Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
File: coe8FdmVjihdWllYuOZJfl_OkfU.mft (raw, json)
Hash identifier: OI1l3NBN8N5nmSIEnnEaraYxeOVoWTwqmjlCWABj47o=
Subject key identifier: 21:97:3C:4C:E0:9B:CB:97:44:D6:CD:E4:3D:6E:10:7E:11:9A:13:93
Authority key identifier: 72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5
Certificate issuer: /CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
Certificate serial: 019847E5020156FFA3777ED8843EB434B167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
Manifest number: 0AE0
Signing time: Sat 26 Jul 2025 18:00:47 +0000
Manifest this update: Sat 26 Jul 2025 18:00:47 +0000
Manifest next update: Sun 27 Jul 2025 18:00:47 +0000
Files and hashes: 1: coe8FdmVjihdWllYuOZJfl_OkfU.crl (hash: aRJrDMlaPOfRGXYy4MEG25pRFj09XVUD3X+Mnci4XLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:02:01:56:ff:a3:77:7e:d8:84:3e:b4:34:b1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
Validity
Not Before: Jul 26 18:00:47 2025 GMT
Not After : Jul 27 18:00:47 2025 GMT
Subject: CN=21973c4ce09bcb9744d6cde43d6e107e119a1393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:32:37:3e:6f:dc:4d:26:18:cb:51:04:1c:59:
97:df:ec:48:c0:a3:f2:d7:a8:97:fd:b8:e2:dd:e3:
77:01:e8:00:29:9b:89:3a:97:4a:5c:23:ff:a4:65:
8b:06:fc:4e:81:ec:53:39:4a:18:09:39:b6:b2:5e:
0d:e4:4d:6d:ca:1d:5d:f2:bd:9a:6a:28:97:2f:f7:
bd:bb:8b:ed:2e:14:22:a6:45:16:2c:74:ac:8a:a0:
b9:e6:4e:1d:92:b7:05:26:9e:a4:e9:3e:d0:6e:57:
ec:da:51:68:9b:09:a2:23:c2:ba:78:9c:05:b0:5c:
55:5a:f7:d6:0a:51:77:9c:41:9a:a7:be:ab:97:79:
78:d8:61:59:2d:4f:d5:f4:db:a5:67:cb:4d:fc:50:
65:26:ec:6d:a0:27:6f:0c:64:16:fd:67:29:da:0d:
c6:5a:d0:d6:cd:46:0d:80:a2:07:fe:bd:fb:e3:11:
74:b1:a6:f6:c8:b0:13:71:1b:48:37:a4:4f:22:d7:
c5:79:cc:8f:e3:32:34:cd:7d:a9:5a:8d:88:a6:df:
4e:0d:4a:76:73:20:68:a5:ae:a2:3d:77:83:70:e4:
1b:5e:a0:87:44:37:dc:ac:ea:97:39:c2:e5:11:18:
db:45:fb:75:1b:ed:6e:69:72:ee:b9:26:5c:39:c9:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:97:3C:4C:E0:9B:CB:97:44:D6:CD:E4:3D:6E:10:7E:11:9A:13:93
X509v3 Authority Key Identifier:
keyid:72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e6:16:e1:0e:a9:1d:16:be:25:5e:6c:e1:37:23:1c:5c:48:
99:03:cf:47:09:64:ba:f6:99:b9:b7:48:f7:d9:cd:5a:6e:46:
1f:d8:36:c8:1b:96:6e:7b:fb:fd:fe:25:19:3f:01:08:3b:1c:
09:3a:2a:a2:83:a0:f9:d6:bf:d7:fa:d2:3f:ce:47:f9:8a:05:
b2:be:f4:5c:33:ea:0e:af:2a:81:ec:4f:15:67:30:cf:87:e3:
f4:8d:c2:c3:63:89:51:41:98:7a:02:9c:32:a9:53:10:68:b4:
96:e9:06:f9:fa:a8:e7:df:dc:40:d5:22:02:44:29:14:a7:8f:
4e:2c:12:21:ab:60:90:ce:89:54:89:7d:c3:4e:b0:f6:09:64:
be:cf:05:94:d2:a7:3e:5e:20:f8:95:4b:f5:10:4b:45:f5:bd:
b5:43:08:c8:c4:4c:50:3c:1b:fa:a5:46:10:7f:88:f1:aa:24:
73:38:50:12:04:db:2e:e5:13:66:6e:5a:28:64:ad:bb:a4:af:
e0:cf:12:0f:10:56:ef:48:52:9b:c2:c5:fa:ba:74:69:2d:11:
85:80:94:51:fa:bc:0d:64:af:e6:bc:73:d4:6b:8a:1e:f1:22:
d9:f5:e6:f6:f1:ae:2e:14:14:71:a5:39:0f:44:66:a1:6c:50:
f8:d4:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:25:44 2025 by rpki-client