Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: 8+Nb5qeeHQhFiiivZe3mpItBIsESsakrqmL03Pwjusw=
Subject key identifier: 84:6E:67:0F:B1:E5:E4:78:65:7B:F8:CC:7D:8D:F2:23:17:7F:49:A4
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 0195127E6460D3306D35CA79BBF0E4BDFDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 0F77
Signing time: Mon 17 Feb 2025 06:00:27 +0000
Manifest this update: Mon 17 Feb 2025 06:00:27 +0000
Manifest next update: Tue 18 Feb 2025 06:00:27 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: mvRn+PtQ69DnQUfK2xG6RNdoJMZwkw+b9ocKXnRkJcY=)
2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:64:60:d3:30:6d:35:ca:79:bb:f0:e4:bd:fd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Feb 17 06:00:27 2025 GMT
Not After : Feb 18 06:00:27 2025 GMT
Subject: CN=846e670fb1e5e478657bf8cc7d8df223177f49a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:d2:0e:eb:1e:8b:5e:3b:ac:81:6a:eb:bf:
f6:10:9d:29:80:cd:cf:43:c8:91:73:67:55:71:6a:
2d:0a:6a:45:d4:f9:98:7f:19:66:8c:05:a6:2d:f9:
fd:3c:e1:39:45:f3:1b:b0:75:f4:d2:ce:88:47:c1:
98:2e:d1:76:82:64:51:1f:09:b7:9f:a8:84:ce:29:
35:a5:2b:99:e2:59:bd:92:e9:ff:47:e0:1c:a3:36:
54:71:08:3d:31:da:a0:ac:20:12:33:21:d7:e1:2a:
b1:e4:47:78:12:ce:ae:e2:ed:82:55:a6:76:f8:ef:
07:d3:73:b4:81:b7:5c:8c:23:38:53:36:47:f2:eb:
bc:a1:86:1e:a7:e0:7c:b8:d0:ae:60:1f:37:9a:3c:
59:ae:e0:23:d8:91:73:41:97:d7:7a:1d:49:cb:a6:
95:7f:36:ae:71:d4:49:d9:1b:6f:37:05:ef:14:b9:
a6:6e:1b:3e:eb:e5:63:5d:04:5c:e0:5b:56:92:86:
c4:1f:b4:9d:4c:f1:eb:5a:8b:f8:92:bc:0a:47:ee:
a6:c5:32:56:30:e5:bd:41:c6:77:36:1c:ba:76:de:
ac:8b:52:3b:b3:20:c6:9d:a7:f4:81:ca:14:df:9a:
24:82:3f:62:5d:da:b5:81:9a:f2:63:49:1b:60:35:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6E:67:0F:B1:E5:E4:78:65:7B:F8:CC:7D:8D:F2:23:17:7F:49:A4
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f1:6f:71:0e:86:f3:4f:30:b5:b1:1e:3d:d1:fa:31:db:4e:
ba:58:d2:e2:8d:86:9f:8b:37:2c:d5:94:c3:97:3d:8e:d8:f3:
4e:13:67:43:81:a4:68:9d:29:9f:94:e6:50:17:12:2e:92:bf:
34:26:44:8a:83:75:dd:f5:2c:45:8b:61:46:54:67:20:30:9c:
1c:fa:80:83:c6:62:83:fc:83:a0:c8:90:26:74:d7:79:fa:00:
60:38:15:b8:63:5b:3d:2b:d6:ee:6f:34:41:7e:ff:03:e5:1e:
5e:75:b1:a3:c0:b5:fb:73:4f:db:2a:b1:98:28:e8:c9:6a:9e:
cf:57:5a:92:f6:21:fd:5c:a1:f1:6a:6f:4d:a6:93:76:17:cd:
6e:ee:e1:dd:33:c9:f6:63:e7:a8:89:ef:81:e2:2a:e3:aa:b7:
98:0d:cb:c9:5e:09:0b:cf:df:47:9f:0b:f5:cf:af:c7:fe:ee:
a6:39:54:e3:e7:36:8a:85:d8:74:1c:21:f9:27:9d:0e:d1:ca:
d0:9b:22:ef:cc:c1:46:bb:51:78:66:81:bb:82:af:06:7e:59:
73:92:18:5c:2a:ca:21:b5:09:ce:82:5b:5c:7f:11:d3:fc:4e:
2c:23:63:69:59:3b:73:30:4e:2a:8a:e3:d1:72:81:97:57:b8:
54:21:7a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:50 2025 by rpki-client