Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
File: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft (raw, json)
Hash identifier: wb09jXK5Y+3NdihdnyZqTo2w1cenlkGtN42QM3tk6vo=
Subject key identifier: D4:9D:06:C2:73:9D:C3:ED:9C:CA:9E:7B:E6:9D:FB:5D:F4:7A:D8:AD
Authority key identifier: FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
Certificate issuer: /CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Certificate serial: 0199240D8CBEE8DA02E1751DA674BE729625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
Manifest number: 11F1
Signing time: Sun 07 Sep 2025 12:01:31 +0000
Manifest this update: Sun 07 Sep 2025 12:01:31 +0000
Manifest next update: Mon 08 Sep 2025 12:01:31 +0000
Files and hashes: 1: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl (hash: CGi7mE0NpVkEryK9YFY7sbzCBubzZ1Fk87OCqAvR1sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:8c:be:e8:da:02:e1:75:1d:a6:74:be:72:96:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Validity
Not Before: Sep 7 12:01:31 2025 GMT
Not After : Sep 8 12:01:31 2025 GMT
Subject: CN=d49d06c2739dc3ed9cca9e7be69dfb5df47ad8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:ad:3d:c3:95:4e:ce:28:9b:c5:5a:e0:b0:
98:ac:8d:0c:f0:b0:ee:8f:c9:b5:93:ed:63:db:56:
9c:84:17:d4:07:78:aa:57:e5:11:f2:05:1e:16:56:
b5:cc:d1:7a:64:4c:1b:75:b3:08:3e:be:70:3a:6f:
b4:71:e7:94:cb:08:76:7c:70:7a:cd:a9:28:45:f7:
55:49:e1:8d:69:b7:33:10:81:66:b5:36:df:0f:e8:
9c:8f:f1:8b:0f:a8:57:57:bc:c7:27:9a:75:10:4d:
a5:25:90:0b:d1:16:47:a3:c2:f8:3a:5f:03:4a:f5:
ab:0d:23:73:19:df:dd:36:7b:9d:49:4a:05:1f:64:
e5:79:d7:6c:2e:a6:20:ac:76:d0:72:0c:54:1b:9c:
82:73:38:aa:2d:07:28:ec:eb:22:6f:3c:10:97:8d:
35:54:af:68:ef:fc:87:e3:5f:4d:23:44:e1:56:21:
aa:87:36:3d:08:c9:6e:24:41:06:44:5e:96:a4:d9:
b9:07:b9:df:72:30:84:63:71:57:b2:b9:a8:f8:8e:
bb:b3:fe:82:34:4f:bd:f3:f0:91:71:f3:2c:8e:c8:
98:3e:1f:ac:72:d8:cf:30:6e:34:50:bf:a4:d0:bb:
c4:e9:09:0c:15:42:b4:2c:7c:9a:d6:88:ff:83:4f:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9D:06:C2:73:9D:C3:ED:9C:CA:9E:7B:E6:9D:FB:5D:F4:7A:D8:AD
X509v3 Authority Key Identifier:
keyid:FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:52:b7:67:2d:91:05:ae:05:c6:ad:0c:a6:5f:b4:a4:61:34:
1a:61:61:a2:2b:0e:f7:4d:f3:56:ce:b8:9a:78:ef:c5:61:54:
51:88:ea:70:c9:90:87:bd:00:62:ab:14:1f:ee:6c:7e:ce:58:
56:52:6a:83:09:10:1d:63:5b:cf:c9:8a:7b:2d:32:e7:05:38:
f9:e3:50:d2:37:75:fb:15:9d:e7:eb:86:4c:40:66:50:71:30:
38:13:18:7b:cc:dc:f6:ea:2e:2c:09:8c:53:73:21:f3:9a:a9:
7d:e4:06:e3:92:78:94:7a:e9:ff:df:66:4a:76:d6:f6:05:97:
ec:82:c7:ce:d6:58:6e:af:8c:6f:5b:b5:4f:78:e6:86:fb:b9:
0f:8b:61:b1:eb:31:e1:40:6c:6d:57:2f:c6:1e:25:8d:76:f8:
85:18:05:8f:97:88:71:20:64:49:e6:14:b0:6c:a6:3a:da:85:
cd:30:8b:03:07:21:63:cf:e6:8c:99:67:ee:0a:f7:7a:7a:e5:
b1:b3:01:e3:5f:6e:24:55:cf:f5:3c:c8:29:38:fb:4b:50:0d:
a7:58:61:02:77:43:e1:70:d5:cc:90:b7:15:c4:a0:50:d5:3f:
0d:b4:09:72:09:6f:79:b9:6e:27:2d:b5:66:2c:7c:68:28:f9:
31:8a:f5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:40 2025 by rpki-client