Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
File: COfXs7xMB5HAz_4_FVWrdz4-0W4.mft (raw, json)
Hash identifier: 272V7M8R+XG6QmaUNQ5v+95aRukNXw7CEvobQraH+fM=
Subject key identifier: 6A:52:57:F2:A4:75:FF:2A:C8:F6:24:28:D2:86:C0:22:41:A8:7A:21
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial: 0197B6A1370EA9D6E7B04C74A9326A2112F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
Manifest number: 07E2
Signing time: Sat 28 Jun 2025 13:01:48 +0000
Manifest this update: Sat 28 Jun 2025 13:01:48 +0000
Manifest next update: Sun 29 Jun 2025 13:01:48 +0000
Files and hashes: 1: COfXs7xMB5HAz_4_FVWrdz4-0W4.crl (hash: DHQRZi5ldPE5O63EDwlbFx9iDsvat9gKgSATQWlc6Ao=)
2: khFY4LCzs_C_2FKxTxDOR-38KnY.roa (hash: XM0c5kYBwYH9YLOtd32YXHex7zgvtOBEgciRDVMSUbU=)
3: qvPm57YEBA1Gnl47iz-cQbRx7UY.roa (hash: tBKdpc8P9meJArJGr//IYbXNDI8iochN8kxy5UtDRE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:37:0e:a9:d6:e7:b0:4c:74:a9:32:6a:21:12:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Validity
Not Before: Jun 28 13:01:48 2025 GMT
Not After : Jun 29 13:01:48 2025 GMT
Subject: CN=6a5257f2a475ff2ac8f62428d286c02241a87a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:de:59:8e:08:1c:c0:47:97:de:a9:b9:37:
43:f7:68:44:ef:e7:88:a2:de:01:a7:05:88:89:cf:
cd:f4:dd:fd:88:60:91:dd:e4:7b:76:56:8b:3b:3d:
49:6e:27:b6:0c:cc:5b:0d:b9:75:6e:21:0d:3c:82:
14:65:c5:73:87:90:8e:7d:40:48:34:63:7e:26:90:
2a:0c:08:d7:ae:b5:8e:ac:c6:85:15:4d:4d:da:84:
6a:a4:94:60:52:c8:e0:76:c3:4b:a2:f7:0e:38:80:
17:8e:99:19:0a:4a:d8:f6:53:5b:19:8a:0b:73:b4:
cf:ff:3c:30:20:de:8a:fc:b5:3f:cb:a5:d3:42:b8:
c7:44:17:b8:eb:ee:2a:24:b5:ad:e0:1c:6b:05:6e:
e3:59:c5:40:2d:97:7b:7e:9e:2e:6a:48:61:84:c8:
8c:e4:40:dc:1b:68:64:4b:bc:31:3a:1f:21:06:9d:
2a:36:c3:28:e5:16:e3:b9:9a:88:40:41:48:11:c3:
db:2e:c4:02:a3:2e:98:5b:1c:ca:70:cd:86:ce:b2:
0c:2d:f8:1b:62:c1:a4:cb:2d:c8:19:e1:28:49:c3:
66:27:b2:cf:f3:d5:8d:8a:6e:69:b6:d2:88:b8:21:
a9:40:1d:b7:7d:f1:8f:68:68:2b:9f:a7:ce:13:36:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:52:57:F2:A4:75:FF:2A:C8:F6:24:28:D2:86:C0:22:41:A8:7A:21
X509v3 Authority Key Identifier:
keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4c:d0:9f:64:cd:69:bb:69:6a:75:02:6e:a3:ae:94:d1:d9:
89:79:7c:23:fa:48:d1:47:9a:1f:91:b8:b2:96:cb:76:37:1e:
23:96:98:a9:fb:d1:04:29:61:9b:80:35:64:c3:cd:ec:c5:29:
