Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
File: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft (raw, json)
Hash identifier: Hn6gLK5sG77VFvc4BczrqPHVNo36jZTD8XzsUwpMq4c=
Subject key identifier: 98:33:D7:C4:4D:AA:3B:F5:F9:3A:0A:AD:2C:63:47:6A:FE:B1:D3:5B
Authority key identifier: FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
Certificate issuer: /CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Certificate serial: 019A041145E4D9CAE2B0727CB3049400C633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
Manifest number: 1265
Signing time: Tue 21 Oct 2025 00:00:32 +0000
Manifest this update: Tue 21 Oct 2025 00:00:32 +0000
Manifest next update: Wed 22 Oct 2025 00:00:32 +0000
Files and hashes: 1: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl (hash: uFaqe3lT526u2REAC4nmcHO1sty3Q5RmdX8n9/844os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:45:e4:d9:ca:e2:b0:72:7c:b3:04:94:00:c6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Validity
Not Before: Oct 21 00:00:32 2025 GMT
Not After : Oct 22 00:00:32 2025 GMT
Subject: CN=9833d7c44daa3bf5f93a0aad2c63476afeb1d35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:37:8f:32:dd:46:4d:94:98:b4:17:37:2a:
4d:e9:ad:e6:12:99:9a:c3:e9:af:f0:fd:af:87:ee:
d9:70:45:b2:f8:95:d9:6d:e6:2a:af:5a:35:8f:6f:
fd:00:db:ac:86:1e:54:51:00:55:e6:22:bd:f6:f2:
df:47:cd:15:04:6a:8a:ac:21:11:54:69:02:f4:05:
83:8b:e0:f5:ab:b8:88:87:44:25:32:14:89:d6:89:
74:3e:f6:63:e3:08:58:3c:36:ca:21:31:20:8a:dd:
b6:fe:7a:35:69:61:ab:c1:fe:c6:75:ad:8e:29:fd:
db:1c:c8:18:9b:c7:4e:fa:42:05:ce:1c:fc:ba:cd:
2f:89:c1:df:ee:21:54:84:4a:f7:e9:c0:9f:58:4e:
11:cb:db:ea:7a:42:34:60:33:b9:5f:5a:8d:4b:c6:
34:ca:24:d7:80:25:4c:70:f7:01:77:8c:8f:8c:f4:
2b:42:b1:42:1d:ea:53:87:bf:6d:8b:ef:78:ea:72:
0e:41:ee:0a:ee:c3:69:70:b6:7c:56:b0:ad:8c:ec:
ab:67:74:05:89:b6:ef:d2:64:da:e8:90:59:55:e3:
8a:eb:40:97:3a:82:ed:fe:66:f6:0d:a1:2a:4d:8a:
e0:7b:c9:08:8a:c2:9d:55:2e:b6:dc:47:6f:72:3c:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:33:D7:C4:4D:AA:3B:F5:F9:3A:0A:AD:2C:63:47:6A:FE:B1:D3:5B
X509v3 Authority Key Identifier:
keyid:FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b1:8b:16:3d:0b:ad:1f:40:a4:2f:5e:28:b9:45:7f:f9:e1:
99:8c:b5:e2:2f:c5:17:9a:82:8d:ac:9f:47:51:84:d1:2c:d0:
42:9c:e5:d3:8c:a3:f3:18:4a:6b:d7:6e:f5:92:a9:0f:ba:65:
13:cc:b6:ec:df:0f:40:16:57:0d:50:4a:3d:20:05:e9:e2:9d:
b9:a9:b7:0e:b3:c0:cc:ad:71:0d:da:47:1e:2a:62:11:34:5c:
fd:48:06:ea:7f:5a:95:20:96:b4:11:c4:b7:34:6b:74:90:3f:
2b:09:94:63:5f:92:0a:d1:ca:a6:a1:de:d3:24:24:cf:2c:06:
5f:79:33:b2:66:19:a5:cf:fe:8e:8c:46:ad:3d:62:eb:e1:ab:
33:23:a1:52:3d:9d:4f:d3:5c:79:ec:bb:50:ca:08:be:08:b8:
b2:6b:02:79:6e:b2:c7:ae:91:8c:98:76:9c:f7:05:9d:51:3f:
00:09:4c:f0:92:21:98:97:83:41:98:a1:3b:be:40:d9:24:99:
a2:23:74:a0:88:bf:5b:bb:db:71:f9:f8:de:36:39:27:9c:b4:
3a:90:d0:33:f3:77:2d:11:d0:c3:eb:89:be:ef:f7:8e:32:3c:
af:c1:d7:e8:d4:f0:b5:85:22:8c:62:f7:2c:10:f0:a0:fa:37:
32:2e:41:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:35 2025 by rpki-client