Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
File: COohU1NqgjgJmupmgIAfpEW_qd8.mft (raw, json)
Hash identifier: qKDzp26cF2ccLnPz77EMNTPDlAkwaaXhLtEvTX8pqh4=
Subject key identifier: BD:1F:71:7D:FF:E6:02:DF:A3:61:D6:63:60:7B:E0:9D:8E:0F:2E:A5
Authority key identifier: 08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF
Certificate issuer: /CN=08ea2153536a8238099aea6680801fa445bfa9df
Certificate serial: 0198D8BDEEBE350AD53DB87B776D28120A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
Manifest number: 1592
Signing time: Sat 23 Aug 2025 21:03:02 +0000
Manifest this update: Sat 23 Aug 2025 21:03:02 +0000
Manifest next update: Sun 24 Aug 2025 21:03:02 +0000
Files and hashes: 1: COohU1NqgjgJmupmgIAfpEW_qd8.crl (hash: xkJ117TPLLdBCbDSICvc8M2y2kShush8rWztedT7zL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:ee:be:35:0a:d5:3d:b8:7b:77:6d:28:12:0a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ea2153536a8238099aea6680801fa445bfa9df
Validity
Not Before: Aug 23 21:03:02 2025 GMT
Not After : Aug 24 21:03:02 2025 GMT
Subject: CN=bd1f717dffe602dfa361d663607be09d8e0f2ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:15:d6:ed:a9:96:78:68:1c:d1:75:68:88:
82:76:67:cf:4b:da:c6:f5:32:49:4f:9f:21:17:24:
21:5f:4b:9f:b9:85:0c:80:5d:1e:71:24:ba:72:b0:
83:86:06:92:e9:22:6a:89:69:da:83:a5:53:32:3c:
d0:74:fd:ba:14:06:2f:a6:e9:a7:c8:33:8a:a1:a6:
82:b5:78:f5:3f:8e:24:e6:b9:f9:90:fb:ef:28:22:
fe:11:ff:2c:24:3d:0d:b9:55:8b:49:6d:53:c7:92:
b8:dc:43:c3:69:62:b6:49:7b:8e:f7:4d:e1:bf:ce:
12:b2:79:82:de:89:32:dd:e2:59:8a:3c:99:e3:2b:
8d:de:1a:87:5c:33:ce:6a:1d:d9:bd:cf:96:c1:69:
8e:95:53:59:60:d7:e2:86:51:6b:fc:92:78:fd:bc:
a5:44:1c:ac:d0:3c:ed:c5:b9:0e:43:af:70:14:81:
bf:19:79:88:e0:dd:74:6a:90:69:c1:e0:16:f4:c1:
d3:f8:96:8d:2f:c6:ac:f6:df:47:b5:f0:db:01:23:
b1:5e:e8:f0:f1:5c:20:3d:aa:5e:9c:20:3f:0b:f6:
38:b2:c4:1f:7c:72:1d:29:ac:75:76:22:d3:f0:b5:
19:4a:6e:0b:fa:af:37:7c:4c:60:38:2e:c1:32:60:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1F:71:7D:FF:E6:02:DF:A3:61:D6:63:60:7B:E0:9D:8E:0F:2E:A5
X509v3 Authority Key Identifier:
keyid:08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f2:60:d6:60:7d:33:32:6e:94:8d:9c:3e:01:bf:a0:a9:98:
2a:7e:7e:f4:0f:81:34:67:f3:3b:86:ae:e5:04:21:1c:bb:3f:
e8:fc:f5:b9:2d:9c:9a:25:ef:c4:54:a9:f2:ed:e8:03:0f:42:
90:26:25:52:13:4e:69:b1:b9:db:41:eb:39:48:af:0c:fe:61:
19:fa:0b:97:ed:09:0c:6c:fe:d4:69:63:e1:ce:72:b5:72:75:
09:2c:8f:e0:fb:9b:c1:02:dd:1a:a9:54:dd:a3:a3:2c:5b:2c:
d9:f2:c8:62:c4:41:67:5c:bf:d2:7a:69:80:d3:ad:8b:ee:4b:
1e:27:23:e9:61:16:3e:8f:92:39:53:cb:8c:55:44:42:06:5e:
1b:e6:66:34:c2:a8:4f:f6:93:9a:43:0c:aa:9a:9a:40:fd:42:
df:69:d3:c0:12:7b:76:c7:39:6a:7f:77:f5:55:c1:45:18:ac:
5f:b6:55:7d:da:a0:38:7a:67:ac:c4:95:76:ff:9a:06:d6:3d:
a3:1e:a3:a7:cc:37:83:a6:64:63:64:c8:b3:8e:58:4b:92:3f:
5f:05:98:d7:8b:5e:84:a2:fa:51:52:26:66:3e:45:f8:1f:fd:
ff:15:0a:a7:e4:fb:3f:de:5f:60:06:93:25:c2:34:d2:bd:b5:
eb:b3:69:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:34:10 2025 by rpki-client