97:41:4f:bc:bc:4b:bd:06:89:7a:77:af:42:b8:8c:be:34:7d:
99:d1:8f:64:ed:42:45:a1:dd:16:ac:24:57:bc:d2:0c:c4:42:
d8:20:c8:24:5c:d6:82:f6:18:2a:19:13:a5:55:3b:c0:5c:c0:
ec:8e:9e:27:d4:bc:75:cb:86:eb:c0:a8:44:44:fc:69:d7:e3:
51:cc:a3:f6:94:48:03:27:c4:d1:dc:16:93:fb:e8:04:10:b2:
4c:7e:69:86:3a:37:72:41:01:6b:98:28:e8:e3:20:a2:f4:55:
46:e5:70:e2:36:9c:18:3c:58:fb:fb:0b:76:ea:4d:0e:40:fc:
8d:c3:bc:20:a8:0b:99:9b:cb:d9:d6:91:3d:ad:ed:b1:05:6f:
4e:4a:f1:78:57:69:9d:d7:fb:04:3f:1e:8e:f9:74:96:ef:9e:
f5:76:bf:3e:52:f5:41:76:e2:8f:9a:16:36:89:d0:81:97:21:
df:38:ff:9a:c8:18:cf:a7:32:84:26:81:09:21:a8:1a:f6:bf:
e2:55:79:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oTcOqdbnsEx0qTJqIRL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZTdkN2IzYmM0YzA3OTFjMGNmZmUzZjE1NTVhYjc3M2Uz
ZWQxNmUwHhcNMjUwNjI4MTMwMTQ4WhcNMjUwNjI5MTMwMTQ4WjAzMTEwLwYDVQQD
Eyg2YTUyNTdmMmE0NzVmZjJhYzhmNjI0MjhkMjg2YzAyMjQxYTg3YTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruPeWY4IHMBHl96puTdD92hE7+eI
ot4BpwWIic/N9N39iGCR3eR7dlaLOz1Jbie2DMxbDbl1biENPIIUZcVzh5COfUBI
NGN+JpAqDAjXrrWOrMaFFU1N2oRqpJRgUsjgdsNLovcOOIAXjpkZCkrY9lNbGYoL
c7TP/zwwIN6K/LU/y6XTQrjHRBe46+4qJLWt4BxrBW7jWcVALZd7fp4uakhhhMiM
5EDcG2hkS7wxOh8hBp0qNsMo5RbjuZqIQEFIEcPbLsQCoy6YWxzKcM2GzrIMLfgb
YsGkyy3IGeEoScNmJ7LP89WNim5pttKIuCGpQB23ffGPaGgrn6fOEzbD+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpSV/Kkdf8qyPYkKNKGwCJBqHohMB8GA1UdIwQY
MBaAFAjn17O8TAeRwM/+PxVVq3c+PtFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ09mWHM3eE1CNUhBel80X0ZWV3JkejQtMFc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xYjkwZGUtMmI3Ni00ZDBiLTkwOTMt
MmZjMzVjZDFhYzJhLzEvQ09mWHM3eE1CNUhBel80X0ZWV3JkejQtMFc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8xYjkwZGUtMmI3Ni00ZDBiLTkwOTMtMmZjMzVjZDFhYzJh
LzEvQ09mWHM3eE1CNUhBel80X0ZWV3JkejQtMFc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUzQn2TN
abtpanUCbqOulNHZiXl8I/pI0UeaH5G4spbLdjceI5aYqfvRBClhm4A1ZMPN7MUp
l0FPvLxLvQaJenevQriMvjR9mdGPZO1CRaHdFqwkV7zSDMRC2CDIJFzWgvYYKhkT
pVU7wFzA7I6eJ9S8dcuG68CoRET8adfjUcyj9pRIAyfE0dwWk/voBBCyTH5phjo3
ckEBa5go6OMgovRVRuVw4jacGDxY+/sLdupNDkD8jcO8IKgLmZvL2daRPa3tsQVv
TkrxeFdpndf7BD8ejvl0lu+e9Xa/PlL1QXbij5oWNonQgZch3zj/msgYz6cyhCaB
CSGoGva/4lV5gA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:51 2025 by rpki-client