Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
File: cOEuvY__KmsFTe2d49j2XqY1-4M.mft (raw, json)
Hash identifier: H4CfJE+d9gQXvBpa2KG9uiiXj7nhm5xvJgnp3LB5m+s=
Subject key identifier: 35:99:3F:EB:88:0E:5B:CE:F6:CD:11:3B:F4:1D:BA:03:C8:F9:1C:0E
Authority key identifier: 70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
Certificate issuer: /CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Certificate serial: 01975B00839C9758EA6987D03177C7F21E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
Manifest number: 1587
Signing time: Tue 10 Jun 2025 18:00:49 +0000
Manifest this update: Tue 10 Jun 2025 18:00:49 +0000
Manifest next update: Wed 11 Jun 2025 18:00:49 +0000
Files and hashes: 1: _OMR6VqRZhlG55gSbNS5mlP8YvY.roa (hash: bSmsi8Rv/FhiuL3CjsoHR6R1aLfmil9//pa878a40EA=)
2: cOEuvY__KmsFTe2d49j2XqY1-4M.crl (hash: Lbo0Z5NDZT86mHzCS7BvOqbqnXdp0H98BCnlB1imGs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:00:83:9c:97:58:ea:69:87:d0:31:77:c7:f2:1e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Validity
Not Before: Jun 10 18:00:49 2025 GMT
Not After : Jun 11 18:00:49 2025 GMT
Subject: CN=35993feb880e5bcef6cd113bf41dba03c8f91c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:6e:cb:15:3a:46:2f:67:e7:db:b8:1a:70:
ce:71:12:d2:c8:f2:f3:42:ef:8a:0f:be:f1:7a:a3:
af:0d:13:2c:c4:d2:14:4c:61:d0:43:e9:96:78:e5:
96:e9:9b:15:2b:b5:26:33:3b:14:92:d6:5c:82:09:
17:ac:55:62:df:12:f8:ab:b6:e1:ac:45:32:27:b0:
6e:3f:8b:a9:17:83:b6:5c:da:3c:b7:34:ad:b6:b5:
fe:5f:0b:fb:a4:28:dc:62:49:02:08:6a:da:47:2e:
2d:fd:a0:eb:fd:38:6b:64:c4:5b:f6:b3:3a:e4:8d:
f2:95:fa:d0:45:cc:cf:6e:cd:1c:72:d4:d4:72:ba:
9d:b4:c9:e6:68:d6:20:4e:2a:83:0f:e4:75:55:ed:
ae:65:77:89:94:5b:76:fd:8d:62:56:95:fb:fd:a1:
a5:e5:51:11:70:4e:08:22:ce:b1:a1:6c:1d:9e:47:
26:cb:a2:83:9b:30:8c:d9:c7:a1:6d:e3:71:87:f2:
0f:d3:aa:3a:a1:3c:a8:6f:d1:e4:86:81:86:05:b2:
9c:2d:16:3c:9b:ee:49:80:4d:8b:0d:f5:62:ff:51:
3c:cf:2f:73:29:d2:2d:a1:81:f9:15:13:cb:38:74:
62:81:f1:49:cf:3c:6e:d1:88:ab:e6:03:b2:6b:e0:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:99:3F:EB:88:0E:5B:CE:F6:CD:11:3B:F4:1D:BA:03:C8:F9:1C:0E
X509v3 Authority Key Identifier:
keyid:70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c5:19:ec:82:77:34:d4:d5:13:42:af:09:02:a8:e5:4a:7d:
24:a0:fd:65:d9:fd:2d:6a:5f:88:78:b7:df:c3:11:fa:e6:e3:
dc:59:4f:a1:f2:7b:8b:7c:78:c5:40:9b:81:28:bb:e6:8c:b0:
48:45:16:92:7d:79:28:4c:96:cb:d0:39:12:06:07:5b:36:bd:
fb:c5:73:36:4a:0a:6e:73:b2:b6:3e:2e:1f:4b:97:51:6c:ab:
77:12:fb:52:25:23:7f:dd:ff:66:d1:d4:c8:d1:1b:bf:98:a8:
a3:02:04:12:eb:aa:94:70:02:2e:8f:5f:98:a2:d8:2e:5e:33:
4f:0c:3c:1b:81:80:27:08:23:48:b6:44:f8:6d:07:5c:72:30:
4d:d6:40:d3:47:61:07:d4:ef:5e:90:23:80:f8:a9:e0:04:0e:
5b:ca:ff:2b:e1:74:5c:b8:e9:5b:b5:12:0b:be:c3:f1:5f:21:
54:2e:9e:30:87:59:9e:87:71:91:14:7a:bc:fe:3f:7f:2e:2c:
9f:37:5e:2a:36:a7:3d:05:c9:34:1a:46:c4:ae:c9:90:a6:c4:
42:c5:e6:98:2c:d4:91:7d:76:ae:cc:1e:4d:7b:a9:2f:cc:45:
a4:0c:12:00:e6:78:0c:91:a6:74:c3:9b:4b:c4:0b:0e:ed:7c:
fd:e3:96:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:47:29 2025 by rpki-client