Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
File: COKNBckBhf5-Yq8c7iXIg7b-IjY.mft (raw, json)
Hash identifier: VKUe9q4rUfERIV6lNbKsyqdKlc8KUMk9hQKw5Uc4q68=
Subject key identifier: 69:AE:3C:6A:BD:E3:85:43:91:24:F0:0D:5A:92:B3:CC:F6:93:DA:A5
Authority key identifier: 08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36
Certificate issuer: /CN=08e28d05c90185fe7e62af1cee25c883b6fe2236
Certificate serial: 019747E756B337D3F006C5369CEF83950206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
Manifest number: 04D7
Signing time: Sat 07 Jun 2025 01:00:32 +0000
Manifest this update: Sat 07 Jun 2025 01:00:32 +0000
Manifest next update: Sun 08 Jun 2025 01:00:32 +0000
Files and hashes: 1: COKNBckBhf5-Yq8c7iXIg7b-IjY.crl (hash: sNLsDJ5YSfBYCHkWY4JMzaV2LCeeApTffXlBfgyCeFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:56:b3:37:d3:f0:06:c5:36:9c:ef:83:95:02:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e28d05c90185fe7e62af1cee25c883b6fe2236
Validity
Not Before: Jun 7 01:00:32 2025 GMT
Not After : Jun 8 01:00:32 2025 GMT
Subject: CN=69ae3c6abde385439124f00d5a92b3ccf693daa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:eb:14:57:ee:fa:5c:f4:7e:a9:5e:37:ef:13:
08:a3:f4:88:e0:fa:65:a9:e6:14:7c:8b:ff:90:63:
0e:01:c2:fb:6e:11:7b:16:a8:08:6b:15:df:d2:f8:
04:43:76:c0:bb:9a:b7:41:19:49:51:c1:85:ce:94:
02:a8:4f:c0:87:b3:1a:b9:57:b7:5c:24:0e:80:97:
f7:35:3f:54:8f:18:12:8b:3e:61:5e:23:66:da:58:
8c:24:cf:fb:44:d1:68:ee:e6:2c:6e:07:b2:81:24:
75:2a:fb:97:8d:df:ab:32:65:e7:fa:e5:b5:4a:5e:
f7:34:d8:33:43:35:30:a3:fe:11:63:09:c0:72:38:
16:37:9f:74:95:82:c1:07:bb:12:23:52:35:70:b9:
9d:db:cc:10:cc:72:0d:fc:23:3b:f0:38:80:52:68:
1b:c0:9b:23:46:85:d0:cd:0f:6e:37:e5:b7:4c:03:
4c:e7:04:67:14:55:9b:7f:ed:22:07:71:4f:37:9f:
ab:b5:bd:88:12:4e:74:74:df:c2:f5:60:db:9b:0e:
27:24:95:60:a2:3b:96:b4:27:cf:b3:5c:a9:c5:18:
8d:4c:5c:bd:6f:68:32:ed:4c:13:60:a3:ae:05:13:
6f:65:e3:20:1a:1a:5b:63:fa:97:5f:76:76:06:0b:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AE:3C:6A:BD:E3:85:43:91:24:F0:0D:5A:92:B3:CC:F6:93:DA:A5
X509v3 Authority Key Identifier:
keyid:08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:12:4b:56:5a:ba:90:9e:d4:ed:e3:5a:9c:d0:01:b9:ae:fe:
a8:58:cb:28:79:7d:d3:25:74:33:3f:5a:9b:22:f0:fc:32:36:
6e:3f:33:ac:d5:7a:6e:a8:39:76:ef:7f:64:f8:dc:f9:3f:1e:
e1:03:40:da:22:8d:81:c1:d5:c6:2c:b6:aa:f1:b1:f2:33:73:
20:ae:5a:9f:91:69:0e:48:75:14:e3:16:55:42:6a:1a:d0:4f:
de:df:28:cb:d6:09:a7:60:df:c4:18:d5:f3:39:24:ee:16:b2:
48:c5:10:6d:32:36:6c:af:ed:76:82:af:37:fc:e7:67:68:df:
e3:85:25:89:3e:76:c5:71:39:85:09:02:7b:0d:80:05:c8:d8:
c2:f6:f1:73:32:84:da:59:90:9f:cc:f0:27:b1:aa:11:b5:2a:
90:c7:9e:59:ad:bf:2c:68:9f:54:be:8d:cd:6c:9d:d7:95:6c:
2c:07:6d:56:0f:2e:bf:a0:d3:e3:d1:3b:68:54:af:29:58:41:
58:12:d0:23:19:5d:b2:51:f2:17:d8:48:9c:b4:41:49:f0:fb:
67:54:8c:32:b1:31:e0:b9:9e:b1:25:fa:fb:70:08:d5:5f:02:
91:13:74:3d:f4:59:10:1d:ba:34:1b:55:9b:57:19:fe:f0:c6:
53:5f:5c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:24 2025 by rpki-client