Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
File: COfXs7xMB5HAz_4_FVWrdz4-0W4.mft (raw, json)
Hash identifier: r/i1har1xEwYkU2QPJIS9IOvawXQMsTf2uG2VFsY7J4=
Subject key identifier: 0D:CC:CF:0E:3C:8F:F1:9A:5D:15:55:24:16:89:49:73:C1:48:97:3A
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial: 019936EFF716FADDDF3545E3C0712B2E115A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
Manifest number: 08A9
Signing time: Thu 11 Sep 2025 04:01:59 +0000
Manifest this update: Thu 11 Sep 2025 04:01:59 +0000
Manifest next update: Fri 12 Sep 2025 04:01:59 +0000
Files and hashes: 1: COfXs7xMB5HAz_4_FVWrdz4-0W4.crl (hash: bOHW5fX/UYiZn7edBOt1g7ZqwN65jlM+qaMuoig4Qeg=)
2: khFY4LCzs_C_2FKxTxDOR-38KnY.roa (hash: XM0c5kYBwYH9YLOtd32YXHex7zgvtOBEgciRDVMSUbU=)
3: qvPm57YEBA1Gnl47iz-cQbRx7UY.roa (hash: tBKdpc8P9meJArJGr//IYbXNDI8iochN8kxy5UtDRE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:f7:16:fa:dd:df:35:45:e3:c0:71:2b:2e:11:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Validity
Not Before: Sep 11 04:01:59 2025 GMT
Not After : Sep 12 04:01:59 2025 GMT
Subject: CN=0dcccf0e3c8ff19a5d15552416894973c148973a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c0:88:77:bf:06:83:65:49:f8:13:41:ea:51:
ea:5b:38:a2:18:2e:71:20:f8:a8:69:91:4c:55:d7:
6a:9c:54:1d:3d:50:e6:32:10:cd:16:81:9d:fc:55:
f2:06:1c:2c:85:2e:d5:f6:51:47:34:dd:63:b1:f9:
72:c7:4f:3b:28:91:4d:ab:a9:cc:9b:81:1a:a8:14:
07:04:8c:69:82:30:81:9f:bd:6b:4f:bb:c8:98:f6:
10:7e:34:0f:2e:d2:e7:ca:a8:b0:7a:c1:81:2c:14:
22:3c:88:30:d6:e9:14:fa:fd:2f:98:41:8a:30:e8:
da:63:8d:5f:09:c5:0f:8a:c3:ef:99:0a:b8:ac:a1:
8d:cd:42:c9:10:09:a7:c2:46:d4:b3:45:24:10:75:
c0:63:28:1d:f4:3b:49:a9:53:36:22:e4:f2:c6:5b:
86:85:8a:5e:8d:c8:32:2f:d5:d3:7a:7a:92:4a:10:
bb:47:77:c4:be:d5:d4:9b:d3:03:ba:34:bd:07:92:
af:39:70:71:91:75:75:69:09:a0:97:7d:f6:b2:cd:
fc:ca:cf:17:d6:85:a3:24:52:fe:7a:89:53:2e:71:
dd:da:cf:c9:41:00:c5:65:7f:14:62:a3:d8:2f:e6:
72:e3:ac:86:62:61:49:ea:d3:99:80:bd:62:da:c7:
2b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CC:CF:0E:3C:8F:F1:9A:5D:15:55:24:16:89:49:73:C1:48:97:3A
X509v3 Authority Key Identifier:
keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9f:02:ac:86:2d:97:39:f3:43:6a:2c:f8:34:95:13:0e:84:
a7:8d:08:b2:89:c9:da:4d:bc:79:bf:ad:2c:c3:ad:69:3a:ac:
18:cb:65:30:52:1f:b3:8a:a8:41:12:90:49:29:19:ad:c3:c9:
d4:4d:c6:19:94:79:2f:9c:29:d9:b7:11:a9:a7:4f:67:77:bd:
cd:d4:bb:88:9f:ee:45:85:cf:3d:18:2e:16:c2:9c:fb:77:7e:
72:1e:e9:9d:5c:35:a1:e9:63:99:55:62:0d:93:90:f6:4b:12:
7c:75:dc:42:73:46:91:95:4b:4c:55:ef:e2:38:37:90:81:e5:
a6:18:90:51:8c:d7:3c:a7:29:a6:15:f9:4f:6d:f4:0a:f0:1a:
7c:d0:a1:df:33:50:64:1d:e3:01:07:b2:be:7e:80:46:9c:84:
32:b1:03:97:d2:ea:a5:bc:48:59:e7:48:4d:11:9b:39:57:34:
90:7e:d5:c3:5d:97:7a:3c:26:f1:c9:37:a5:0c:74:90:b7:19:
7e:34:d9:69:58:90:14:eb:2b:41:b3:54:42:44:25:9e:13:ff:
2d:42:4d:f2:6d:62:a5:d3:9c:85:56:52:f4:f3:c6:f4:b6:6a:
f1:53:1e:e9:67:aa:f5:e5:2d:f1:c7:68:a0:f6:9b:dd:2c:7c:
19:3a:55:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:34:10 2025 by rpki-client