Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
File: COfXs7xMB5HAz_4_FVWrdz4-0W4.mft (raw, json)
Hash identifier: z/r6fza2qeemo/5Nr005NACSgeDWe4AbLyJnwQ5RLFw=
Subject key identifier: CC:FD:D0:16:52:54:0F:7C:89:4A:FD:D8:07:0D:FF:C1:5E:E6:87:65
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial: 019A2667367F82681424E6335E6551B5B5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
Manifest number: 0925
Signing time: Mon 27 Oct 2025 16:01:29 +0000
Manifest this update: Mon 27 Oct 2025 16:01:29 +0000
Manifest next update: Tue 28 Oct 2025 16:01:29 +0000
Files and hashes: 1: COfXs7xMB5HAz_4_FVWrdz4-0W4.crl (hash: ssG/Y/gWyN0+dqYCPpKXDuCbEdOziW3A5YSyg+N1Qn4=)
2: khFY4LCzs_C_2FKxTxDOR-38KnY.roa (hash: XM0c5kYBwYH9YLOtd32YXHex7zgvtOBEgciRDVMSUbU=)
3: qvPm57YEBA1Gnl47iz-cQbRx7UY.roa (hash: tBKdpc8P9meJArJGr//IYbXNDI8iochN8kxy5UtDRE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:36:7f:82:68:14:24:e6:33:5e:65:51:b5:b5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Validity
Not Before: Oct 27 16:01:29 2025 GMT
Not After : Oct 28 16:01:29 2025 GMT
Subject: CN=ccfdd01652540f7c894afdd8070dffc15ee68765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:c6:50:91:b2:c1:2c:e7:6b:45:5e:c5:29:
92:dc:36:6d:d6:c2:b7:35:5a:04:b1:18:55:c6:13:
19:f9:69:10:8d:5e:ac:36:a8:28:4e:58:62:3f:ed:
0a:92:01:d9:28:38:c2:fe:87:c0:92:9f:2d:50:1b:
f5:85:f2:ab:fb:eb:74:25:4a:5b:16:43:fd:4e:b6:
a8:af:6d:a2:51:0e:1f:c6:33:eb:2e:73:20:2f:51:
5c:2b:55:95:cc:06:b8:44:60:b9:bd:43:33:20:a2:
2e:0b:c4:f5:3a:05:9e:e3:c3:99:c9:8c:09:7b:ab:
ad:ec:43:0d:0d:1e:9d:a4:2b:2b:4d:cf:b1:45:c6:
e6:db:00:ad:87:42:ff:12:6a:30:2e:3f:1e:d6:80:
dc:0e:d9:68:aa:42:24:e4:09:c1:72:4e:30:85:fc:
1e:dd:82:ab:30:8e:65:b9:91:70:c9:bb:bf:52:22:
3f:ee:cb:17:97:97:a9:83:c9:62:de:5e:14:0a:b4:
98:35:e3:e7:ed:ca:f7:3b:c0:47:f8:60:85:cd:c1:
c1:79:ad:9b:6a:6f:f4:1d:83:bf:e8:e6:89:8e:c3:
6a:be:ec:85:83:e4:65:52:6d:f1:ba:43:10:17:e9:
d2:79:91:a7:25:8f:90:cd:5c:14:75:ab:6a:c7:0f:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FD:D0:16:52:54:0F:7C:89:4A:FD:D8:07:0D:FF:C1:5E:E6:87:65
X509v3 Authority Key Identifier:
keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7a:1a:05:30:e3:18:cc:31:b1:48:cd:e3:92:6a:7d:71:e1:
ac:3e:f3:9c:2d:64:1e:90:85:36:c2:00:08:13:52:c6:42:cb:
42:d6:36:5b:63:c1:67:20:a3:30:ad:58:fc:62:12:d9:80:4a:
8e:e6:8c:d2:76:66:bf:d4:69:9c:7b:7e:8f:07:a0:ed:c6:a9:
46:a3:9f:6a:27:b0:42:3b:47:23:5f:bb:bb:db:fa:f4:19:d5:
c0:3e:e3:80:a9:7c:e5:64:e6:c9:a9:e5:83:91:26:51:64:2c:
27:3a:d0:18:82:b3:fc:be:11:d5:1e:ba:65:78:0a:ec:47:73:
38:54:50:b9:c7:7f:2b:b8:c5:a7:b1:51:f3:4c:6d:3c:15:82:
ea:02:c4:28:5a:5b:ea:6a:ec:74:3c:57:f6:dd:c0:5b:2f:6d:
9d:97:29:41:ec:8e:8a:ff:94:c4:ef:d1:db:c9:d8:69:0e:cc:
0c:10:c7:90:37:89:65:72:be:f3:d2:f4:6b:66:ed:39:ab:bc:
88:f6:f9:06:cf:7e:d6:6d:cf:c2:d4:37:a5:6b:14:75:1e:20:
ab:50:12:11:8e:fd:0f:73:f6:c5:d9:08:3b:5c:a2:ff:ac:82:
5a:d1:ef:b7:f9:16:51:a5:58:b2:4a:a6:c3:4a:07:78:a8:f3:
cc:fe:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:02:37 2025 by rpki-client