Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
File: COohU1NqgjgJmupmgIAfpEW_qd8.mft (raw, json)
Hash identifier: IfWJ/1t5U1ote3Ja7JRh4RjqR+TsrG+P6V5GnjgQwCs=
Subject key identifier: 59:E4:08:5B:A3:B2:DA:3A:ED:B1:BE:71:0E:48:98:8E:DE:D6:5C:84
Authority key identifier: 08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF
Certificate issuer: /CN=08ea2153536a8238099aea6680801fa445bfa9df
Certificate serial: 0198952457516E56A9ABD36C3EC68AC81442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
Manifest number: 156F
Signing time: Sun 10 Aug 2025 18:00:43 +0000
Manifest this update: Sun 10 Aug 2025 18:00:43 +0000
Manifest next update: Mon 11 Aug 2025 18:00:43 +0000
Files and hashes: 1: COohU1NqgjgJmupmgIAfpEW_qd8.crl (hash: gw8RK5sm5LMqb1pQ87MPPxkimKBsLC60RY9zu1Z1us0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:57:51:6e:56:a9:ab:d3:6c:3e:c6:8a:c8:14:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ea2153536a8238099aea6680801fa445bfa9df
Validity
Not Before: Aug 10 18:00:43 2025 GMT
Not After : Aug 11 18:00:43 2025 GMT
Subject: CN=59e4085ba3b2da3aedb1be710e48988eded65c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:f3:63:a8:d6:ee:79:5a:a1:18:18:4a:3c:
42:2f:dc:48:0c:9a:13:42:94:d5:79:fa:e3:91:b2:
88:80:0a:d5:8a:4a:63:68:a1:3f:44:9a:b4:3f:1c:
6c:22:55:78:ba:96:c4:ad:ba:ae:9d:fa:f1:fc:0f:
45:54:88:42:78:b5:89:78:3b:4a:ba:a9:ce:eb:da:
ce:9d:07:d8:72:7e:ea:ac:73:34:53:eb:98:02:03:
f1:84:b1:f9:a2:ff:b7:cc:ac:97:21:f5:91:37:1f:
84:f9:06:52:63:20:65:b3:db:a0:03:74:e4:2c:5c:
92:6c:2a:3f:64:ac:fd:1d:5e:3a:93:04:70:32:ce:
b7:c4:55:a8:a2:c6:22:4f:d5:50:c8:9d:86:90:82:
0d:cc:fe:e3:d7:e1:e9:96:49:35:52:7e:c8:be:5e:
e8:03:ce:8d:66:81:25:60:05:2c:8a:8d:33:5a:88:
07:9b:1f:ae:80:eb:db:8f:25:56:11:53:2b:37:5d:
6d:df:5c:a4:76:09:46:9a:52:9c:1b:da:6a:a5:bf:
78:fc:58:58:f9:f4:87:0a:71:d8:d3:46:76:59:81:
ed:20:12:e0:0f:c6:26:57:b1:4f:82:f9:b9:80:5d:
b9:1f:c1:a0:d3:91:30:73:1d:6d:28:3e:f4:eb:ad:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E4:08:5B:A3:B2:DA:3A:ED:B1:BE:71:0E:48:98:8E:DE:D6:5C:84
X509v3 Authority Key Identifier:
keyid:08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0c:a5:2d:ef:45:d2:5c:ab:c6:64:8b:5a:04:d9:39:56:18:
61:99:33:ee:a7:96:1d:dc:a9:17:55:c4:3e:e6:c9:05:0e:ed:
2e:2b:98:56:66:78:85:47:69:4c:1c:c4:30:54:cc:65:17:59:
c3:8d:5d:7c:dc:ec:e1:90:23:f7:a9:06:6f:61:8d:33:17:e1:
0b:1c:7c:26:bc:de:3c:4b:72:a7:ee:0e:72:04:53:99:75:ef:
be:c2:c1:dd:02:e3:15:35:69:33:2c:4f:69:97:50:b5:fe:22:
10:35:7f:2b:41:74:0c:4e:4a:0f:22:f1:c4:d4:f0:49:3d:d3:
53:0c:87:65:c5:57:51:ab:4f:bd:29:04:6d:1c:52:65:d6:b6:
e9:0d:99:0e:4d:ad:8d:c4:39:ec:92:db:ea:9f:7d:2f:21:98:
74:d8:39:0b:70:3f:3c:73:cd:90:95:cf:6c:81:ad:73:7b:2b:
31:8c:35:44:0e:0e:0e:72:6c:7d:93:a4:0b:5e:81:78:dc:1b:
e2:f8:98:f8:29:4c:8c:08:0e:5c:89:31:7f:23:f2:4d:e3:1e:
1a:8c:ef:85:f5:6a:10:55:e8:0c:a2:bf:e8:5d:28:41:fe:d2:
da:78:09:e4:43:19:2c:7a:2d:87:cf:f9:f0:2f:53:5b:52:bf:
ca:24:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:49:59 2025 by rpki-client