Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: jO12oq/rpff7LjT1tjmjBuk+kpe9rC8RjcRfbQyUGyA=
Subject key identifier: DF:47:F1:BA:01:05:99:DD:F1:5E:25:D2:BB:64:D4:A0:86:67:E1:43
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 0196428D22B41622465378A69CC9CAA268E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0A74
Signing time: Thu 17 Apr 2025 07:01:07 +0000
Manifest this update: Thu 17 Apr 2025 07:01:07 +0000
Manifest next update: Fri 18 Apr 2025 07:01:07 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: TrFqyuA8NKMZCYIjByWhuLurdCNLGXCLyU10i1NDYU4=)
2: Uj6BezAzB94GByjzrVUNlk0ht78.roa (hash: dN/7lNPFzPzip+lXMHPQrtHop8fW612WIaM/9STYSBo=)
3: i6d_wSF6B7XpMiMocY9g5Bflzus.roa (hash: Ie39FF54w1T4xPfnonYM6fmqfVN96lUmKfBb590VzVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:8d:22:b4:16:22:46:53:78:a6:9c:c9:ca:a2:68:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Apr 17 07:01:07 2025 GMT
Not After : Apr 18 07:01:07 2025 GMT
Subject: CN=df47f1ba010599ddf15e25d2bb64d4a08667e143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:d8:87:e4:07:81:e7:be:c7:53:30:1a:86:
cd:2d:ab:31:df:52:41:81:f0:61:3b:93:7a:bc:5e:
8d:ac:5a:a9:32:67:3f:ba:94:0e:bd:11:8c:ee:4d:
75:00:27:05:35:e2:cd:4e:13:3d:13:2f:65:11:37:
8a:f2:32:a9:21:63:68:27:25:dd:12:d7:6f:d5:b5:
56:14:18:55:94:5f:e8:96:46:1e:74:b3:13:6e:80:
1f:9d:ad:e9:fb:be:8a:37:a2:20:dc:91:41:0c:74:
37:61:74:e4:da:8f:33:ba:e6:2f:7d:45:f5:66:61:
5a:51:b3:73:70:82:fd:71:0c:b8:87:cf:dc:4e:5f:
9c:b0:fe:18:ea:cc:c9:b4:be:57:d5:09:ef:d8:a4:
cf:02:9b:8f:5a:e1:ea:5f:5d:fc:56:83:00:ec:b7:
6c:47:f0:1e:70:30:f1:2b:d0:5f:7e:ca:48:40:59:
71:91:f3:0c:4a:9d:1d:9a:c4:70:8d:51:c3:71:41:
0f:d9:75:c1:14:5e:84:aa:0d:2d:93:f0:39:e7:2c:
a8:02:31:58:22:ca:28:2e:cb:b3:0c:06:23:6a:28:
30:f4:72:f1:93:20:a2:dd:8d:f9:ca:11:13:df:c9:
03:4e:c2:4f:96:dc:dd:70:a4:30:7d:b7:1e:2e:96:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:47:F1:BA:01:05:99:DD:F1:5E:25:D2:BB:64:D4:A0:86:67:E1:43
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:dc:09:3d:6b:88:8b:dd:97:8c:94:3c:55:93:66:0a:46:73:
10:ea:41:98:f2:f7:a8:9e:b9:47:8d:62:ab:fe:5d:ff:98:3c:
3b:4f:c5:7b:49:d0:a1:83:4b:c9:1b:31:bb:69:b2:9f:9c:f2:
50:03:f6:7c:b7:93:78:45:bc:00:f4:b4:50:24:9a:17:81:e3:
1b:1a:31:b3:3f:cb:47:42:20:f0:4e:f9:52:fa:a7:eb:0d:a7:
e4:fa:2e:5b:c7:0c:64:08:77:1c:bc:45:c0:65:bb:ab:44:7b:
b8:31:50:a9:5f:18:61:90:59:d0:7a:3d:e3:48:1b:8b:5f:ba:
d9:e6:aa:da:6d:fb:2e:68:de:9d:04:97:a7:27:c4:bd:24:e8:
0a:96:17:27:52:42:b0:c8:82:1d:3c:fb:8b:5f:1d:4b:3a:15:
30:5b:c9:21:84:74:83:5c:4e:f2:47:88:58:9e:e5:22:8c:27:
9b:f8:a6:94:60:aa:25:cf:46:44:92:b8:b2:d3:94:bb:a9:f7:
a7:e8:a6:87:ad:2e:19:98:b4:6b:7c:a3:ec:ea:3d:b6:f7:08:
51:de:dd:00:8f:50:8d:07:f0:89:a4:60:86:ad:0b:c7:53:9d:
aa:07:63:dd:44:2d:3a:f7:f6:4d:f6:f0:82:4c:d9:68:ff:a5:
05:76:c9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:58:55 2025 by rpki-client