Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
File: cop1W_9p20tgWlFDplt9w5y6u7E.mft (raw, json)
Hash identifier: W4Hs2gBx0tjkrRhq5OWeFGykVVTSPMh9SluITv2dEPA=
Subject key identifier: 87:2E:0E:C8:4A:7D:DB:E8:EC:8D:EB:58:18:75:3A:4A:76:AF:C8:EF
Authority key identifier: 72:8A:75:5B:FF:69:DB:4B:60:5A:51:43:A6:5B:7D:C3:9C:BA:BB:B1
Certificate issuer: /CN=728a755bff69db4b605a5143a65b7dc39cbabbb1
Certificate serial: 019923A03BA5CED81C808C4B9A9D86B176E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
Manifest number: 1031
Signing time: Sun 07 Sep 2025 10:02:07 +0000
Manifest this update: Sun 07 Sep 2025 10:02:07 +0000
Manifest next update: Mon 08 Sep 2025 10:02:07 +0000
Files and hashes: 1: cop1W_9p20tgWlFDplt9w5y6u7E.crl (hash: oHA+BjN6TfPRfzhETiGRwmhlZtWTqWAbfGbdcWoqD3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:3b:a5:ce:d8:1c:80:8c:4b:9a:9d:86:b1:76:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728a755bff69db4b605a5143a65b7dc39cbabbb1
Validity
Not Before: Sep 7 10:02:07 2025 GMT
Not After : Sep 8 10:02:07 2025 GMT
Subject: CN=872e0ec84a7ddbe8ec8deb5818753a4a76afc8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f0:a1:64:6f:4a:6d:a7:8a:fd:62:1e:4a:99:
08:41:ce:4c:0e:a4:3c:03:8d:de:0f:ae:d4:cd:96:
38:d4:7c:72:1c:9c:ac:bd:ab:c4:68:7f:a2:03:d2:
cb:1d:5e:46:3e:53:a4:ed:5f:5c:55:4a:7a:2b:4c:
05:b9:56:28:f5:90:4f:93:b7:0f:12:c8:ad:46:cf:
b2:72:dd:d7:f9:62:96:b7:ae:f9:46:f6:ee:59:68:
b9:d2:96:b5:72:93:ea:ae:2f:99:d1:7a:34:c4:2b:
5d:da:12:9a:b2:d9:89:4e:af:16:af:36:7a:c0:86:
3d:42:de:b8:86:d8:a4:40:48:53:f5:a4:b8:7e:4e:
5b:6a:bb:a5:db:a3:fa:d3:35:91:2e:67:e2:63:62:
18:5a:2b:ab:4b:e8:75:53:42:4a:f4:d8:68:af:17:
9b:6c:54:b8:63:1c:7a:c6:b4:d5:8d:4a:16:84:ac:
10:e3:a7:88:56:12:3e:1e:77:2f:a0:d6:0e:f6:73:
3d:f0:34:4c:69:07:ff:4a:4d:ca:9b:00:40:fb:80:
da:0f:92:91:2a:00:30:84:ff:e0:74:30:8d:1b:49:
a7:ee:ab:8d:df:99:a7:35:86:2c:6b:15:e0:46:15:
ae:b7:90:81:58:2e:fa:04:74:30:0a:63:61:89:a8:
4c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2E:0E:C8:4A:7D:DB:E8:EC:8D:EB:58:18:75:3A:4A:76:AF:C8:EF
X509v3 Authority Key Identifier:
keyid:72:8A:75:5B:FF:69:DB:4B:60:5A:51:43:A6:5B:7D:C3:9C:BA:BB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:17:b2:03:23:6e:8e:d7:41:9a:0d:09:55:6c:c6:8c:d8:98:
06:15:49:19:14:8e:6f:d7:32:e5:b9:05:ff:77:f5:fb:93:db:
29:93:76:6f:57:4d:43:9f:24:c2:0c:56:80:7a:51:0f:6b:d9:
34:fc:3c:a2:d9:87:1f:a1:92:db:fa:05:e9:7a:26:8f:bb:ce:
c3:1d:0c:dd:62:63:7f:72:6c:e0:8a:94:c7:18:1f:69:a2:13:
26:bc:d4:73:7b:ac:c8:40:c4:e9:48:c5:4b:9c:24:82:52:d5:
49:e1:44:2c:ee:a9:eb:5b:69:8e:5c:94:66:6c:82:68:a5:cb:
f5:38:88:d9:ce:de:55:f8:37:b5:be:e3:2f:8b:86:21:7b:68:
9e:0d:13:1e:4d:71:e0:d6:08:8c:08:a3:75:2b:ef:5e:02:b9:
90:e0:bb:48:88:63:ee:8e:93:4b:9a:57:f1:ba:7a:6d:5f:0b:
40:e7:9b:79:0c:3a:6f:2d:39:aa:f8:2a:50:1a:6c:92:0d:bf:
58:62:d9:65:d6:4e:a0:ee:fc:57:a4:02:ad:14:fa:7f:80:d0:
3c:d6:cb:73:96:30:fe:14:84:f7:de:cb:59:91:da:74:1e:60:
7b:c7:ae:03:7c:75:73:f9:5b:e8:f5:e5:46:30:0e:2d:d3:42:
91:54:90:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:10 2025 by rpki-client