Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
File: CO0aVoa6aCicbP5MfDbgN63hHso.mft (raw, json)
Hash identifier: ieUPdUoHdLRsS+aN9AJOfjnO/IPZbP02EaxeyByFgtw=
Subject key identifier: 32:FD:1E:E3:5F:B8:A9:46:7A:60:05:A3:BF:EE:A0:48:D1:1F:0C:18
Authority key identifier: 08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA
Certificate issuer: /CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca
Certificate serial: 01974BFB80A7CE510494B43DC92AE6507845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
Manifest number: FD
Signing time: Sat 07 Jun 2025 20:01:03 +0000
Manifest this update: Sat 07 Jun 2025 20:01:03 +0000
Manifest next update: Sun 08 Jun 2025 20:01:03 +0000
Files and hashes: 1: CO0aVoa6aCicbP5MfDbgN63hHso.crl (hash: rt75Acp+dIK48FgD3Zcf9rrpJIO/ynXJaMe88w3MfyU=)
2: XIYNgLktIjso42Y1xvc7ZQ9ush8.roa (hash: 2xDZhva1yvr4fqGcAJL4jzSvNBum97k23PuodDDKzAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:80:a7:ce:51:04:94:b4:3d:c9:2a:e6:50:78:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca
Validity
Not Before: Jun 7 20:01:03 2025 GMT
Not After : Jun 8 20:01:03 2025 GMT
Subject: CN=32fd1ee35fb8a9467a6005a3bfeea048d11f0c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:71:fb:a6:9d:13:14:15:f5:47:2a:29:63:
db:6e:c9:18:b2:78:ea:56:5f:ae:9c:84:b7:a8:b1:
bc:ac:9f:bd:34:0f:78:3b:02:25:7a:01:f6:42:ba:
67:02:99:fd:e2:2a:96:eb:d7:55:8b:30:9f:f6:a3:
26:19:8a:03:34:34:c1:15:b9:3e:52:b3:c7:be:84:
e6:99:46:5c:12:c7:91:b7:97:e4:72:cc:83:59:ec:
23:48:1f:de:f9:86:06:01:dd:32:ed:89:ef:69:0a:
cf:13:dd:5a:92:41:cc:1a:d1:47:30:a2:69:2a:46:
a4:c1:8f:e1:4c:aa:7c:68:d2:8c:dc:2a:63:14:d9:
fd:2a:ef:08:66:28:be:7c:ff:c4:e7:b3:96:c9:73:
29:6f:4f:74:6b:6a:07:b0:a8:5c:01:36:a2:9f:b1:
59:4d:b3:6a:73:29:7a:0c:3a:fb:62:44:dd:6b:4b:
ea:98:16:f5:75:44:5a:ef:40:e7:45:d9:8a:74:17:
e1:64:13:7e:d0:95:ba:2e:2e:b4:b3:f1:44:3a:54:
66:f4:ed:11:53:93:46:aa:fe:31:85:79:80:99:7f:
66:48:9d:05:08:ff:e8:1b:b4:f4:d0:82:fa:fd:63:
5e:b3:a3:cb:75:0b:51:8e:6e:5d:3d:af:15:ec:4f:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FD:1E:E3:5F:B8:A9:46:7A:60:05:A3:BF:EE:A0:48:D1:1F:0C:18
X509v3 Authority Key Identifier:
keyid:08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ba:8d:bb:54:43:72:74:02:90:22:6a:09:02:7b:cd:f3:7b:
74:0f:53:7f:6e:dc:36:40:99:29:f1:5f:54:86:3d:ae:9e:14:
23:cc:5e:54:0d:4b:05:1f:21:85:02:00:c3:84:7e:56:d4:19:
4c:d4:6a:0d:7f:b1:c7:13:4e:e3:4e:fc:08:a2:c8:53:26:80:
2f:61:de:cb:04:70:e6:da:b6:a4:e2:ad:34:71:c0:60:52:6f:
70:08:c4:74:fb:19:bf:3c:f9:6a:b1:3c:67:23:d8:ab:f1:fc:
66:38:8c:9d:bf:1b:36:77:60:f1:85:02:6f:54:12:f1:9d:2d:
bb:1e:46:80:5a:bc:35:9e:e6:c1:a4:eb:e1:bb:31:4a:51:14:
51:19:16:71:12:42:ac:67:77:d4:fb:a5:98:57:ab:e2:27:b6:
33:06:98:53:b6:69:ee:4a:ac:6d:2c:65:8f:d8:c4:d8:9e:e9:
2d:ca:ae:b4:cf:98:c9:ad:84:70:0c:6b:ea:ff:16:a6:9a:fe:
2a:c7:c4:7f:cd:a8:35:49:dd:5c:52:f2:f1:11:fc:8d:b3:e0:
bc:f5:be:c3:5a:22:c7:53:25:fe:9b:c2:fe:8e:09:51:42:3e:
2a:24:09:88:ec:06:d6:24:6a:62:a1:e8:f8:a0:ee:8d:82:0e:
f5:07:54:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:18:17 2025 by rpki-client