Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File: MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier: PzEJOmEXrlg/zQ2Bh+Qzb6moU+eE1Hvs7oJUFvCc4EM=
Subject key identifier: 20:0C:68:D9:30:EB:98:CF:2D:26:90:76:D7:2F:EA:CA:D2:0C:7A:4B
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer: /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial: 01992CD8D611352EBE161BF7F8C1700506CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number: 11DE
Signing time: Tue 09 Sep 2025 05:00:32 +0000
Manifest this update: Tue 09 Sep 2025 05:00:32 +0000
Manifest next update: Wed 10 Sep 2025 05:00:32 +0000
Files and hashes: 1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: mxtkXRndHIY7NtESxreKadHMrrDqGdK4p5YRwg5Yk2w=)
2: rER2RyM9WMWv62airMbML41Jj_A.roa (hash: Vq04pvE8uFONGjHiSeRfJcN2ONH656v/BmVYpoQ3tn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d8:d6:11:35:2e:be:16:1b:f7:f8:c1:70:05:06:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Validity
Not Before: Sep 9 05:00:32 2025 GMT
Not After : Sep 10 05:00:32 2025 GMT
Subject: CN=200c68d930eb98cf2d269076d72feacad20c7a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:b5:93:a0:b3:b1:bf:04:6e:cb:74:32:0c:
3c:c0:e8:e0:e9:76:17:35:46:88:30:3b:05:82:1b:
0f:f7:14:67:a3:9e:db:7e:52:ed:9f:f5:cb:72:cf:
7f:2a:67:71:ca:f8:d0:17:c7:1a:d8:a9:06:83:1c:
a6:4f:c9:1a:d3:8c:70:38:8c:2a:15:71:bf:6c:59:
d9:35:30:27:78:20:8b:25:a3:df:9b:8f:6a:1f:be:
ea:08:74:95:3d:73:76:af:a7:56:94:5e:14:d9:dd:
07:69:2a:50:a7:ff:b5:1d:6e:45:02:d7:1f:ba:06:
57:13:9a:a4:4a:c8:9f:52:87:82:88:bc:05:96:4a:
f1:fc:c7:e6:0a:f4:39:f8:a6:bc:d1:b2:1b:04:a7:
5d:f6:2e:e6:30:e2:55:04:b1:ee:46:43:96:aa:5f:
5d:46:9f:a6:f6:3c:af:33:a5:d0:ff:d3:7d:39:8b:
bb:b5:89:00:be:0d:f9:b7:7c:84:85:08:09:09:e3:
d3:51:39:2b:7f:d7:4a:7a:37:9a:a3:7b:ad:de:83:
38:62:a3:47:76:c1:b1:19:2e:31:75:0e:d0:77:52:
49:ba:1f:2e:cf:e6:af:3f:7a:e8:20:53:8c:b0:a0:
2d:da:fc:cd:46:9e:af:b0:99:7a:7b:d0:68:76:e8:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0C:68:D9:30:EB:98:CF:2D:26:90:76:D7:2F:EA:CA:D2:0C:7A:4B
X509v3 Authority Key Identifier:
keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0e:59:e9:cc:6e:80:1e:9a:a1:ed:c4:75:d7:51:07:41:c5:
3f:4c:ef:6c:5b:ca:3f:d0:fd:22:9c:40:a1:39:66:de:7f:ef:
b4:4d:ca:2c:b0:45:89:e2:52:f1:db:73:c8:1c:01:9d:51:8a:
1f:57:91:db:a6:98:d3:de:74:60:0e:8d:13:8f:26:48:28:43:
86:45:03:1e:e9:3f:95:68:c1:93:6c:e4:aa:62:f3:61:18:f3:
b6:54:49:9e:43:67:b4:c4:8a:d3:b6:3b:27:e3:e3:9b:8f:d4:
d7:df:4c:06:0b:c7:dc:7b:72:33:fc:b3:1c:c9:f1:a6:76:1e:
92:9c:de:f1:42:ad:44:28:d9:f3:f8:74:98:b7:9e:43:a2:77:
86:4a:75:0e:9c:72:01:35:f5:5d:ac:b8:c4:a0:7a:10:e1:8a:
e1:fa:24:45:36:8d:84:5a:6c:5b:6d:b6:a6:3d:ef:1d:fd:5e:
b2:be:95:ce:d4:4d:fc:94:4e:5a:73:1e:ce:dc:49:89:f3:14:
3a:d0:ec:c6:aa:58:d3:08:f0:2d:32:b1:5a:a6:57:02:c2:36:
97:7c:d9:80:e1:f0:3d:fb:eb:f0:74:3e:51:76:de:f8:03:55:
f2:12:05:9b:d1:f4:58:99:92:4f:56:5b:8a:18:f1:b0:47:60:
58:d2:2d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 11:27:02 2025 by rpki-client