Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
File: _COczybqOCV6B9QJT6bXCyaWn7k.mft (raw, json)
Hash identifier: rN3zN1hMeY+x5BhVpCjCUabxEPgfolzLMC9qJmy27fA=
Subject key identifier: 6A:3A:DB:9B:44:C0:90:A2:5F:AE:C8:E0:A0:D5:F2:71:A6:B0:21:BA
Authority key identifier: FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
Certificate issuer: /CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Certificate serial: 01964C6C0CF6DDE6B895972E53F25FD4EEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
Manifest number: 0332
Signing time: Sat 19 Apr 2025 05:01:11 +0000
Manifest this update: Sat 19 Apr 2025 05:01:11 +0000
Manifest next update: Sun 20 Apr 2025 05:01:11 +0000
Files and hashes: 1: 8b2MYp-hkoi3xWAERwOdBetyEr0.roa (hash: xdjzN/dKBz+p1uPtY9z1q8M+hEUT4eY7/Ecx7N8LfC8=)
2: _COczybqOCV6B9QJT6bXCyaWn7k.crl (hash: 7zw/0UGvtaQ2aD6nOhkHST5jewxUiRfYgLyy/YdNraY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6c:0c:f6:dd:e6:b8:95:97:2e:53:f2:5f:d4:ee:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Validity
Not Before: Apr 19 05:01:11 2025 GMT
Not After : Apr 20 05:01:11 2025 GMT
Subject: CN=6a3adb9b44c090a25faec8e0a0d5f271a6b021ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:dc:db:37:44:1c:d4:40:e6:e3:86:86:99:
aa:b1:0b:52:91:09:68:63:f9:fb:6f:06:12:76:00:
57:22:89:b7:dd:8f:4c:8c:1e:62:6f:70:1f:8d:b9:
12:be:1b:dc:54:56:dd:21:1b:f3:f5:0b:37:4b:9b:
2f:e4:8e:2d:8e:ae:58:0b:a1:de:46:2e:d1:3e:85:
ce:a9:72:61:db:35:49:71:1e:2a:40:ce:25:5e:62:
9e:21:3b:22:94:3a:53:54:a7:38:2d:01:82:88:d4:
8f:98:1a:1f:8d:27:77:9c:de:af:25:f8:58:a7:a2:
76:98:a1:4d:a3:70:7b:d4:19:15:06:01:3e:55:c1:
61:63:10:2d:46:7b:a8:ac:8f:09:ec:a2:2a:d6:e2:
0c:68:4d:e0:5c:97:2d:fd:b2:b9:8f:a3:46:2e:b5:
f3:5c:4b:a2:5f:2d:41:87:34:37:75:ee:a5:15:ea:
cd:0d:0e:d9:c6:03:95:27:dc:99:7a:08:9d:ec:d0:
5e:91:68:ad:86:6b:34:20:73:48:01:63:48:0a:98:
52:59:d5:50:43:10:b8:66:36:9d:be:52:2e:38:e6:
3b:b1:ba:22:44:65:d6:e2:60:ec:3f:c4:c9:53:08:
2f:f8:af:8c:05:54:41:89:93:b7:33:3e:f2:30:24:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3A:DB:9B:44:C0:90:A2:5F:AE:C8:E0:A0:D5:F2:71:A6:B0:21:BA
X509v3 Authority Key Identifier:
keyid:FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:67:f1:07:66:05:2e:ca:c2:93:9c:3d:0d:92:d0:c2:86:e4:
3e:00:b6:0e:8f:4a:1c:bb:2b:60:b9:6f:8c:c7:9f:62:9a:8a:
5c:1a:37:d3:1d:31:bd:9e:7b:0a:fa:d3:38:30:bc:98:73:2c:
4c:42:1e:5d:5d:21:6e:67:81:89:3a:d2:a1:cb:6c:96:06:e0:
b8:34:45:cd:f0:c9:46:5a:99:03:7f:77:d8:5e:a8:27:16:c2:
60:c9:80:cc:85:94:d4:55:78:81:f3:14:ab:b2:ac:49:8e:3f:
c7:f9:44:73:0a:0e:d5:dc:2a:80:57:05:01:e4:d9:73:45:6d:
7c:0b:c6:db:27:b4:58:2e:ce:b7:f1:c8:3a:5c:42:a2:17:8c:
0a:da:4f:5a:b3:88:5c:b1:32:b7:2e:98:48:fc:5e:b2:2c:93:
7e:54:98:e8:fa:a9:67:8b:16:8e:f0:d2:ac:64:b0:32:8c:65:
8a:7e:68:a4:b1:07:ca:11:93:6d:39:6d:01:78:22:35:45:68:
4d:74:f0:bc:86:1e:57:9c:dc:30:77:ce:15:f1:22:d1:08:84:
b9:3b:c2:97:c4:86:21:d4:bc:74:1b:d7:06:9e:3c:b5:ad:ba:
ee:28:83:29:b8:22:cb:58:d0:98:e5:3b:48:ed:de:2f:6e:9f:
d1:f1:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:36:34 2025 by rpki-client