Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
File: coB1pPvaq0LFuhkzxwL7anhBAio.mft (raw, json)
Hash identifier: ZMqhPc5bH63+t4nI3LIhMGEclhDpgGzdRQmwcAznGng=
Subject key identifier: F4:B3:A3:1C:C6:B5:7D:24:19:18:E5:F5:39:8F:2C:78:16:D6:95:82
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Certificate issuer: /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial: 01963E0B18FF0B2FF653EB2AAE2F11BF4497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
Manifest number: 0900
Signing time: Wed 16 Apr 2025 10:00:36 +0000
Manifest this update: Wed 16 Apr 2025 10:00:36 +0000
Manifest next update: Thu 17 Apr 2025 10:00:36 +0000
Files and hashes: 1: KtyjoHVh-jWQ52KLDWiih3wa8dM.roa (hash: nNl4uWGbOXfH9a0zpwdYcXAwLZ/cX6WnZQrYg+krLsg=)
2: MlaxuC-MvqxdJWc5pKLiaE76NMk.roa (hash: tH+D4l6q8LLHR1Hf7c2XhR7vBl5T4KLwCh8ScplJjz8=)
3: coB1pPvaq0LFuhkzxwL7anhBAio.crl (hash: E6HY5oWv99PooS0mhYhSxNIUnctaJFuAD96hydIJrNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0b:18:ff:0b:2f:f6:53:eb:2a:ae:2f:11:bf:44:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Validity
Not Before: Apr 16 10:00:36 2025 GMT
Not After : Apr 17 10:00:36 2025 GMT
Subject: CN=f4b3a31cc6b57d241918e5f5398f2c7816d69582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:b9:4b:00:21:3d:67:b0:22:4f:5e:ae:1e:
10:65:94:5a:fe:04:5f:f0:f8:94:50:4a:6a:99:17:
dd:8c:ec:9b:1b:06:dd:74:f9:6c:12:e3:b0:76:da:
3e:c8:76:b4:4f:8d:51:aa:0d:9f:90:d8:f4:2b:7f:
80:e5:0f:4f:0e:ea:25:89:71:c1:66:a3:7f:01:b9:
98:49:1a:b0:62:17:d4:d2:b6:7b:a6:d6:10:b3:20:
5c:42:35:5e:c8:83:15:49:59:2d:f5:0a:64:7e:38:
2a:f3:30:ab:44:de:6a:dc:72:f8:0e:9d:fa:8e:ef:
1a:06:ad:6a:7a:89:7b:05:f0:8d:34:f8:f7:42:0f:
99:f9:e0:fc:82:a9:ad:f7:2f:e9:0c:a0:12:23:77:
fa:59:9c:2c:f9:19:ab:b3:39:32:d3:64:17:93:aa:
7e:66:5d:1e:af:57:e8:2b:9c:72:dd:6c:55:fd:fa:
42:ed:15:66:85:d5:d6:27:87:47:4a:b4:27:df:01:
d5:fb:95:50:57:9f:27:97:03:4e:94:f4:34:d6:4e:
c7:b0:0b:cd:8d:3b:64:d3:2e:bd:b7:1f:3f:20:55:
7c:4c:57:71:67:32:16:6a:04:91:4c:98:81:f8:e3:
8b:b0:62:0d:eb:af:3d:59:1f:43:6a:00:43:57:a6:
71:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B3:A3:1C:C6:B5:7D:24:19:18:E5:F5:39:8F:2C:78:16:D6:95:82
X509v3 Authority Key Identifier:
keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:be:8b:c3:d1:7f:7a:41:06:42:6c:c5:c9:d3:27:c7:fe:f1:
3d:b1:13:bd:1b:23:86:b9:29:3d:9c:67:95:71:b5:6b:d2:94:
e5:dd:78:c6:b8:c0:76:4a:ae:b2:71:fa:99:ec:50:c4:9c:bb:
68:ef:81:23:c2:2c:4f:01:de:d3:77:5e:45:9c:b8:61:07:e6:
5d:66:05:5a:8f:4c:82:12:be:02:a3:fa:1c:82:34:b1:e9:20:
34:3f:73:b7:18:cd:a7:a8:7a:e4:18:b6:08:4f:6b:2a:d6:80:
9b:59:2b:f5:46:e5:32:3e:79:e7:04:02:c0:19:cd:d2:f2:77:
9d:5d:cc:6e:4b:7e:bb:a8:3f:0b:2e:49:0a:98:ea:4c:70:9a:
5d:90:cb:67:63:7d:1a:a7:49:99:fc:ca:1b:58:d9:61:7f:7e:
3c:55:b0:e0:d4:97:12:62:96:31:96:cd:25:19:fd:4d:0b:30:
8c:53:8f:c8:9a:3e:a4:71:e7:f3:90:00:d2:ee:2d:40:0a:04:
46:22:f3:fe:89:df:26:84:0c:73:9f:9b:98:32:83:70:4b:df:
1f:c8:14:aa:e5:12:ba:20:c5:ad:36:65:30:3b:bf:be:25:c5:
bf:47:23:ed:39:a0:88:a5:42:09:a8:55:0d:0d:12:24:fc:4e:
dc:68:30:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:14:25 2025 by rpki-client