Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
File: coe8FdmVjihdWllYuOZJfl_OkfU.mft (raw, json)
Hash identifier: zj2Tizwt5i1iTuDUxHVJLPUDv62HcRBHhMmNeAclcdk=
Subject key identifier: 64:FD:63:5D:C7:C6:CF:E4:F2:6F:BD:6F:D8:8E:A6:A2:EB:F4:DE:66
Authority key identifier: 72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5
Certificate issuer: /CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
Certificate serial: 0199FE46C629231E95E38A103FA3C5605D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
Manifest number: 0BC3
Signing time: Sun 19 Oct 2025 21:01:14 +0000
Manifest this update: Sun 19 Oct 2025 21:01:14 +0000
Manifest next update: Mon 20 Oct 2025 21:01:14 +0000
Files and hashes: 1: coe8FdmVjihdWllYuOZJfl_OkfU.crl (hash: 5/FVzKgrmJ4LRSC9VgGWbTnS579uF4TbdiNmEAbp1EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:c6:29:23:1e:95:e3:8a:10:3f:a3:c5:60:5d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
Validity
Not Before: Oct 19 21:01:14 2025 GMT
Not After : Oct 20 21:01:14 2025 GMT
Subject: CN=64fd635dc7c6cfe4f26fbd6fd88ea6a2ebf4de66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d6:ad:01:5e:99:26:d2:4f:02:9d:bd:d0:23:
94:75:3c:fb:45:db:82:e3:27:10:b7:b4:d0:c2:02:
be:cc:78:b8:55:bb:66:29:73:6a:11:c2:f4:e1:e1:
d1:bc:9e:ed:64:50:dd:25:99:d2:7e:24:f9:3c:02:
48:60:f1:98:df:0c:61:f6:4c:ac:49:d0:03:e2:43:
52:12:a9:02:7b:5a:2a:9c:c5:97:40:48:8e:90:cb:
0e:97:7f:e1:69:8f:10:0d:a4:5c:43:c3:b1:62:e2:
87:84:2e:d6:2e:30:55:f4:f6:15:18:2f:15:aa:bc:
54:a3:5c:2d:26:aa:af:62:ce:e6:07:9c:44:cd:7d:
76:ca:5a:73:2e:cb:b0:64:00:89:f5:3a:77:26:5f:
fc:b4:50:21:39:4f:a9:a7:ef:82:da:14:6b:41:3a:
a1:0b:55:84:54:b4:35:cb:fb:5a:f1:fb:2e:20:a4:
24:bd:a4:f0:f0:0c:b9:09:9b:c2:eb:24:69:cd:30:
28:c7:ee:64:ff:9a:d8:bb:0f:d7:e1:df:03:d9:25:
43:7f:1d:9b:32:22:4c:46:a3:a7:06:29:2f:2d:d4:
c1:25:bd:75:7d:64:9e:d3:e6:75:14:fe:b1:bd:fe:
a9:ea:7b:7b:62:f2:f0:a7:45:8c:99:42:6d:aa:5b:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FD:63:5D:C7:C6:CF:E4:F2:6F:BD:6F:D8:8E:A6:A2:EB:F4:DE:66
X509v3 Authority Key Identifier:
keyid:72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:66:c6:2c:88:53:d0:9f:bc:aa:f8:70:ec:0d:6e:79:92:fd:
22:b0:cc:d8:4d:f3:22:98:89:18:77:62:d1:d5:83:17:88:55:
11:0b:a1:fc:03:e2:92:4c:00:42:f2:7b:2d:1d:17:57:4d:92:
14:ac:ba:04:20:5e:f9:0c:80:68:54:bf:ab:d3:bd:1c:f9:01:
f8:d6:94:4b:5a:10:6f:03:88:09:18:61:5d:ea:a9:9f:2f:17:
6f:4f:86:d7:fd:7d:c3:d3:f8:1f:f9:23:5c:d3:da:32:62:4c:
56:07:f1:7a:e4:4d:fc:57:6c:5a:20:b8:f1:2b:c0:0c:de:67:
da:13:b7:81:13:4f:69:9d:4e:3c:af:82:66:7a:f5:5e:5b:07:
f9:fd:4f:40:e6:94:cf:0b:e4:9b:b4:d9:3f:49:51:58:c4:41:
79:24:6a:62:b5:c0:4d:1c:b2:22:45:63:2e:9e:5d:6b:07:61:
1f:42:f2:b9:bb:5a:12:7c:06:40:0e:56:27:84:2e:cf:24:81:
3b:2b:b0:80:00:61:60:25:e5:d8:ec:bd:82:ae:c8:77:08:5c:
dd:60:55:fd:32:28:04:fb:61:be:04:4e:45:32:06:19:66:5a:
f4:dd:45:54:ed:35:0d:0d:1c:4a:98:45:3c:b9:da:14:96:b7:
ed:ae:d0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:28:03 2025 by rpki-client