Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier: +PXTTFX4y/hsrg/LT/cB5jyBoifr2hERj2U9/g5cm28=
Subject key identifier: 19:13:32:E2:1D:F5:69:21:24:D5:28:28:EC:FC:E5:48:8A:5E:52:7D
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial: 019921E740A9FE93987DEC622EDDAC8C8ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number: 046D
Signing time: Sun 07 Sep 2025 02:00:27 +0000
Manifest this update: Sun 07 Sep 2025 02:00:27 +0000
Manifest next update: Mon 08 Sep 2025 02:00:27 +0000
Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: dI4JCnpLZ02GnISrAPkoTpXPjaJMOQu2Qih+hUpBA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:40:a9:fe:93:98:7d:ec:62:2e:dd:ac:8c:8a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Validity
Not Before: Sep 7 02:00:27 2025 GMT
Not After : Sep 8 02:00:27 2025 GMT
Subject: CN=191332e21df5692124d52828ecfce5488a5e527d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:e4:45:1f:a9:6d:08:86:ce:be:2d:eb:48:
62:36:f9:91:d4:95:67:99:a4:07:29:c3:d4:c3:7e:
13:9f:0e:e2:48:d9:99:38:81:75:cc:86:cc:de:f6:
c7:b4:54:1e:cf:e6:c8:c6:89:39:76:01:1e:9d:25:
19:86:72:0b:e3:fb:1d:69:15:19:c4:b4:97:55:08:
17:23:1c:c1:ab:dd:65:9f:9a:aa:80:44:ba:93:e5:
96:62:ba:de:df:3d:00:e1:3e:1e:ec:4c:e5:4e:cd:
8e:4f:e9:12:7f:9e:8a:9c:d0:3a:05:ce:3f:b0:16:
19:5e:84:78:b7:db:15:b7:13:d2:fb:da:4a:45:18:
59:ec:e0:3c:90:5e:e5:bb:5b:11:be:80:41:79:55:
c1:5c:fc:0c:c9:a4:1f:21:73:85:fd:08:98:2f:e9:
da:c3:e0:e4:71:4a:2a:01:56:b1:f9:3e:6c:d9:f5:
23:af:60:5a:2a:22:9b:89:16:c5:46:27:71:83:eb:
22:af:e0:72:d6:8d:2a:23:cd:4a:04:99:eb:6e:0c:
66:61:1c:76:cf:20:e1:22:3f:41:af:b8:64:f6:21:
8c:9b:32:c0:c1:e7:28:76:f8:e6:03:50:3f:69:22:
d2:15:33:b6:67:3c:ba:71:42:12:01:b8:50:2c:74:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:13:32:E2:1D:F5:69:21:24:D5:28:28:EC:FC:E5:48:8A:5E:52:7D
X509v3 Authority Key Identifier:
keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:54:69:0f:f4:f6:62:67:07:15:cc:28:0b:01:b2:52:00:9f:
f1:1e:3b:ba:2b:c5:1a:46:e1:51:e7:1d:82:02:84:62:e4:8a:
3d:dc:6a:aa:9a:f7:e7:9e:7c:a7:75:02:a1:61:a2:6e:7c:48:
9b:f9:ae:d5:0c:b5:bf:b0:35:b9:af:1c:1a:29:04:b0:ee:c7:
02:ed:69:7f:27:74:7c:a7:46:e3:04:a9:39:d8:5f:d8:af:a5:
88:e8:74:e9:0f:cf:38:ce:41:c7:52:2b:ee:8e:12:fd:07:82:
76:07:b2:7e:bd:d3:fe:7a:4d:ba:7a:54:00:2f:0e:b4:29:36:
0b:38:de:fe:b5:77:50:e2:bb:d3:d3:79:05:80:81:2d:0e:58:
6c:09:3d:36:30:b7:2f:5e:66:36:1b:02:4a:91:a2:f3:31:7a:
f6:14:cf:b5:7e:14:0b:94:21:bd:b7:ee:ab:8c:18:0e:e7:72:
7a:eb:60:bd:8b:dc:8f:28:40:f7:7d:74:b3:05:9e:36:12:f6:
97:3d:b1:d9:f9:25:0f:ee:66:ad:0a:52:cb:33:3c:f6:07:cf:
5c:7a:96:1b:6c:f2:77:17:3d:fc:b3:0d:74:4e:1f:02:1b:05:
e8:96:56:5f:a5:ff:bf:b0:94:3e:ce:3a:e7:18:ed:43:13:4b:
fe:26:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:01 2025 by rpki-client