Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: dlKLRtRFymWHSAe9rqFvZh1jXOgi1kxKjDVU97gAsa0=
Subject key identifier: 98:68:75:C7:C7:7D:5C:6B:18:B5:D7:B3:22:AD:8C:60:A7:0C:94:5E
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 019749312620AC96EC4F7E34D26FF9E40E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0AFC
Signing time: Sat 07 Jun 2025 07:00:47 +0000
Manifest this update: Sat 07 Jun 2025 07:00:47 +0000
Manifest next update: Sun 08 Jun 2025 07:00:47 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: vvsj0anRbBh/mgatfipwWKwSRA7zRzW2u16d2QuPvlg=)
2: Uj6BezAzB94GByjzrVUNlk0ht78.roa (hash: dN/7lNPFzPzip+lXMHPQrtHop8fW612WIaM/9STYSBo=)
3: i6d_wSF6B7XpMiMocY9g5Bflzus.roa (hash: Ie39FF54w1T4xPfnonYM6fmqfVN96lUmKfBb590VzVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:26:20:ac:96:ec:4f:7e:34:d2:6f:f9:e4:0e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Jun 7 07:00:47 2025 GMT
Not After : Jun 8 07:00:47 2025 GMT
Subject: CN=986875c7c77d5c6b18b5d7b322ad8c60a70c945e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:73:96:dc:4e:e1:56:39:3c:37:86:a1:70:
86:f3:25:66:02:73:43:5a:6e:ad:50:0e:76:a1:93:
13:43:22:cb:2a:d6:be:57:c0:c2:28:ff:86:48:66:
b7:84:18:55:72:af:29:ca:d4:b0:15:b4:cb:dc:59:
51:c8:11:21:2f:82:2e:f0:b5:51:db:2f:ad:f3:af:
1f:ac:4d:4e:3d:67:60:1d:f9:a6:ba:f1:b5:66:06:
13:f9:76:33:49:6b:20:03:9d:6e:e3:47:d0:33:2d:
9b:f5:79:7a:e5:91:90:c3:68:df:8e:67:32:3b:91:
3f:19:ce:2f:5c:12:5f:18:a3:af:5f:a4:49:af:1c:
1c:ef:9e:07:b1:5e:5e:91:f3:52:f1:ae:b0:ff:bc:
0f:a2:53:1f:76:a7:bb:0e:c7:ba:f4:30:78:9f:db:
c1:97:3f:b2:06:44:82:8c:2e:00:2d:bd:81:2a:ee:
ad:8f:e3:e9:f5:8d:26:ac:0b:ed:4b:ff:bc:40:f2:
2c:d4:03:ab:ce:27:14:67:67:07:d7:28:89:2b:62:
d1:a8:d0:a9:54:cf:e1:3c:e1:50:e1:57:d5:ca:0a:
cb:28:5e:e9:42:3f:e4:37:cd:35:57:30:73:4f:f7:
7d:bc:ad:d8:d7:49:dc:5f:da:db:47:22:3c:99:d1:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:68:75:C7:C7:7D:5C:6B:18:B5:D7:B3:22:AD:8C:60:A7:0C:94:5E
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:56:d9:f1:2d:a6:a6:18:7b:43:ee:2e:c7:ee:50:15:8b:24:
06:08:88:59:0f:ab:9b:ca:cc:4c:92:6d:c1:bf:49:23:67:52:
48:67:9a:2c:62:5a:38:13:89:0f:cd:8f:01:4c:c5:be:82:2e:
52:80:a2:5c:91:7b:f1:25:9f:1b:b2:87:2c:b8:cb:ed:24:23:
a3:25:da:56:4a:db:e4:af:a8:a3:b5:35:cd:47:97:e7:01:ec:
bc:c6:be:0b:0f:99:72:bf:a2:fd:15:56:4d:00:4c:ee:c6:d1:
98:fe:9b:fa:dc:bf:b1:3b:c1:53:3d:f8:1c:1a:3a:8d:dd:a4:
73:5f:c7:3b:66:76:ff:32:2c:6c:06:f1:b3:82:d1:97:b5:a7:
2e:c2:e7:f5:0e:55:9a:8e:f7:7e:06:24:ed:2b:c0:22:6d:b7:
d7:c1:c2:19:3b:48:f0:90:15:42:d8:17:ec:ec:3a:d9:98:cf:
44:23:12:a7:83:60:2e:24:9d:76:f9:b8:52:dd:95:04:df:8b:
16:f7:52:ab:d9:37:08:99:e3:ba:66:68:dd:ff:ab:41:f0:1e:
a6:9c:ab:83:9a:5f:f5:7f:bd:a0:39:e6:65:25:9f:38:2c:fd:
bf:d2:98:6c:e2:24:eb:86:0e:0f:b4:4c:35:4c:73:be:8d:89:
4e:29:d6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:00 2025 by rpki-client