Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
File: COKNBckBhf5-Yq8c7iXIg7b-IjY.mft (raw, json)
Hash identifier: CxxsNPa2X3UooPXnslh4tv1ET3PGsAah3VYZ0usvRfY=
Subject key identifier: 13:D8:8E:07:09:AC:93:38:98:19:39:12:88:D6:7C:59:06:D3:73:F8
Authority key identifier: 08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36
Certificate issuer: /CN=08e28d05c90185fe7e62af1cee25c883b6fe2236
Certificate serial: 019A70DC6989570A0365053F1AE50104BC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
Manifest number: 067A
Signing time: Tue 11 Nov 2025 03:01:24 +0000
Manifest this update: Tue 11 Nov 2025 03:01:24 +0000
Manifest next update: Wed 12 Nov 2025 03:01:24 +0000
Files and hashes: 1: COKNBckBhf5-Yq8c7iXIg7b-IjY.crl (hash: VgjlAB35fVl5ACGLkcHkRGD7qzOLt8hxYXk/dApbNt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:69:89:57:0a:03:65:05:3f:1a:e5:01:04:bc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e28d05c90185fe7e62af1cee25c883b6fe2236
Validity
Not Before: Nov 11 03:01:24 2025 GMT
Not After : Nov 12 03:01:24 2025 GMT
Subject: CN=13d88e0709ac93389819391288d67c5906d373f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:c4:3d:b1:d8:5c:4b:96:8f:4d:f8:da:bb:
37:c3:8a:0d:aa:bd:20:bd:4b:4f:a0:22:c6:e7:f4:
61:60:e2:76:27:27:af:29:c0:e3:0d:bb:5d:66:68:
ee:fa:43:00:b6:e9:1b:8d:2b:96:b1:1c:9b:b4:55:
9b:7b:78:9c:57:08:86:e2:82:35:af:e1:89:31:5f:
04:78:02:b0:6d:9a:1f:2a:7d:5f:35:fd:06:c0:bc:
e6:bc:ba:7c:2c:21:87:51:54:26:bb:61:6f:95:18:
f4:44:a2:e4:05:20:3d:d9:26:88:52:28:08:41:0b:
98:d9:f3:6d:1b:aa:5d:c8:f2:2a:9e:64:92:c3:12:
bf:aa:61:04:ca:43:64:99:99:63:ca:85:68:b9:47:
02:59:10:15:f2:32:96:81:f3:59:5f:95:af:d3:9d:
d8:c5:df:d2:10:25:df:9e:31:92:3a:7c:c7:ee:f6:
5e:58:d1:9f:fe:17:83:cf:aa:ad:1e:cf:f0:68:d8:
9b:77:e6:04:d1:e3:86:80:a8:72:ce:7c:1d:af:32:
db:0e:20:40:b8:06:2f:e8:97:4f:d3:5c:30:d4:be:
3d:16:f7:cd:fe:82:e6:f6:01:5c:96:ee:d2:4d:98:
70:69:87:57:d4:5d:e0:ee:59:c9:3b:8e:f7:08:16:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D8:8E:07:09:AC:93:38:98:19:39:12:88:D6:7C:59:06:D3:73:F8
X509v3 Authority Key Identifier:
keyid:08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e1:b1:08:88:7e:4b:a7:e9:41:42:4d:d7:c4:4e:f8:78:4a:
02:1a:d0:4f:8a:c1:ff:67:96:3b:2a:75:bd:82:50:81:3f:38:
68:04:9b:3b:3c:db:0b:4a:a2:29:64:e9:db:9a:dd:6e:8b:fc:
94:b4:fb:14:15:eb:3c:96:79:f9:32:f6:3b:42:22:b9:cc:6e:
c8:c1:4b:f8:a5:5b:a2:ad:97:80:9e:b6:4e:81:ec:6c:e5:25:
91:1c:0c:e7:83:1b:b3:1d:f9:a5:da:2c:eb:1a:e7:6a:46:ea:
9a:c4:bd:bf:00:f3:be:4a:2f:7c:41:76:a5:f5:6d:f2:ae:d1:
d7:5c:d6:83:34:33:f2:7f:fd:c3:d1:d1:e5:d2:60:9e:78:7c:
ee:d0:1d:8a:e8:5c:71:45:6d:9c:26:f6:28:29:23:b5:9c:0a:
bf:8f:2c:aa:78:3d:d0:3f:5d:7e:bb:64:4d:e9:22:b5:bc:ac:
92:05:10:ec:f5:49:8a:64:11:72:87:fa:4f:70:a5:e4:e6:a4:
df:94:e9:44:1c:ab:37:76:67:3a:48:35:c0:73:42:e5:b7:92:
70:d4:e1:0d:6b:2f:96:0a:9b:31:a3:16:a9:2b:a4:3c:a2:56:
ba:00:be:c8:b6:3e:ee:f2:10:02:1b:e2:55:fc:45:ab:91:04:
87:68:3b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:52 2025 by rpki-client