Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
File: cOEuvY__KmsFTe2d49j2XqY1-4M.mft (raw, json)
Hash identifier: Zmjx1TcPM/U9JuJzElQH7i15tYm48YnCkV4G/0pHd8U=
Subject key identifier: AF:F1:83:91:A8:7D:E4:7F:E2:8D:71:C7:2F:AC:D8:6A:DB:53:D3:C9
Authority key identifier: 70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
Certificate issuer: /CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Certificate serial: 019755353AA8C1443B12CFFCE814F30F63AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 15:00:40 +0000
Manifest this update: Mon 09 Jun 2025 15:00:40 +0000
Manifest next update: Tue 10 Jun 2025 15:00:40 +0000
Files and hashes: 1: _OMR6VqRZhlG55gSbNS5mlP8YvY.roa (hash: bSmsi8Rv/FhiuL3CjsoHR6R1aLfmil9//pa878a40EA=)
2: cOEuvY__KmsFTe2d49j2XqY1-4M.crl (hash: SBROwNkddbE+Vh42qi6XluKm3uSurDjX71xrk4egz1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:35:3a:a8:c1:44:3b:12:cf:fc:e8:14:f3:0f:63:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Validity
Not Before: Jun 9 15:00:40 2025 GMT
Not After : Jun 10 15:00:40 2025 GMT
Subject: CN=aff18391a87de47fe28d71c72facd86adb53d3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:b5:73:f4:b1:c7:76:cc:c8:51:88:51:f5:
46:34:5a:78:04:64:aa:70:1f:0d:18:f2:ca:14:64:
3a:fc:a2:0b:c7:91:e4:ff:83:3e:9c:9e:81:42:45:
d7:04:4c:44:b3:70:f5:d9:33:7f:e8:a9:f8:e4:08:
20:68:75:32:c2:20:5b:5b:0c:29:58:97:b4:61:1f:
d3:54:97:9a:98:24:57:0c:c6:50:a7:5d:94:81:dd:
d0:4d:16:5d:6f:00:d8:2a:b6:5b:d2:28:bc:bb:1c:
7b:b5:ef:64:4d:3b:86:00:98:22:24:4b:9b:f8:73:
cf:0d:60:45:b6:49:a8:86:76:20:8f:a7:db:28:0a:
b8:7b:ff:1c:5e:b4:93:db:9e:d4:e0:bb:f5:51:9e:
30:71:20:84:3b:4c:31:bc:69:e1:55:80:fe:db:14:
3a:cf:ec:56:d8:c5:cd:7f:45:bc:72:d9:03:b9:c5:
d6:f4:50:9d:19:62:71:59:81:2a:f4:ce:1a:af:fa:
ab:dc:af:c4:4c:57:6d:ce:fc:2b:f1:f6:79:6c:b0:
0c:dd:53:ae:19:bb:72:d3:e2:49:1e:93:de:f0:ea:
cb:fb:ee:f8:5b:50:cf:76:e6:3d:7f:fb:f8:93:9b:
ec:b4:44:31:f7:2a:d6:3a:61:99:7a:ee:bf:fa:74:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F1:83:91:A8:7D:E4:7F:E2:8D:71:C7:2F:AC:D8:6A:DB:53:D3:C9
X509v3 Authority Key Identifier:
keyid:70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b8:5e:41:bb:25:23:ca:98:c0:4b:12:08:8e:0d:ed:c3:2f:
0f:85:d9:d2:e6:a8:54:31:2a:a1:4b:49:29:4d:0b:ef:07:08:
1f:cf:2c:fe:73:96:6b:96:c2:2c:02:81:cc:fa:2d:de:f6:3f:
f0:50:52:38:e8:f7:fe:33:46:6f:a9:b0:4e:71:c8:71:ca:7e:
09:3d:4f:03:9c:d0:02:1b:8d:e0:30:88:79:48:8a:2d:05:98:
51:5c:3e:4d:88:6b:00:30:c8:99:e0:51:6b:80:c9:22:50:49:
49:03:c0:9c:7a:7a:94:64:44:ab:a2:83:d4:bd:50:bb:b1:71:
4d:86:b9:61:a0:3b:a5:6a:76:da:17:88:93:23:3a:4f:b9:8c:
93:7c:ed:9b:f9:50:7d:c4:f0:d4:fa:9f:2c:4c:24:20:8f:b1:
a7:c1:68:c1:39:16:5c:63:77:73:69:3c:a0:05:2a:98:a3:bb:
bf:bf:dd:95:06:d0:02:65:8b:c7:57:56:54:05:34:03:e0:dd:
d0:f0:62:a7:bd:6e:01:d9:25:1b:b1:9f:62:63:88:ee:33:4b:
b0:a0:60:a7:8e:64:86:94:4e:4b:b2:5e:81:20:01:18:99:9f:
3c:31:a0:39:b5:39:2d:f4:5c:c9:a6:2d:be:c6:95:b5:07:59:
fb:a7:34:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:59:22 2025 by rpki-client