Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
File: cOEuvY__KmsFTe2d49j2XqY1-4M.mft (raw, json)
Hash identifier: F5RBLZUTu1UH5ADk/+cmHM1HlOUAO7yp34y6yW7F0OA=
Subject key identifier: 6F:0E:08:AC:3D:4F:DD:86:46:F3:3C:BD:0B:1F:4C:AE:10:DD:89:B5
Authority key identifier: 70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
Certificate issuer: /CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Certificate serial: 019764A803E318FCA241561BA96F777F6845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
Manifest number: 158C
Signing time: Thu 12 Jun 2025 15:00:21 +0000
Manifest this update: Thu 12 Jun 2025 15:00:21 +0000
Manifest next update: Fri 13 Jun 2025 15:00:21 +0000
Files and hashes: 1: _OMR6VqRZhlG55gSbNS5mlP8YvY.roa (hash: bSmsi8Rv/FhiuL3CjsoHR6R1aLfmil9//pa878a40EA=)
2: cOEuvY__KmsFTe2d49j2XqY1-4M.crl (hash: 6YyAX6Bx9teDax6+B+th1XZ3u+tfoeo/79lSFPt3irw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:a8:03:e3:18:fc:a2:41:56:1b:a9:6f:77:7f:68:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Validity
Not Before: Jun 12 15:00:21 2025 GMT
Not After : Jun 13 15:00:21 2025 GMT
Subject: CN=6f0e08ac3d4fdd8646f33cbd0b1f4cae10dd89b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6c:f3:a5:f9:4a:9f:e4:96:1a:6d:5f:9a:aa:
a6:ff:9c:7d:39:1f:75:1f:8c:39:cd:98:ec:cf:c5:
52:1d:5b:c7:d6:eb:61:0f:32:87:54:66:52:bf:4b:
76:cc:6d:b5:01:9b:7e:a7:49:23:44:be:94:ce:8d:
91:6d:ba:ea:08:b4:5b:78:34:13:99:d4:8b:e7:0d:
49:76:8b:db:9e:13:e0:50:36:e9:7a:f2:87:76:c0:
f0:32:4c:fb:b8:8d:c5:6e:89:8f:59:f2:66:41:1c:
f1:54:98:29:93:7b:82:a3:93:14:9c:d2:86:b0:fd:
7c:26:99:bc:06:79:20:85:ac:d8:41:c1:c3:63:d2:
51:dc:11:26:c2:2a:e4:8f:00:57:c8:97:38:a4:87:
22:30:30:7c:91:9c:dc:15:f1:fc:34:5b:eb:3d:c6:
c6:a7:97:a8:f1:f1:96:c0:1e:c1:d4:05:a1:e6:9d:
25:18:08:26:20:ab:b1:16:46:f3:16:bf:c5:b5:92:
b7:26:e0:e2:72:2b:7e:2c:b8:b0:a4:6d:bb:24:fa:
20:87:32:d5:1b:db:15:74:b6:45:36:58:57:ef:1f:
5c:35:3a:5c:78:8e:71:77:be:f9:60:a9:30:f1:a5:
fe:4a:80:d7:b4:67:33:4e:82:0b:81:76:0f:33:53:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0E:08:AC:3D:4F:DD:86:46:F3:3C:BD:0B:1F:4C:AE:10:DD:89:B5
X509v3 Authority Key Identifier:
keyid:70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:07:44:83:c4:6f:b6:00:ed:bf:e8:53:88:7b:7a:f9:68:79:
fc:06:53:85:c2:02:ce:24:9d:5d:ee:11:e8:39:76:c1:19:e1:
fd:0c:44:2f:83:41:e3:d1:99:38:12:d7:f9:86:75:a1:46:16:
67:09:d5:60:29:6d:77:71:bb:ad:89:a3:9c:a4:f7:c5:70:fc:
58:5e:58:08:36:2f:06:d5:81:69:e2:77:ab:3a:b7:f2:5f:c7:
d2:34:00:40:a2:2d:06:ec:55:11:3f:88:49:6a:9f:9d:63:5a:
fd:81:d4:9d:b4:79:b6:0a:9b:f2:56:1a:d8:24:c9:b4:7e:45:
b0:70:76:b9:ff:20:0d:4c:1d:41:cc:d1:8c:a2:2f:8d:35:44:
90:a4:3b:13:7d:96:ee:93:a9:ab:0d:60:56:56:51:95:80:4c:
84:1f:ad:97:87:c1:3f:3c:07:bd:fa:4c:ba:88:8d:a6:0f:2e:
79:ba:37:77:91:51:b4:4d:5f:4f:95:3c:8e:9e:52:3f:ea:54:
cc:db:8a:04:67:8b:12:b9:5d:e8:cd:b1:69:d1:96:1b:4f:b3:
ac:60:b1:57:46:1d:94:cc:42:dc:62:ed:af:af:c6:71:6c:30:
ec:d5:5f:eb:b2:cc:50:da:32:bd:13:70:99:88:2c:a5:7e:84:
61:f3:61:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 23:14:32 2025 by rpki-client