Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
File: coe8FdmVjihdWllYuOZJfl_OkfU.mft (raw, json)
Hash identifier: Hl2jlUm1PnerZi6ENRyiRoiK/c3+vfLvMV5uHfTkMvM=
Subject key identifier: 44:6A:FE:4B:67:44:1D:05:5E:20:CB:39:AB:41:51:A4:BB:6F:5C:B1
Authority key identifier: 72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5
Certificate issuer: /CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
Certificate serial: 0198D4E08FE5E6649F3ACE1CBD11479A4D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
Manifest number: 0B29
Signing time: Sat 23 Aug 2025 03:02:23 +0000
Manifest this update: Sat 23 Aug 2025 03:02:23 +0000
Manifest next update: Sun 24 Aug 2025 03:02:23 +0000
Files and hashes: 1: coe8FdmVjihdWllYuOZJfl_OkfU.crl (hash: Z5dT1r9Uflzbudo4r/SrcDIiBAv66IYbwVwFLNqyjok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8f:e5:e6:64:9f:3a:ce:1c:bd:11:47:9a:4d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
Validity
Not Before: Aug 23 03:02:23 2025 GMT
Not After : Aug 24 03:02:23 2025 GMT
Subject: CN=446afe4b67441d055e20cb39ab4151a4bb6f5cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:17:5f:ad:31:81:ca:a6:be:83:b9:31:c7:
4d:7b:4e:1b:98:5f:ba:81:ac:7a:c0:4b:ef:3f:b3:
3c:40:6c:e3:0f:6b:e3:70:a0:a8:71:02:33:83:60:
00:2b:4d:f2:50:7f:f1:67:2e:43:ac:f5:8b:c4:db:
6a:e4:31:bf:19:e6:2a:f5:1f:3c:f6:4e:93:b7:f1:
4f:8b:33:14:26:94:f5:35:57:c4:33:3e:de:9a:6e:
35:9c:87:d3:47:4e:1f:a4:01:60:5c:9b:d3:d8:99:
7c:87:30:35:30:b5:a7:55:58:52:2f:3f:c7:f7:e1:
fe:0c:8f:f3:5b:3e:80:a7:31:d5:7d:c5:2f:8a:70:
d4:98:8b:e5:ac:c6:7e:5e:9d:f8:cc:22:64:50:b3:
d0:07:f1:c5:9c:f6:d7:5a:08:38:78:96:88:77:dc:
72:02:1f:24:cf:61:49:1e:04:3c:7d:07:e1:82:f4:
13:b2:8d:d9:4f:ad:4e:84:1b:1a:83:44:ed:98:fb:
60:1c:24:df:1c:67:c1:7d:34:70:96:a2:b7:b7:df:
7c:1f:9e:1d:64:ed:30:92:6e:78:70:cf:6c:6f:c8:
5a:7c:ca:97:81:33:f1:1c:a7:89:5a:a0:ea:15:7d:
33:ae:16:f5:26:f5:02:36:5f:e0:f5:dd:d1:3d:64:
a5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6A:FE:4B:67:44:1D:05:5E:20:CB:39:AB:41:51:A4:BB:6F:5C:B1
X509v3 Authority Key Identifier:
keyid:72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:22:0e:17:6c:30:1f:ee:32:96:21:0e:b5:40:6a:4d:2a:65:
44:b7:15:68:c5:a2:ba:78:73:f4:d3:8a:f8:67:39:bb:cd:20:
10:8b:ec:bd:32:1c:18:c9:ce:2e:94:c2:71:34:a6:65:17:53:
d7:64:05:50:89:a4:04:9c:bb:32:bf:90:87:5c:b0:42:65:3d:
bc:8b:db:90:6c:37:c6:8a:37:95:1f:35:5c:b4:f9:50:14:69:
3b:78:a1:6a:15:58:a3:c0:70:3b:83:02:3d:ca:dd:c3:c5:01:
24:86:27:a3:94:4a:31:bf:31:a2:fe:8a:6f:13:b4:84:75:2f:
b5:d3:a7:42:20:51:43:a4:ea:0b:55:fa:e4:52:aa:ef:57:b0:
a6:3a:69:3a:14:ad:c4:5c:3e:d9:2c:5b:0b:d7:51:45:e4:2b:
f2:26:b4:9b:79:ec:5b:41:e5:22:15:eb:cd:33:a5:6a:98:61:
06:5d:c5:49:96:63:9e:f3:0a:0c:5c:d2:f4:bc:c8:e4:0f:2f:
00:c9:10:08:23:32:d3:5c:e2:42:03:67:7a:e8:58:1a:7a:fa:
91:12:c0:86:a1:26:a7:b8:36:4d:f3:4a:a7:b5:b3:cb:90:47:
c5:b9:8e:3f:87:b6:b3:2f:21:a5:24:32:11:43:de:6f:12:43:
51:ad:06:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:23 2025 by rpki-client