Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
File: Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json)
Hash identifier: LJMjGE12seRoAW8CeCtkfIPKMFMCJbBaMN1vkDvPRMs=
Subject key identifier: 7C:CC:D3:C5:28:E4:88:24:62:4B:EA:DB:56:9A:DF:AC:2C:F3:96:6F
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial: 0199277DAF02388BDBF214AC020C240D3D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
Manifest number: 0379
Signing time: Mon 08 Sep 2025 04:02:52 +0000
Manifest this update: Mon 08 Sep 2025 04:02:52 +0000
Manifest next update: Tue 09 Sep 2025 04:02:52 +0000
Files and hashes: 1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: wPeWK/F7VW3QbzFvaSKnnc+sVGN8/HNHZVLnGkoDLbU=)
2: Fzr1By55ZDL1AtjsLrCzN_F0gos.roa (hash: Qt6aTT1EiGUDBJx7fPAgx7FJH8IrDb++OhiY8fc3GRU=)
3: TVVwgauLv5P4p_N1MbSMDHrhgkU.roa (hash: nBwDhWyQjjSPhhqjp9xgHoZZMM8YBA0mhGeSxmJeXVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7d:af:02:38:8b:db:f2:14:ac:02:0c:24:0d:3d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Validity
Not Before: Sep 8 04:02:52 2025 GMT
Not After : Sep 9 04:02:52 2025 GMT
Subject: CN=7cccd3c528e48824624beadb569adfac2cf3966f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:39:76:c7:86:86:94:55:10:d6:bf:17:d7:80:
c6:ca:28:c5:cf:8f:a4:85:3b:3e:f5:51:b0:f2:ee:
a2:02:c5:62:f2:cf:9f:bc:d7:62:ab:c2:bc:3e:7a:
73:a6:86:03:7e:67:c1:37:e7:98:82:87:3c:d0:ca:
92:f4:d3:19:72:6c:ee:92:2d:19:ea:34:4a:e8:09:
cf:95:54:05:56:0d:4e:b9:1c:9f:88:9e:66:21:9e:
a6:8e:aa:3d:52:9b:5c:4c:07:a0:5b:22:4f:21:88:
3a:d3:6d:9e:4d:53:ac:77:bd:68:19:a4:0e:7b:01:
07:62:06:41:f3:72:da:2f:ef:11:4e:29:8e:bf:c2:
c7:cf:a7:1c:4b:db:11:84:c5:8a:f6:00:83:34:4b:
f8:67:f5:93:d7:07:81:bb:be:43:01:8a:70:e7:5e:
4d:81:73:79:94:de:33:1f:a7:3b:69:f3:66:2d:ee:
b2:ab:e4:5e:85:f1:79:e3:78:63:53:16:9a:99:f2:
b5:a1:ea:7b:22:d6:f0:f6:c6:c8:d7:1a:42:51:41:
62:9d:95:e1:af:69:73:75:f0:2a:65:9d:f3:93:ca:
a5:61:7d:f6:11:f3:7f:de:83:2d:61:01:e0:42:46:
2f:f7:1e:68:d6:82:7c:32:10:3d:1a:c7:29:c8:21:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CC:D3:C5:28:E4:88:24:62:4B:EA:DB:56:9A:DF:AC:2C:F3:96:6F
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:65:6f:be:cd:45:a2:8b:ef:2b:ba:9b:bc:a1:76:57:d3:fa:
d2:af:87:26:28:19:a7:dd:d1:63:b9:3c:b8:9d:f1:1f:9d:9b:
d1:c7:02:1b:e4:06:02:41:f7:92:5f:97:6c:fe:d4:51:2c:48:
9f:18:d4:1e:ef:db:18:ac:a1:53:c4:30:67:bf:72:e0:a4:75:
76:34:80:51:0d:0e:a7:0b:36:7f:b1:f6:43:eb:5c:6b:46:6b:
3e:51:b5:db:81:56:88:6f:c1:df:5b:64:0f:89:cb:c8:ee:2d:
1f:99:3a:e2:b6:99:5b:db:4f:43:f3:c9:92:a8:58:1c:b9:f0:
46:36:9b:11:a7:0f:b7:ed:57:1e:96:d0:bb:e5:b8:02:d0:07:
53:78:6e:32:d6:bb:57:95:f9:79:f3:e6:6a:76:0a:35:04:6c:
9d:64:0a:cf:c7:16:33:4f:b5:2e:f4:0c:af:cf:bd:70:67:98:
d6:15:10:53:54:c3:c1:33:a1:cf:6b:f0:9f:b0:a0:36:3d:0e:
be:62:a9:2a:dc:39:3c:3c:d4:80:fb:20:fa:36:8f:e8:5d:98:
03:bb:ba:2e:b4:38:20:1d:55:e7:07:69:fa:6c:f0:40:55:7b:
95:66:e2:d3:2c:b1:84:b2:a7:0d:1d:51:74:c4:28:e9:0a:ba:
c9:84:f6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:05:07 2025 by rpki-client