Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
File: COKNBckBhf5-Yq8c7iXIg7b-IjY.mft (raw, json)
Hash identifier: AeTsXOl/EMTLulCkoNVyHrdgR72wNB/jz0dVeOmj6CQ=
Subject key identifier: 3A:75:90:D5:BE:D0:14:42:D3:11:69:57:8C:57:43:AC:A7:5F:86:83
Authority key identifier: 08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36
Certificate issuer: /CN=08e28d05c90185fe7e62af1cee25c883b6fe2236
Certificate serial: 019922FAE481B1E315336F0CEE6801D7124C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
Manifest number: 05CD
Signing time: Sun 07 Sep 2025 07:01:31 +0000
Manifest this update: Sun 07 Sep 2025 07:01:31 +0000
Manifest next update: Mon 08 Sep 2025 07:01:31 +0000
Files and hashes: 1: COKNBckBhf5-Yq8c7iXIg7b-IjY.crl (hash: yhEehZRpT16Kr3LZRnF5/RbkcgIsKI80qgARntHmYbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:e4:81:b1:e3:15:33:6f:0c:ee:68:01:d7:12:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e28d05c90185fe7e62af1cee25c883b6fe2236
Validity
Not Before: Sep 7 07:01:31 2025 GMT
Not After : Sep 8 07:01:31 2025 GMT
Subject: CN=3a7590d5bed01442d31169578c5743aca75f8683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b3:7e:93:43:e6:4b:af:97:59:46:f1:b4:c5:
e6:18:08:dd:c7:17:a0:79:ed:1e:e0:68:c6:c4:0b:
62:1f:61:ac:6d:1c:8e:bb:45:07:7b:59:be:bb:5b:
7b:82:a9:08:1f:06:71:ed:82:de:12:70:00:67:32:
5a:77:51:08:42:c9:68:cc:28:d1:73:bd:07:11:93:
a4:1c:13:e4:a4:5d:21:b8:c5:7e:81:48:a8:af:bc:
32:10:85:11:75:8c:98:e7:0d:c5:22:0d:f7:80:74:
e0:7d:92:df:a9:c4:b6:9b:67:c4:63:a8:a4:49:c2:
ae:70:e1:5e:aa:c9:ac:72:ba:a9:86:05:df:27:a0:
b6:2e:d5:11:0c:bf:4e:24:37:af:6c:4d:ca:01:f5:
79:23:54:fa:d6:83:35:d9:41:b7:ba:8c:43:69:ae:
f5:8e:6d:96:d6:d6:b0:86:42:e6:33:44:0d:b6:6d:
93:6e:f0:ed:37:7a:a3:96:35:ac:7a:eb:84:e6:55:
5c:56:d0:a3:0f:04:b9:62:b4:4a:cb:14:38:3c:80:
58:7b:e7:04:ff:de:66:00:fb:82:cb:6d:96:e1:d3:
e8:ab:89:9b:29:a2:d6:a6:55:0b:3b:a1:b5:fe:d7:
1a:98:a3:30:4f:00:a3:2c:28:3d:8e:e8:cc:73:a0:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:75:90:D5:BE:D0:14:42:D3:11:69:57:8C:57:43:AC:A7:5F:86:83
X509v3 Authority Key Identifier:
keyid:08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:01:e4:a7:1e:b2:c8:f0:6d:75:89:9f:56:c2:99:11:ea:f8:
ac:01:ff:c8:92:3a:9a:2b:3a:70:04:ac:0d:dc:58:f0:c8:d5:
2a:04:6d:82:f9:91:8d:55:a7:04:2c:73:1a:e8:97:08:f2:8b:
7a:72:d2:27:0f:64:a1:f2:49:06:9c:f9:30:97:95:73:eb:26:
d7:56:93:ec:6a:93:9b:89:60:69:c6:8e:0a:21:7e:33:d2:1e:
11:53:66:91:6b:35:2c:bb:1f:b8:41:2e:f0:b2:95:0f:1d:bd:
08:06:7f:eb:af:6f:e2:40:d7:5d:a4:83:97:00:eb:b3:18:97:
08:49:83:c3:19:fb:ff:9b:29:5e:5c:f5:5f:a3:46:d9:40:a1:
9c:4e:1a:c9:6b:87:42:c5:5f:a0:06:81:c7:47:d3:3e:fd:e6:
3d:a0:44:73:60:f3:23:2b:bb:e7:32:57:68:47:37:1f:f6:b7:
df:70:5d:bf:fc:6f:fe:e3:83:c6:80:a5:ae:72:e2:a5:08:2c:
74:17:07:d2:e6:d6:9f:d3:e6:6f:f8:9a:0d:27:fb:b9:6a:66:
c8:57:52:2f:ee:61:4a:bd:b2:04:ed:0e:b5:41:31:10:ec:9d:
2e:85:57:db:d9:dd:6d:69:9a:db:37:d3:0e:a9:e2:dd:ee:f0:
27:bc:df:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:00 2025 by rpki-client