Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
File: COfXs7xMB5HAz_4_FVWrdz4-0W4.mft (raw, json)
Hash identifier: rqcgH+t2RssDPcUqhK4dPpB03vowsl8Hd/WzJcRm4YE=
Subject key identifier: E0:58:FE:A9:C2:72:68:CC:D8:2E:BD:44:0A:F9:46:FF:FE:BB:EE:63
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial: 0199FBEAFC398E735AF8D0478857C0064FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
Manifest number: 090F
Signing time: Sun 19 Oct 2025 10:01:45 +0000
Manifest this update: Sun 19 Oct 2025 10:01:45 +0000
Manifest next update: Mon 20 Oct 2025 10:01:45 +0000
Files and hashes: 1: COfXs7xMB5HAz_4_FVWrdz4-0W4.crl (hash: ccr4SkVJ36DTEUbBPdGwtP/11XhDGk1PW4BOa9us3UM=)
2: khFY4LCzs_C_2FKxTxDOR-38KnY.roa (hash: XM0c5kYBwYH9YLOtd32YXHex7zgvtOBEgciRDVMSUbU=)
3: qvPm57YEBA1Gnl47iz-cQbRx7UY.roa (hash: tBKdpc8P9meJArJGr//IYbXNDI8iochN8kxy5UtDRE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fc:39:8e:73:5a:f8:d0:47:88:57:c0:06:4f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Validity
Not Before: Oct 19 10:01:45 2025 GMT
Not After : Oct 20 10:01:45 2025 GMT
Subject: CN=e058fea9c27268ccd82ebd440af946fffebbee63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a5:23:81:14:81:d8:02:2e:68:ea:08:71:75:
18:ab:90:d1:36:eb:5a:73:e9:35:a1:8f:cf:2f:1d:
b4:ad:11:30:dd:dc:cf:58:ef:cd:fb:92:62:9e:cb:
eb:e1:6a:e1:7e:d2:63:c4:a7:f2:09:ae:11:26:71:
ae:b5:44:7f:b6:63:9f:a7:08:cb:d6:be:84:a6:5f:
13:74:7a:15:12:53:50:7d:df:7c:3b:9e:88:6f:e7:
16:72:26:c0:07:a1:2b:40:21:3f:f1:ec:a3:b4:13:
1a:09:c2:dd:6c:fb:69:07:06:75:d6:6c:19:32:99:
57:b7:9b:6a:3a:e1:22:55:99:ed:8c:5f:1e:78:dc:
0e:b6:7a:de:fa:df:41:94:1b:e5:c6:13:07:6c:75:
cc:78:19:59:b9:35:ce:d0:dc:0b:c0:04:b9:9b:45:
76:2c:41:95:72:33:20:be:03:84:7a:96:a4:3c:f0:
93:43:f3:73:24:15:5c:e8:9d:b4:62:8f:bc:4d:03:
20:5c:c3:43:b4:9d:32:9f:48:b9:aa:7b:9f:1a:2b:
87:9d:5f:8b:e6:6a:8d:aa:9c:22:d1:f0:94:2e:15:
e0:53:02:43:7c:0f:8b:6d:0e:c0:7a:4c:c4:15:67:
3c:de:ae:b0:f1:87:96:1b:08:8e:c2:d7:44:3d:4f:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:58:FE:A9:C2:72:68:CC:D8:2E:BD:44:0A:F9:46:FF:FE:BB:EE:63
X509v3 Authority Key Identifier:
keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:61:fe:c2:49:d5:38:a8:36:d8:e9:23:5b:5b:f1:3a:94:ab:
85:0a:aa:5f:b6:25:9c:8d:18:df:07:5e:65:56:f5:ba:53:ab:
00:61:37:11:d3:ad:c7:7f:4f:e4:24:0f:cb:65:3b:77:4a:18:
c0:87:5c:7a:31:65:1f:14:61:6a:e4:7a:a8:aa:78:2e:7c:fd:
0a:60:bb:22:8e:f0:fd:6b:cc:82:5d:92:05:41:80:be:4c:e0:
f5:38:2f:5e:88:98:c3:a3:6b:51:26:b1:6a:3b:25:e3:65:ab:
fd:49:eb:a9:f1:ce:8a:c8:ed:73:db:0e:87:1e:f1:4c:24:9d:
57:31:c3:95:12:21:eb:d7:0c:56:7c:51:80:ee:f0:84:c4:d9:
b4:fd:7a:fa:17:6c:5f:8f:20:c8:ca:3e:02:47:3c:b2:5e:26:
0c:b6:73:98:eb:26:53:40:03:81:83:f1:cb:b4:ff:74:ca:2c:
00:6d:d4:fd:e9:56:e3:f9:a3:e5:67:55:3e:28:6c:23:e8:0b:
e3:d4:52:38:96:cc:46:fc:a4:65:8d:fb:ce:b0:19:2b:92:01:
ed:80:be:09:a6:bc:32:a0:77:93:bb:59:75:55:fe:88:d6:b9:
a0:db:1f:55:dd:da:ee:21:15:38:6a:3b:0c:8c:73:56:43:f3:
65:b6:93:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:10 2025 by rpki-client