Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
File: COfXs7xMB5HAz_4_FVWrdz4-0W4.mft (raw, json)
Hash identifier: 1g45I4fyvRECpcluX3QQRbj8Bj+SQI6cr5n9L72HWho=
Subject key identifier: 57:EF:91:27:72:B8:62:CF:25:66:6E:05:D3:96:AB:AC:4E:6D:81:5A
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial: 019849664340CC45E1276426D7086E68F0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
Manifest number: 082E
Signing time: Sun 27 Jul 2025 01:01:35 +0000
Manifest this update: Sun 27 Jul 2025 01:01:35 +0000
Manifest next update: Mon 28 Jul 2025 01:01:35 +0000
Files and hashes: 1: COfXs7xMB5HAz_4_FVWrdz4-0W4.crl (hash: nYg++ipvF9meZEjCA/BnjAJHxLv3DkibpEXQI81EDk8=)
2: khFY4LCzs_C_2FKxTxDOR-38KnY.roa (hash: XM0c5kYBwYH9YLOtd32YXHex7zgvtOBEgciRDVMSUbU=)
3: qvPm57YEBA1Gnl47iz-cQbRx7UY.roa (hash: tBKdpc8P9meJArJGr//IYbXNDI8iochN8kxy5UtDRE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:43:40:cc:45:e1:27:64:26:d7:08:6e:68:f0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Validity
Not Before: Jul 27 01:01:35 2025 GMT
Not After : Jul 28 01:01:35 2025 GMT
Subject: CN=57ef912772b862cf25666e05d396abac4e6d815a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:45:21:45:9c:c8:a8:7a:8e:d2:66:37:09:
27:98:d3:ff:d2:ac:7b:4b:29:7b:52:f5:89:d8:8f:
9b:d6:55:b4:dd:a5:e3:73:e6:f2:0d:bf:df:47:c9:
60:57:4f:97:cc:89:66:8f:0e:83:1c:82:06:0e:18:
f9:3e:22:09:fa:62:26:c7:ed:5f:32:58:bf:5d:6f:
c6:6d:bb:54:6f:34:81:a0:ea:e2:14:9c:f0:b8:80:
b4:dd:a1:15:ba:98:83:84:ac:52:54:b1:7d:7a:7b:
fa:bb:ac:af:95:62:3b:1e:52:c5:73:56:d3:96:f0:
1f:d5:8f:47:ab:44:13:36:d1:72:ba:bc:d2:16:6e:
27:b9:f6:ba:71:51:0d:dd:50:6d:4d:d7:fc:76:8f:
63:b3:a4:19:18:ba:28:8c:64:17:0b:3a:24:2c:b4:
73:ac:30:f9:95:2a:ae:84:e4:bb:a1:27:69:3f:0d:
fb:bc:ab:90:3e:7a:c5:79:9d:76:2c:3c:71:aa:48:
d1:24:b9:01:1f:71:25:b9:f1:13:1e:66:12:cb:69:
57:c4:45:e3:70:65:b0:1e:02:01:61:f7:c4:dc:9e:
17:f4:b0:83:17:ed:11:5b:84:59:e9:45:c3:f1:45:
0b:45:e9:bd:4b:9d:80:35:4d:bb:7b:83:2a:1a:98:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EF:91:27:72:B8:62:CF:25:66:6E:05:D3:96:AB:AC:4E:6D:81:5A
X509v3 Authority Key Identifier:
keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5a:41:1c:88:6d:61:42:f6:70:af:aa:34:71:15:df:09:9c:
29:07:40:3a:6a:b0:52:16:0d:72:a8:c9:e3:ec:6a:8e:2f:7d:
21:06:cd:36:de:02:92:b0:66:f6:ed:a4:44:0a:2d:2a:be:68:
ce:b6:fd:b6:6b:85:52:30:ff:77:ee:2d:4a:0d:a0:12:52:8b:
78:33:4b:1b:75:bd:21:82:db:33:bf:19:f2:55:47:aa:77:1f:
5a:49:e7:bf:7b:02:1f:55:12:c9:fc:f5:5a:43:df:c8:7f:05:
ff:c9:48:54:45:21:61:c4:9b:73:ea:a8:45:94:5b:75:77:64:
7c:71:ee:7b:7a:08:18:da:4e:10:74:b2:2a:f4:c5:3e:69:5f:
e3:d5:18:76:d5:16:0b:ea:9d:e9:0c:a0:20:ba:19:3b:e4:14:
c6:5f:82:20:e0:3c:ea:43:17:36:ad:f3:c8:6d:65:a4:cf:c9:
39:82:c2:2f:41:7e:f2:10:41:d3:ac:4e:c3:ad:bb:22:49:be:
50:e6:22:47:ab:8b:29:73:b4:3f:20:0d:07:61:26:cd:9d:8f:
aa:aa:32:b7:4c:23:0b:b6:5a:f0:d5:7f:d3:81:e2:9a:6a:d3:
8e:4d:61:64:f0:f0:0a:4b:e2:29:8f:f2:82:9f:ca:1a:0e:a7:
c5:e4:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:50 2025 by rpki-client