Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
File: COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json)
Hash identifier: v8RxG9y/7tNmCm1msbyIfdqrf27PUKAsy9FPgSvo/Ro=
Subject key identifier: FB:18:20:91:DB:BA:68:17:98:EC:27:CA:20:A6:B0:C3:C6:41:82:C2
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Certificate issuer: /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial: 0198D515732446F09F1E261C45934E413D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
Manifest number: 0268
Signing time: Sat 23 Aug 2025 04:00:09 +0000
Manifest this update: Sat 23 Aug 2025 04:00:09 +0000
Manifest next update: Sun 24 Aug 2025 04:00:09 +0000
Files and hashes: 1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: dLzzJQGZ7QsqTH7Xh4cghfO57hx8i4qVIkima7CLEkc=)
2: WZzhEpaA95Ez0phxnjpQh59XWdg.roa (hash: rNbkHKD1F2pmZbtIEu+jRxIqu+6kK3Eh8JznaVaKxmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:73:24:46:f0:9f:1e:26:1c:45:93:4e:41:3d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Validity
Not Before: Aug 23 04:00:09 2025 GMT
Not After : Aug 24 04:00:09 2025 GMT
Subject: CN=fb182091dbba681798ec27ca20a6b0c3c64182c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:af:88:e3:3f:22:a8:a4:4a:f9:50:21:b0:
b1:b0:1f:c3:88:01:fc:8f:eb:8a:31:e6:de:b4:3c:
be:d2:2d:c4:71:cb:5d:b8:68:7a:28:5f:a7:97:db:
b0:0f:83:ff:f9:2c:c9:89:ed:f2:fe:8f:0f:eb:57:
50:df:87:29:d6:2c:a7:0b:86:61:0f:f2:b3:ba:f4:
43:91:fd:d8:ff:73:49:d0:76:d7:b3:d3:0c:61:c5:
c0:e6:42:c4:8e:96:a3:b4:a7:d8:14:5e:77:75:61:
0c:c8:36:49:14:bc:3f:47:eb:45:d1:7e:e8:04:39:
6e:8f:06:ff:19:5c:44:a7:8f:88:eb:df:65:05:a8:
d6:54:35:ff:c9:e2:a4:b0:40:54:19:05:0d:d0:a2:
c1:33:e4:66:e3:2a:88:24:11:82:0c:46:c3:b4:66:
1e:fc:c5:57:80:0d:35:44:87:ca:e3:cc:3a:d6:04:
05:c6:75:ed:38:d1:86:9b:cc:68:ac:50:96:13:a4:
6c:be:9b:47:f4:1a:6b:dc:fa:7b:50:54:cd:e7:44:
17:5c:70:e9:39:29:1a:2b:5e:c9:87:aa:d9:45:36:
e4:ed:0f:c1:c7:1e:9c:f8:7c:07:a2:fc:79:5b:9e:
88:42:60:3b:e6:4e:f8:b4:c1:32:c5:97:d8:1e:9e:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:18:20:91:DB:BA:68:17:98:EC:27:CA:20:A6:B0:C3:C6:41:82:C2
X509v3 Authority Key Identifier:
keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f8:eb:fa:42:04:5c:c2:d9:20:9f:02:2f:06:7f:6c:26:2f:
a2:92:68:07:85:08:cd:45:2c:6d:f4:dc:c0:00:10:c3:1c:17:
a0:2e:db:a6:27:9c:b6:8d:9e:e5:8b:43:ee:c4:2f:73:b8:da:
36:dd:1d:3f:2b:b1:04:36:59:5d:76:07:d6:2c:9f:ca:45:ab:
ee:a7:25:89:15:ea:a1:40:8a:70:89:98:48:01:9f:db:23:e6:
f0:c5:ad:0e:0a:23:71:90:52:d5:cd:87:16:bd:2b:91:d5:00:
c7:34:c0:d5:8c:6d:fc:a0:5a:0b:c2:0a:8c:11:e5:2b:73:fc:
c4:b5:24:bf:3e:cd:78:20:92:31:c6:54:15:cf:74:6f:4d:f9:
0a:5d:4b:58:93:ac:8e:21:cf:92:54:ef:35:39:4a:21:44:7d:
e3:45:5a:72:73:25:89:b6:91:ff:e5:69:9f:4c:0f:aa:df:38:
7a:e8:09:ea:98:76:4b:29:5c:ef:ab:fc:d0:21:00:e9:04:63:
60:dd:da:6d:7a:93:1f:57:19:4c:a8:e0:af:1c:f6:55:4c:2d:
f2:24:ff:ff:90:3c:14:0a:2c:9d:c1:73:15:35:02:ee:52:97:
de:a4:65:7b:c2:09:e0:89:35:4f:af:7f:34:0e:bd:ea:9a:77:
cf:f0:b0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:17 2025 by rpki-client