Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
File: COohU1NqgjgJmupmgIAfpEW_qd8.mft (raw, json)
Hash identifier: SL2YD6Yk+Y6QkjcdFlvxJ+kQyCqYdus/Iq2GMxUxFHo=
Subject key identifier: 7F:BA:65:A9:76:6B:1F:BF:43:49:16:CE:01:91:E8:7B:99:0C:A8:40
Authority key identifier: 08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF
Certificate issuer: /CN=08ea2153536a8238099aea6680801fa445bfa9df
Certificate serial: 0199FC5832A7EECAED7AFB252D25FA194C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
Manifest number: 1629
Signing time: Sun 19 Oct 2025 12:01:02 +0000
Manifest this update: Sun 19 Oct 2025 12:01:02 +0000
Manifest next update: Mon 20 Oct 2025 12:01:02 +0000
Files and hashes: 1: COohU1NqgjgJmupmgIAfpEW_qd8.crl (hash: cIz3ULDSN3d9nI702yiCr3pMvuf2IQxYB0Zp0mgK+50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:32:a7:ee:ca:ed:7a:fb:25:2d:25:fa:19:4c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ea2153536a8238099aea6680801fa445bfa9df
Validity
Not Before: Oct 19 12:01:02 2025 GMT
Not After : Oct 20 12:01:02 2025 GMT
Subject: CN=7fba65a9766b1fbf434916ce0191e87b990ca840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:54:c3:52:70:08:7d:d7:41:05:f6:92:05:b9:
88:7b:f7:ff:a4:04:99:ed:ad:16:52:30:d4:de:a5:
77:0d:a7:79:69:28:42:a7:d3:fa:db:30:e5:e1:9b:
33:7d:92:81:d1:bc:50:dd:fc:a4:cb:21:39:79:ba:
c8:07:25:d6:f7:fa:cb:b0:29:bd:cf:8d:b3:fd:d5:
ab:2f:40:c5:a1:db:cb:ab:12:8a:47:6e:43:98:5f:
08:2f:cb:c9:a9:64:87:71:74:11:54:8a:5f:ad:5e:
52:df:69:5c:a0:e1:99:64:1a:46:ac:30:bb:b3:47:
96:d7:bb:c2:18:4e:15:ad:93:12:8f:4a:94:73:95:
ab:a6:bc:a9:5c:4b:66:e9:b4:1e:b2:d6:4c:27:59:
3d:cc:ae:9a:cc:d5:0a:71:e1:68:ba:d1:13:e2:5f:
15:8f:e4:63:5d:15:fc:33:39:c5:2c:fc:47:70:f8:
2a:e4:7f:cc:7e:a1:20:00:3b:c0:4a:3a:a5:33:d7:
e6:43:49:76:20:7b:6a:7f:24:42:69:7e:b2:df:18:
32:39:a3:4e:25:ee:9b:c2:f8:a2:cd:98:64:a9:58:
05:a9:b1:e4:b3:e6:8e:93:54:6b:ba:77:c0:27:b4:
3c:9c:17:04:9c:5b:cf:0e:a2:ed:3f:8b:04:87:df:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BA:65:A9:76:6B:1F:BF:43:49:16:CE:01:91:E8:7B:99:0C:A8:40
X509v3 Authority Key Identifier:
keyid:08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:04:19:f7:3d:98:3c:dd:90:74:e4:cd:cf:84:64:4e:0a:4c:
04:49:88:cb:c5:24:df:96:49:9b:95:02:c1:64:2f:36:79:b6:
3c:36:91:e8:b0:c2:31:6a:4f:ac:77:da:69:c8:3d:ba:02:5f:
6f:bd:fe:7f:be:ec:d5:d3:aa:3e:9c:04:4d:7c:26:30:c1:4e:
77:23:fe:38:85:5c:a3:da:25:78:0e:bf:5e:99:17:3e:11:6b:
98:92:14:5a:60:9c:a1:5b:e2:a4:44:5d:8d:3d:dd:0f:87:29:
aa:d5:f4:1e:1f:07:c5:5d:dc:9a:42:c7:0f:08:98:62:d2:ff:
73:30:70:b9:35:6e:4d:eb:a6:cb:2e:b0:60:2a:79:df:fe:09:
90:0b:0b:8a:75:41:34:0e:25:55:a6:fe:a6:88:cd:39:6f:3c:
8f:6b:66:aa:8a:42:41:e6:77:73:67:ff:29:71:93:7b:e6:ef:
8c:09:be:86:be:7c:34:8c:b3:02:ef:bf:cd:59:73:af:2e:e6:
34:f8:72:a8:0f:a5:f8:11:f8:ce:2d:26:52:fc:18:78:c8:6e:
a6:ac:91:dd:e1:60:36:11:b3:60:76:34:9b:dc:df:ef:a8:0a:
8f:b8:36:cb:85:72:e9:5e:02:68:37:8a:93:f1:e3:91:7e:b4:
8a:bb:88:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:05 2025 by rpki-client