Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
File: COfXs7xMB5HAz_4_FVWrdz4-0W4.mft (raw, json)
Hash identifier: ZqBbV2+XSaZvyg0BMcunyrL7VT7F0iVLN/6s0576A+o=
Subject key identifier: F5:36:F9:D1:80:6E:F3:9D:80:61:40:64:34:C1:0D:26:06:65:0A:F9
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial: 019A50E3A9E51837DCC6852D458712AC4ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
Manifest number: 093B
Signing time: Tue 04 Nov 2025 22:01:28 +0000
Manifest this update: Tue 04 Nov 2025 22:01:28 +0000
Manifest next update: Wed 05 Nov 2025 22:01:28 +0000
Files and hashes: 1: COfXs7xMB5HAz_4_FVWrdz4-0W4.crl (hash: xnDMlVgRBtw8jPpz1Rw8+cRbp6AscDGB/eWRhgcUuvE=)
2: khFY4LCzs_C_2FKxTxDOR-38KnY.roa (hash: XM0c5kYBwYH9YLOtd32YXHex7zgvtOBEgciRDVMSUbU=)
3: qvPm57YEBA1Gnl47iz-cQbRx7UY.roa (hash: tBKdpc8P9meJArJGr//IYbXNDI8iochN8kxy5UtDRE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:a9:e5:18:37:dc:c6:85:2d:45:87:12:ac:4a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Validity
Not Before: Nov 4 22:01:28 2025 GMT
Not After : Nov 5 22:01:28 2025 GMT
Subject: CN=f536f9d1806ef39d8061406434c10d2606650af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:ff:c8:5c:c4:d1:08:84:e8:e3:7a:f8:b5:
e2:cc:ea:dd:fa:57:81:40:1a:cb:1d:38:30:fc:db:
fe:58:88:7b:5e:e1:37:58:72:ef:2d:ac:d8:43:75:
c9:47:1e:c9:bc:71:b1:a7:14:d6:0d:f6:7d:34:6f:
fd:ad:0c:c4:90:d2:e5:be:f0:79:12:ff:7a:f0:28:
0b:ba:74:8d:a6:4d:21:93:06:5c:33:4a:27:05:19:
eb:48:02:85:b6:47:d5:6c:36:d0:2e:d1:c9:49:f0:
1d:f4:6b:4f:8c:be:de:43:d5:b6:82:dc:9c:e8:63:
0f:fd:56:8f:f4:eb:ef:3f:43:51:b5:be:97:fd:25:
2f:1c:9c:57:e5:f2:79:ee:68:4a:8c:91:f9:de:7b:
ff:34:c8:1c:bd:da:a9:b0:e7:12:1f:30:f0:09:98:
23:fd:1f:79:79:b3:d7:86:ac:38:2a:52:45:bf:a4:
43:2c:4f:63:d2:fb:18:9b:4f:39:27:c1:af:26:d1:
79:ca:aa:9f:46:a0:27:b0:8e:7f:38:29:7b:48:38:
cc:f4:53:df:ef:f4:79:54:86:80:7e:7d:34:c0:ad:
1a:8e:25:6e:ee:3f:78:4e:8d:88:e7:df:69:82:81:
3a:cf:01:57:0c:30:10:87:1a:61:45:8e:50:92:26:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:36:F9:D1:80:6E:F3:9D:80:61:40:64:34:C1:0D:26:06:65:0A:F9
X509v3 Authority Key Identifier:
keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:da:5c:42:7c:5c:33:bd:62:4c:06:cf:9b:32:b7:18:a8:8a:
96:12:91:ba:0b:28:c2:32:f8:57:9a:39:27:98:4f:93:b7:32:
79:6d:4d:8d:7a:d9:6c:56:7b:50:3f:3a:14:08:49:a8:e2:91:
4d:1b:33:5c:57:02:2d:d9:7a:10:6c:a1:b7:2d:f4:75:ca:d6:
df:c5:1f:c5:f6:e6:da:c2:2d:52:62:b4:0b:d2:22:8e:2a:f3:
17:26:1b:39:01:8f:8b:44:be:22:95:03:07:83:6a:07:1b:e4:
57:f5:ad:13:9e:2d:89:02:e7:c2:a9:21:a4:1e:a9:f6:49:07:
e0:f3:ba:ab:ce:7c:64:7a:97:1c:e4:4b:fc:57:fe:fe:8c:5a:
f5:da:e2:21:e0:57:a2:ed:48:11:1e:bb:67:b3:85:f0:8d:14:
06:52:be:a9:a1:94:18:e4:cf:47:37:78:bd:8c:e9:df:b8:41:
c5:ba:08:65:64:26:2d:8d:56:aa:d4:5c:7a:45:5b:08:11:0a:
2d:03:6c:04:03:66:0d:f3:6f:a7:27:7e:21:6c:e0:6e:43:d0:
17:5e:ef:ad:7f:26:06:62:db:3c:48:8f:e5:2c:3f:d8:93:32:
67:2e:54:1c:68:77:45:92:5a:f8:a5:68:84:6e:0a:63:d8:26:
cc:7f:75:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:56 2025 by rpki-client