Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
File: coe8FdmVjihdWllYuOZJfl_OkfU.mft (raw, json)
Hash identifier: uuRMYwx8okP5RhV+4M9orNYtfkb5F8sWeNf3xbcn5UQ=
Subject key identifier: 9E:FF:C0:CE:D3:E1:88:47:A6:D8:4A:20:4B:FE:33:DA:E2:8F:2E:7D
Authority key identifier: 72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5
Certificate issuer: /CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
Certificate serial: 0197B70E745642BD4A91FD20578E88B9218A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
Manifest number: 0A95
Signing time: Sat 28 Jun 2025 15:01:07 +0000
Manifest this update: Sat 28 Jun 2025 15:01:07 +0000
Manifest next update: Sun 29 Jun 2025 15:01:07 +0000
Files and hashes: 1: coe8FdmVjihdWllYuOZJfl_OkfU.crl (hash: 0Bhxpr0S1ypWqJ37v8zRHceBLK3QR50NHV6hGLyUSY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:74:56:42:bd:4a:91:fd:20:57:8e:88:b9:21:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
Validity
Not Before: Jun 28 15:01:07 2025 GMT
Not After : Jun 29 15:01:07 2025 GMT
Subject: CN=9effc0ced3e18847a6d84a204bfe33dae28f2e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:69:c2:07:f0:35:5a:96:ac:cc:0c:e7:c3:
62:23:6b:e3:45:86:02:44:7b:7d:b5:f2:b0:fd:d2:
91:57:0d:0c:d3:b9:03:c9:7c:81:2c:b5:b4:2d:e3:
9e:e3:9f:a0:7c:e1:e4:14:11:81:a9:6b:8f:2c:67:
fb:b2:f0:bb:da:a5:ef:61:b9:1a:b9:12:61:1a:48:
a3:12:b9:61:b4:43:ff:b2:36:e9:43:ed:ea:d1:a5:
36:e9:11:d3:48:5c:22:dc:97:79:c5:33:8c:1d:24:
07:3b:cb:82:e1:ad:cf:e5:21:a6:87:14:c5:ac:3e:
ed:c6:0c:aa:fc:f0:95:4c:c6:f5:01:a2:89:c2:d1:
89:66:1b:61:b3:53:7a:45:56:f0:49:29:d4:f3:d4:
7e:e0:0d:dd:d4:a4:4c:d6:dd:49:25:03:58:f3:2e:
7f:65:a2:fd:c4:4f:c0:c5:cb:d4:0f:d5:db:db:24:
b6:64:56:83:d8:6e:1a:2f:5e:9d:b1:5f:1e:29:f8:
d0:c1:b0:a5:0f:c0:94:5b:f5:dc:5e:b3:0e:26:f1:
b6:a9:37:83:8a:4e:b8:e3:f6:cd:3c:d4:39:be:42:
ca:e4:8b:10:5a:00:c4:72:e8:db:51:98:2b:76:70:
fd:dd:72:1b:ac:da:6a:6f:4b:5d:c6:df:4d:7a:73:
2a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FF:C0:CE:D3:E1:88:47:A6:D8:4A:20:4B:FE:33:DA:E2:8F:2E:7D
X509v3 Authority Key Identifier:
keyid:72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:88:0f:4b:16:13:d3:6d:22:b7:51:06:aa:89:66:1e:72:79:
b3:24:cc:01:56:fc:d9:b9:57:1c:4d:d0:42:43:41:63:00:d4:
c7:fc:56:b5:2a:0c:e5:cb:2c:6e:51:b0:59:07:37:58:d1:5e:
