Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: 7QK1wCxQylnkCDcXv/mLXZk8T99pSYmMx2xmcn94FCg=
Subject key identifier: CB:0A:1D:22:EA:67:6B:65:D8:52:3A:F3:89:DC:3B:F8:09:04:4F:90
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 0198D705BA0269482CEF47CB79121C1D6BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 1375
Signing time: Sat 23 Aug 2025 13:02:13 +0000
Manifest this update: Sat 23 Aug 2025 13:02:13 +0000
Manifest next update: Sun 24 Aug 2025 13:02:13 +0000
Files and hashes: 1: BepPUqJmcox6vrPVeFLnic_YFR0.roa (hash: C5IbNUmrfVvGpmpP7H7NCibsdAPbj5KKxAELI101al0=)
2: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: 1tvrlNI9Az8biQfgVYWFwjP/vC22P5i9iM6t9S1HaIg=)
3: yKqwm37t4yVmxr4NwzTqfwD-IDY.roa (hash: MxaSTIqKL5tTZsGpRXKzjl3dEdK1M2+iZYuBArbrbWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:ba:02:69:48:2c:ef:47:cb:79:12:1c:1d:6b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Aug 23 13:02:13 2025 GMT
Not After : Aug 24 13:02:13 2025 GMT
Subject: CN=cb0a1d22ea676b65d8523af389dc3bf809044f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:cc:c1:e4:f5:4f:fe:75:3d:f6:49:fc:4a:
cd:37:0c:5f:66:00:8f:0a:98:d8:0e:af:da:07:e1:
3e:e5:c4:d3:34:b3:2b:f7:af:bd:b6:65:31:e6:2d:
3e:c1:64:88:fd:20:19:04:ae:17:25:84:4b:70:16:
5c:7a:05:7b:c0:bc:2f:b8:85:19:7d:66:be:45:5b:
23:fb:10:38:42:5a:33:f9:5d:28:de:d7:3b:3c:e7:
e4:93:33:5b:5f:14:96:50:25:2f:8a:9c:73:4b:8e:
e3:6d:96:1a:53:e1:2b:0c:6d:42:af:33:f1:4f:cb:
b7:65:0e:d1:0e:c3:a0:67:6b:7c:df:df:7a:e9:fc:
2f:29:02:a3:81:ba:3c:e5:2e:a5:b0:57:71:21:c5:
3c:a0:8a:c5:c0:80:3c:5b:1a:04:8b:e1:b3:4a:36:
08:07:94:1e:13:3d:75:d1:64:9b:fe:d2:87:ca:df:
f9:40:d4:e5:8a:f4:bf:69:2f:07:63:55:8c:fa:78:
a2:56:8f:d4:f9:aa:a1:63:11:f0:4f:f1:8e:6e:14:
01:4b:92:3a:80:36:10:af:a4:be:31:37:c5:36:93:
71:18:ba:07:95:c0:16:9c:15:ab:9e:3c:67:35:6e:
ea:21:ed:29:36:35:32:b1:2b:65:c1:d8:96:f5:d8:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0A:1D:22:EA:67:6B:65:D8:52:3A:F3:89:DC:3B:F8:09:04:4F:90
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:dc:46:03:c1:34:78:63:17:00:d2:58:62:3c:6a:4c:ee:41:
a2:16:ce:c9:9a:03:06:25:d4:8b:6a:c6:0d:57:e8:ef:dc:ec:
fc:ba:0f:19:0e:a6:1f:cf:fb:17:e7:b1:e3:14:79:15:93:50:
eb:6a:2b:af:e9:f6:57:d1:b1:6c:24:99:8c:77:a0:1a:24:67:
5e:e0:39:7c:20:69:6f:61:78:66:f6:4c:ff:c0:1b:9d:7f:a2:
94:23:78:f3:80:11:5b:01:1c:27:8d:b3:4c:43:2f:e2:1d:fe:
e4:3a:ad:a7:52:7b:07:60:61:dd:7f:d4:01:e3:9e:af:b6:7e:
27:55:15:22:df:e2:e4:e3:01:6e:01:43:0f:3d:70:7a:6e:d0:
2f:a8:5c:8a:de:52:28:6c:fe:bf:1d:bf:3d:b3:93:67:de:17:
e8:b2:d9:b5:0c:25:dc:0f:bf:fc:8f:99:2a:2c:bd:5a:3d:3f:
20:ff:12:cc:b2:69:9f:0d:3b:5c:5f:7f:3a:6e:1c:2f:6b:72:
ee:62:dd:91:ec:7d:c3:e0:b8:3f:b7:4f:e9:69:12:cc:e4:48:
c7:b7:96:8f:de:e6:a7:31:77:b0:12:65:76:26:06:ed:da:43:
30:6d:cc:28:19:17:54:54:6e:35:89:d0:22:c5:63:55:5c:dc:
46:8b:34:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:34:41 2025 by rpki-client