a:29:00:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Validity
Not Before: Aug 21 13:02:09 2025 GMT
Not After : Aug 22 13:02:09 2025 GMT
Subject: CN=1e5017dc2f258e70744d44b7f7f36f2f99cab2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:69:ba:5d:8d:f1:24:03:f2:4d:43:ca:26:
bb:63:74:56:86:9c:a2:8a:11:0b:75:48:07:a4:45:
e8:c4:94:99:e0:f9:8a:ea:41:ea:c2:c1:c1:98:2b:
b7:a9:12:31:5a:31:e1:fe:dd:d0:bc:c2:3b:87:b7:
3c:bf:b2:af:de:aa:5c:0a:5b:c8:49:50:39:dc:a1:
4e:67:32:bc:a8:da:74:a9:0b:23:bf:2c:1f:a7:96:
9b:34:03:e2:fe:50:8b:c3:19:03:14:60:58:25:50:
09:04:d9:9d:bc:18:3f:5b:cb:87:65:9f:9c:4f:0a:
dc:d5:4e:59:8c:f1:69:4d:3d:81:eb:19:84:7b:ba:
a3:70:b4:af:0e:70:be:90:5b:27:b5:02:09:92:db:
32:b4:72:33:de:7a:5f:55:1c:77:7f:6f:54:d6:8a:
e8:85:1f:68:a6:dc:84:78:37:34:55:b7:3b:7e:d6:
93:ec:db:ea:e4:2d:c6:49:28:0a:6c:37:76:95:82:
41:2c:f7:b1:fb:12:b5:db:f2:b7:4d:04:f3:1b:07:
fe:5a:1e:9c:19:6c:a3:9b:c0:34:d5:ff:44:c6:79:
4b:97:49:1c:22:e3:6a:69:9d:dc:16:f0:7e:38:0d:
8e:1c:67:5d:de:55:23:79:f6:ff:ec:a5:bd:1e:f1:
e3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:50:17:DC:2F:25:8E:70:74:4D:44:B7:F7:F3:6F:2F:99:CA:B2:E6
X509v3 Authority Key Identifier:
keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:14:a4:18:d3:79:e8:ac:4d:e1:89:db:a0:44:51:9f:94:3a:
dc:71:90:e6:a0:c3:c3:c3:e3:5c:a7:49:4a:5e:99:19:dc:4a:
f5:74:98:1c:44:22:e0:0a:22:fa:2b:87:a2:2c:ab:01:42:8e:
78:98:2d:73:99:fa:0e:1d:e3:b1:52:2c:70:b0:48:8a:cc:20:
f1:4c:1a:1c:43:c8:74:b4:0f:dc:fd:8c:b6:3c:df:ee:62:e1:
fa:e4:fd:e5:e7:d9:5c:51:8b:c7:6a:dc:a8:2f:be:e5:93:a0:
f9:ad:9e:f9:fe:f9:3b:79:25:e2:03:f5:2c:05:9b:d4:a1:3a:
03:2b:47:ef:94:16:f9:99:15:a9:ad:b3:93:4a:9f:9b:8a:25:
78:ba:b6:56:21:15:c2:65:c6:21:cb:7b:2a:81:78:68:b8:86:
03:d8:31:90:54:d5:e8:32:aa:c5:db:99:d0:d8:05:90:09:bf:
0c:ff:60:bd:4b:23:8d:ac:73:14:03:ac:b8:23:0c:ed:1f:fc:
78:bf:c9:ad:5f:3a:88:b9:97:3d:4a:d1:c6:aa:23:26:50:1b:
bc:6a:61:f4:41:72:ae:a9:86:2f:40:a9:70:58:03:5f:a6:00:
5f:39:a3:3c:40:61:99:f4:42:7a:ac:e8:b8:0e:e5:dd:1f:0f:
00:60:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 15:37:14 2025 by rpki-client