
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
File: coe8FdmVjihdWllYuOZJfl_OkfU.mft (raw, json)
Hash identifier: XRuaAoSJeELNJe9DbjZotm/Cx41pJlB4TGvQQPAZXf8=
Subject key identifier: 1A:E2:22:59:B3:F1:A7:2C:BB:02:C6:1A:2F:9D:7D:3B:CD:36:1B:D4
Authority key identifier: 72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5
Certificate issuer: /CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
Certificate serial: 019874500B4A8AA3221B329FCF30159082EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
Manifest number: 0AF7
Signing time: Mon 04 Aug 2025 09:00:59 +0000
Manifest this update: Mon 04 Aug 2025 09:00:59 +0000
Manifest next update: Tue 05 Aug 2025 09:00:59 +0000
Files and hashes: 1: coe8FdmVjihdWllYuOZJfl_OkfU.crl (hash: kIemCHsoffqM2CMnAqDcGMvGefzqS8ygKRD5364oHGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:0b:4a:8a:a3:22:1b:32:9f:cf:30:15:90:82:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
Validity
Not Before: Aug 4 09:00:59 2025 GMT
Not After : Aug 5 09:00:59 2025 GMT
Subject: CN=1ae22259b3f1a72cbb02c61a2f9d7d3bcd361bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:54:c7:c2:dc:29:b8:52:74:76:c7:de:60:
4f:64:75:60:74:e7:b6:91:30:c0:fd:78:92:a8:8a:
df:6b:b5:98:b7:5e:d8:1e:f4:68:39:99:f4:45:1a:
f8:17:da:54:8c:46:c4:f4:f3:a5:f3:29:c5:5b:cc:
23:dd:25:a4:b6:c8:0f:90:28:e3:ef:cd:25:63:f2:
61:f2:87:9d:b5:fe:9d:89:a9:af:22:76:80:a4:92:
98:3e:ed:e7:92:7d:42:96:97:fd:47:a6:4f:bf:5f:
a1:9f:a8:05:4d:9c:94:01:de:90:b5:31:2a:e1:bf:
88:59:41:39:73:24:55:d4:ae:33:cc:97:da:3f:b9:
53:be:f9:f2:07:b7:20:61:cf:93:17:3a:65:93:a8:
3d:d2:60:b1:36:fe:93:09:69:ce:37:1c:ea:3e:3d:
a7:4d:d8:21:15:00:af:d4:6d:dc:31:68:52:32:49:
3f:4b:e4:13:ee:ce:96:c6:53:70:a5:bf:53:3f:ba:
60:a1:d3:a0:c1:3d:a2:d2:ab:b5:18:10:4b:aa:52:
51:b2:b4:00:18:da:a1:14:94:95:55:10:07:ed:d8:
21:c4:f8:fe:19:e3:ce:ae:ef:91:fa:a0:5f:da:49:
f3:20:76:c4:f8:15:9a:55:7c:e7:af:3a:f2:0c:1b:
04:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E2:22:59:B3:F1:A7:2C:BB:02:C6:1A:2F:9D:7D:3B:CD:36:1B:D4
X509v3 Authority Key Identifier:
keyid:72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:99:06:e2:ac:bc:50:61:80:8e:0c:21:2e:50:96:5c:e2:df:
76:10:3e:32:b6:da:59:10:37:79:6a:60:63:9b:74:61:fb:c5:
74:36:07:d2:0a:00:3e:82:21:00:19:df:bc:84:97:4d:60:53:
8e:24:4d:a8:57:d9:18:b6:77:16:2c:14:c5:4a:b9:75:4c:17:
5c:68:4d:90:34:29:45:b5:e7:24:90:11:b1:c3:e7:68:a1:4a:
06:8b:c6:fe:86:c6:6c:b2:7d:c6:f6:ac:e3:30:0b:5b:45:7b:
0e:d6:c2:a8:15:b1:31:ab:37:8f:f3:2e:c3:2c:e4:5b:51:95:
d3:3a:c7:00:0e:3a:ed:b9:ae:6f:7f:10:59:68:30:11:a9:0a:
64:e5:cc:04:f8:02:5a:88:f5:78:1c:8d:b4:02:ab:c7:37:14:
f6:07:33:d3:ea:58:d5:11:9d:7d:5e:50:b1:27:d9:bd:54:10:
5a:26:4d:0c:2b:c8:7a:1a:0e:8a:16:20:11:a0:1e:1a:6b:7e:
10:ec:16:5a:9b:a5:1e:63:e1:15:b5:c2:bf:f0:74:ea:fd:f9:
3f:d6:13:09:12:8e:bb:30:32:d1:6a:4f:25:ac:71:3f:6e:0e:
43:b7:98:c5:b6:2a:5b:23:80:bf:5e:bb:da:b2:87:7f:1d:4a:
81:a6:b2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:33:59 2025 by rpki-client