Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier: HtDqDiPmVc+5ZQCi73mE2GqRY7n/fH4s8ireIToJHM0=
Subject key identifier: 33:82:26:73:F6:7D:BA:7D:A0:9B:AF:F8:30:10:AC:1A:F2:C8:9A:95
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial: 019896DC5D6D44917EEE0F80248E62DC8B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number: 0425
Signing time: Mon 11 Aug 2025 02:01:20 +0000
Manifest this update: Mon 11 Aug 2025 02:01:20 +0000
Manifest next update: Tue 12 Aug 2025 02:01:20 +0000
Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: f3vuT8fP7yWwS/sal+B6u4sskvzbxMWM+oUgn2X45oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:5d:6d:44:91:7e:ee:0f:80:24:8e:62:dc:8b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Validity
Not Before: Aug 11 02:01:20 2025 GMT
Not After : Aug 12 02:01:20 2025 GMT
Subject: CN=33822673f67dba7da09baff83010ac1af2c89a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:08:3f:44:38:8b:21:0f:2f:6f:1c:d5:73:4d:
8f:e2:da:8f:b4:98:86:71:01:79:e7:e7:27:33:68:
9c:d5:33:db:95:78:d3:b5:3a:a3:d9:bd:b1:c3:d4:
13:69:82:45:a4:18:60:e7:d5:66:e4:b0:03:04:61:
42:c7:36:db:d4:4e:0d:b1:90:f4:11:39:2e:00:dc:
6a:61:45:6c:e3:4f:a5:82:14:43:f2:a0:aa:56:0a:
2f:53:d1:07:e3:28:e9:f2:e4:ad:90:07:16:76:b6:
dc:58:42:8e:76:c9:57:98:e4:06:cd:75:0a:d6:da:
bd:41:36:98:c1:64:62:97:f6:c1:79:92:90:e0:ae:
77:79:50:d0:6e:54:52:71:bc:a5:90:34:cd:6b:38:
47:7c:7e:8d:41:22:f7:28:94:01:09:0a:3d:2e:b0:
e4:bd:28:79:60:9d:9d:4a:96:59:df:ee:53:24:41:
1f:76:22:f4:73:c8:72:c7:69:56:ed:84:26:43:6e:
8f:8f:aa:41:28:ae:49:89:41:51:e6:4b:a0:a3:1a:
58:1c:2a:5d:4f:22:eb:8c:f7:84:7a:35:10:03:f1:
43:69:0f:29:25:4c:35:df:59:4c:da:0f:c2:97:17:
9e:7b:1b:30:d6:54:4f:c4:fb:0e:18:3d:56:88:cf:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:82:26:73:F6:7D:BA:7D:A0:9B:AF:F8:30:10:AC:1A:F2:C8:9A:95
X509v3 Authority Key Identifier:
keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c3:5e:88:cc:4c:15:df:77:1f:f6:7e:3a:73:f1:0c:97:54:
40:a2:d0:9f:23:92:65:57:d3:b2:b3:5c:c7:88:ba:48:77:c8:
3e:f5:fe:a0:02:fb:74:21:d5:4b:69:7c:eb:1d:3a:1b:ce:f5:
98:f1:f8:26:e0:c9:73:4c:43:af:5e:07:19:29:a0:d9:a8:14:
9b:bd:bd:2c:6c:f6:6b:07:f1:53:c5:1a:ea:01:1d:59:ec:78:
2b:3b:9c:f7:63:4f:04:a4:4e:a5:a8:9b:ad:14:84:2d:9b:9e:
27:d9:2e:5f:f6:25:41:03:ac:11:59:9e:c7:dd:a7:49:33:58:
c1:42:4f:8b:e7:d7:19:bf:97:80:9e:10:79:f3:e4:d9:e9:14:
0f:5e:1a:43:82:63:24:58:5e:e8:df:e4:54:15:b7:4f:6c:a8:
b8:0b:ea:3a:27:87:07:4d:ed:4a:cb:0c:1c:51:c2:35:af:14:
db:69:cb:e8:65:84:7b:2a:37:b1:f1:b7:0c:69:ad:37:49:ff:
4e:63:95:66:8d:6b:d5:7a:87:1b:1b:a7:9a:79:2f:c2:61:92:
a5:9b:c7:2e:c2:ea:59:48:5b:8b:92:4f:e4:e2:3c:39:32:20:
93:ae:21:f2:6d:88:98:7f:58:22:ac:69:36:63:af:1d:4b:03:
cd:e6:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:08 2025 by rpki-client