d3:ea:7c:46:64:72:3f:87:0d:bc:2a:70:db:37:79:55:40:3a:
8f:d5:1c:cd:5a:59:b8:e6:8a:f1:32:40:b8:6f:16:1c:42:35:
d0:1a:e7:ff:b8:81:fb:aa:4b:a5:4d:f1:89:4c:ea:da:e9:14:
b8:02:15:01:0e:43:e3:57:78:ab:68:75:4c:bd:0c:f7:d6:30:
af:29:72:77:9a:38:6f:be:8b:29:4f:5f:0b:74:4a:52:f0:fc:
31:f8:dd:d0:05:8e:0d:fe:26:2f:07:3e:29:35:ab:4b:08:06:
d3:a3:b4:c4:b6:ac:dd:57:81:d4:e5:dc:ca:0f:38:86:9b:b9:
7e:0e:c4:15:8a:6d:68:3e:82:11:da:cd:c1:65:02:93:3e:0f:
74:5d:85:f8:19:51:cb:9a:f2:b2:22:e7:fa:34:74:40:df:27:
ce:28:e4:68:ed:aa:71:d9:a5:c0:fd:8a:3c:3e:df:14:bd:f1:
3d:8a:3f:e9:3f:2f:0b:1d:41:97:bb:07:fa:a8:81:72:fa:5f:
65:73:9e:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DnRWQr1Kkf0gV46IuSGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyODdiYzE1ZDk5NThlMjg1ZDVhNTk1OGI4ZTY0OTdlNWZj
ZTkxZjUwHhcNMjUwNjI4MTUwMTA3WhcNMjUwNjI5MTUwMTA3WjAzMTEwLwYDVQQD
Eyg5ZWZmYzBjZWQzZTE4ODQ3YTZkODRhMjA0YmZlMzNkYWUyOGYyZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJRpwgfwNVqWrMwM58NiI2vjRYYC
RHt9tfKw/dKRVw0M07kDyXyBLLW0LeOe45+gfOHkFBGBqWuPLGf7svC72qXvYbka
uRJhGkijErlhtEP/sjbpQ+3q0aU26RHTSFwi3Jd5xTOMHSQHO8uC4a3P5SGmhxTF
rD7txgyq/PCVTMb1AaKJwtGJZhths1N6RVbwSSnU89R+4A3d1KRM1t1JJQNY8y5/
ZaL9xE/AxcvUD9Xb2yS2ZFaD2G4aL16dsV8eKfjQwbClD8CUW/XcXrMOJvG2qTeD
ik644/bNPNQ5vkLK5IsQWgDEcujbUZgrdnD93XIbrNpqb0tdxt9NenMqEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7/wM7T4YhHpthKIEv+M9rijy59MB8GA1UdIwQY
MBaAFHKHvBXZlY4oXVpZWLjmSX5fzpH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY29lOEZkbVZqaWhkV2xsWXVPWkpmbF9Pa2ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85ZTVkZTQtZjY1MC00NGQ3LWJkMzAt
N2VjMjEzY2IxMTVmLzEvY29lOEZkbVZqaWhkV2xsWXVPWkpmbF9Pa2ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy85ZTVkZTQtZjY1MC00NGQ3LWJkMzAtN2VjMjEzY2IxMTVm
LzEvY29lOEZkbVZqaWhkV2xsWXVPWkpmbF9Pa2ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIgPSxYT
020it1EGqolmHnJ5syTMAVb82blXHE3QQkNBYwDUx/xWtSoM5cssblGwWQc3WNFe
0+p8RmRyP4cNvCpw2zd5VUA6j9UczVpZuOaK8TJAuG8WHEI10Brn/7iB+6pLpU3x
iUzq2ukUuAIVAQ5D41d4q2h1TL0M99Ywrylyd5o4b76LKU9fC3RKUvD8Mfjd0AWO
Df4mLwc+KTWrSwgG06O0xLas3VeB1OXcyg84hpu5fg7EFYptaD6CEdrNwWUCkz4P
dF2F+BlRy5rysiLn+jR0QN8nzijkaO2qcdmlwP2KPD7fFL3xPYo/6T8vCx1Bl7sH
+qiBcvpfZXOe6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:37 2025 by rpki-client