Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
File: COfXs7xMB5HAz_4_FVWrdz4-0W4.mft (raw, json)
Hash identifier: wuTGuLGnw7NaQPM6nIYO5jOuUFbTkSYO2N5pHa10aNo=
Subject key identifier: 89:26:19:47:7F:6A:C9:1E:80:81:D5:65:AC:80:1C:BE:38:40:3C:28
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial: 019873E2CB4B9F4111C9F38BBB6AF443B5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
Manifest number: 0844
Signing time: Mon 04 Aug 2025 07:01:39 +0000
Manifest this update: Mon 04 Aug 2025 07:01:39 +0000
Manifest next update: Tue 05 Aug 2025 07:01:39 +0000
Files and hashes: 1: COfXs7xMB5HAz_4_FVWrdz4-0W4.crl (hash: 1pScrdFkdY0R15/KA6Sa1/4QwFPSrkT2wrW4fdwkz48=)
2: khFY4LCzs_C_2FKxTxDOR-38KnY.roa (hash: XM0c5kYBwYH9YLOtd32YXHex7zgvtOBEgciRDVMSUbU=)
3: qvPm57YEBA1Gnl47iz-cQbRx7UY.roa (hash: tBKdpc8P9meJArJGr//IYbXNDI8iochN8kxy5UtDRE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:cb:4b:9f:41:11:c9:f3:8b:bb:6a:f4:43:b5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Validity
Not Before: Aug 4 07:01:39 2025 GMT
Not After : Aug 5 07:01:39 2025 GMT
Subject: CN=892619477f6ac91e8081d565ac801cbe38403c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:00:ae:f6:9b:64:2a:22:53:1f:df:88:23:bd:
bd:53:66:16:3a:7e:bd:00:58:7a:88:69:b1:47:4a:
8a:ac:f9:08:b2:06:dc:2a:3b:e3:ce:f6:e3:4f:4c:
44:e6:cf:b7:68:9c:ef:35:13:c1:e4:27:e9:ab:1c:
9e:10:b4:7b:1e:50:23:2f:c1:ec:a3:15:76:91:d4:
f6:9d:dc:16:6f:51:d4:54:67:aa:5f:92:32:3d:22:
b8:d2:7d:18:85:e0:c2:63:9a:79:12:0c:e1:0d:b0:
c2:36:df:3e:b6:1f:74:10:da:90:26:4f:0a:32:d3:
ed:c4:f3:7b:e1:93:e5:2e:1c:2f:45:8d:43:c3:6f:
72:f8:60:f9:9e:bd:02:7f:1a:c5:5c:52:8b:9d:8a:
42:8c:32:bf:68:0c:30:16:0d:7b:12:d5:b4:fe:3b:
23:27:66:29:20:20:1e:08:17:db:9d:cf:23:68:8d:
55:5f:62:b0:e5:b9:0e:f4:18:38:7b:33:b2:9b:d2:
c9:c4:59:88:6e:76:2a:9d:9d:70:34:0e:47:2b:eb:
86:4d:ee:68:65:42:dc:f5:d8:40:a5:69:4c:80:73:
06:41:51:70:b8:0a:0d:6c:d0:6c:67:3e:09:84:35:
e9:c6:75:61:53:dd:68:e3:8c:45:c2:f6:92:66:96:
6e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:26:19:47:7F:6A:C9:1E:80:81:D5:65:AC:80:1C:BE:38:40:3C:28
X509v3 Authority Key Identifier:
keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:19:bc:8f:fc:06:51:c4:5f:b5:4a:b7:ec:c8:22:f6:c7:ad:
84:1d:e0:71:7b:6b:8c:48:10:c7:81:a0:74:d5:c0:70:59:64:
34:c9:ac:e4:66:bf:ed:22:b9:8b:df:14:a9:2f:49:45:1a:90:
1e:13:7b:74:3b:a5:cf:8b:16:37:b5:e5:d3:e8:3e:10:8c:07:
5d:9d:a8:a5:df:30:b0:17:9f:61:a7:cd:33:f6:b1:df:e1:02:
aa:92:88:57:8c:42:83:6e:49:ba:12:89:77:f0:54:df:c5:28:
6c:33:4a:e4:dd:1d:a0:72:33:49:ae:6b:fa:71:18:33:b9:fa:
a4:c5:5d:a1:a1:04:21:40:c1:98:b1:d5:63:4b:86:84:d8:51:
d6:98:76:3b:f6:2a:a7:09:17:3d:d5:e2:83:b5:e6:aa:2a:b4:
a6:14:35:d3:62:2e:30:ad:ec:06:7d:99:d7:7c:f6:f3:5a:19:
d2:0e:b7:60:14:fe:8f:f5:e7:ce:b7:83:bd:d6:68:9c:73:92:
96:c9:ff:6b:05:1a:ff:cb:19:f7:4a:1b:49:57:b2:aa:f9:95:
7e:a3:ec:85:2b:1f:3d:ce:ca:13:3e:b9:62:e8:d3:66:07:1f:
d5:5a:61:c9:97:8d:48:6e:d8:50:68:19:ea:06:a0:76:2f:00:
69:7f:f0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:11 2025 by rpki-client