Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier: U/fLMAdC3Eb59g/RQfmYo6WFaDg08H3YYv7cn5Nx4+o=
Subject key identifier: 71:CE:07:6A:63:13:6F:56:A9:C0:C9:E3:45:B8:FE:55:5D:7E:C1:D8
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial: 019A71EEC27437686A154BFAA9E01354EDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number: 051B
Signing time: Tue 11 Nov 2025 08:01:03 +0000
Manifest this update: Tue 11 Nov 2025 08:01:03 +0000
Manifest next update: Wed 12 Nov 2025 08:01:03 +0000
Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: Zmil6w9m0SqEGTc2a8mEWtwceLlrYlWSPRstpN9SSeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c2:74:37:68:6a:15:4b:fa:a9:e0:13:54:ed:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Validity
Not Before: Nov 11 08:01:03 2025 GMT
Not After : Nov 12 08:01:03 2025 GMT
Subject: CN=71ce076a63136f56a9c0c9e345b8fe555d7ec1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:84:5b:9b:a6:52:3e:a9:22:76:07:ec:14:
0f:49:a9:79:dd:1a:5f:e9:e6:a7:95:a5:4d:85:ca:
19:41:7a:46:f4:ab:be:23:57:11:87:55:a5:c6:94:
e8:ca:f3:f3:8a:3e:38:2d:98:73:99:3f:5b:53:04:
f1:3e:33:d0:6d:17:42:65:34:a7:00:51:15:69:1d:
b0:26:99:e1:9e:1b:23:8a:0d:bf:d0:3a:f8:5a:f1:
d9:a6:71:ab:88:69:a7:84:a7:ba:e8:11:a6:39:fa:
09:3d:20:05:5b:07:58:89:34:40:6e:4b:41:86:c3:
9c:03:d2:e2:72:26:ba:05:01:58:03:af:be:f7:1e:
fa:b4:2b:98:6c:65:b4:1a:28:01:3a:7b:0a:b3:60:
53:97:b3:ba:02:c1:96:4d:2e:fc:16:93:40:8f:9b:
ed:5f:0c:54:dc:1e:a1:1a:71:97:a7:b7:c7:94:86:
07:42:02:c6:f2:4d:e9:5d:c1:6b:a9:2d:67:da:5d:
c6:24:f6:be:5e:da:b1:2f:ff:b8:00:5b:93:00:f9:
ee:81:70:6c:67:f3:0f:b3:2e:b0:90:00:85:9b:56:
be:60:bb:7c:a6:e4:4b:9d:e2:d3:eb:d2:fd:de:c0:
e2:f0:c3:45:29:af:4f:cd:d4:5f:0f:9b:9f:40:64:
0a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CE:07:6A:63:13:6F:56:A9:C0:C9:E3:45:B8:FE:55:5D:7E:C1:D8
X509v3 Authority Key Identifier:
keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:54:24:20:af:80:33:e0:b8:6e:b0:90:53:20:01:d0:8c:8b:
01:0a:b4:8f:b1:dd:28:22:ad:04:57:51:18:3d:ec:f3:39:53:
80:56:b8:42:94:d3:cc:63:ba:c0:5f:9f:c3:e7:3f:1d:9a:06:
15:eb:cb:0b:7c:2b:b6:7d:cf:e6:6b:e5:5b:0a:d5:e2:dc:72:
86:46:be:f4:c1:24:eb:8a:57:cb:59:ef:a9:8e:91:a8:05:de:
db:59:81:6a:80:22:f8:51:65:07:c7:96:aa:13:8f:5f:d1:9b:
27:4a:bb:6b:1d:60:b1:02:96:31:a1:2e:2e:f2:ff:e7:38:36:
9e:68:32:c9:ef:25:9b:77:75:42:ba:85:18:3a:ed:dd:4a:65:
9c:75:6d:37:9b:b6:ee:36:6e:0f:59:0a:3b:79:57:0e:03:ab:
a7:3b:19:df:e1:6a:23:29:8d:9c:44:67:ca:f2:e1:48:d6:77:
d3:a5:26:d9:72:00:e2:d1:a5:40:a6:d7:23:e3:aa:80:8f:db:
24:9d:a4:be:9a:6f:77:61:a6:59:ee:f3:a0:f1:66:2a:b2:92:
0d:36:9d:1d:0c:75:5d:57:e1:36:5f:96:5a:67:6e:4e:5d:37:
ff:84:a0:68:8e:93:6b:c1:cc:1d:72:cc:55:05:05:f3:58:7c:
bc:5f:cc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:03 2025 by rpki-client