Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: IfugY/33qc7g8quSFfTpsrc7b4EOwdAS7STJ97QLF9M=
Subject key identifier: 8C:29:4C:D9:6B:88:80:56:34:0A:E0:A7:C9:E2:8D:23:52:61:B9:52
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 0199FC8FB2C705CB8263F7EC0B96D5216D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 140D
Signing time: Sun 19 Oct 2025 13:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:01:39 +0000
Manifest next update: Mon 20 Oct 2025 13:01:39 +0000
Files and hashes: 1: BepPUqJmcox6vrPVeFLnic_YFR0.roa (hash: C5IbNUmrfVvGpmpP7H7NCibsdAPbj5KKxAELI101al0=)
2: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: c7OTKIz9o4qGEH+ed+LdisB+t7ZV4qnFH/Uggx4KjLk=)
3: yKqwm37t4yVmxr4NwzTqfwD-IDY.roa (hash: MxaSTIqKL5tTZsGpRXKzjl3dEdK1M2+iZYuBArbrbWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b2:c7:05:cb:82:63:f7:ec:0b:96:d5:21:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Oct 19 13:01:39 2025 GMT
Not After : Oct 20 13:01:39 2025 GMT
Subject: CN=8c294cd96b888056340ae0a7c9e28d235261b952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b6:b5:09:13:2b:f2:a1:24:76:53:ef:d5:b5:
c1:6b:f8:27:44:f4:eb:22:e5:5b:9e:1a:7a:d1:e7:
57:91:32:89:8a:e8:20:83:17:03:f7:f0:1a:0f:82:
3c:63:63:d9:37:72:d5:ea:bb:91:f4:34:34:a7:97:
a7:c5:32:68:79:8c:f7:dd:8f:57:50:71:b4:ab:78:
b1:78:03:97:3c:54:69:66:8e:92:59:62:41:a1:b0:
e2:f6:84:8b:ee:75:4c:7c:ba:a2:de:8c:88:77:50:
60:ad:a5:2e:2d:17:e6:35:6d:65:ae:16:d2:4e:3e:
1c:9f:55:7e:96:68:7f:09:29:3b:e2:90:48:ca:f2:
55:c6:cb:40:83:13:22:23:2c:82:5f:06:9c:1f:ee:
b1:7f:8a:8b:0f:b8:5e:97:a4:22:f8:d9:c9:3c:d7:
ee:b8:18:45:22:fa:ba:51:8b:b6:66:cd:7f:8f:41:
56:af:58:7f:a7:3f:a7:5a:e0:f2:c7:da:da:10:0e:
ec:da:5f:db:80:84:ab:f8:77:13:6b:a9:06:bf:72:
d0:08:bf:37:79:5e:bc:e8:72:9a:7c:85:04:c3:91:
58:68:fe:77:ae:ad:55:18:eb:fe:95:79:fb:c9:2a:
0b:c0:78:b7:ac:54:5f:9e:a6:71:86:16:ca:73:ee:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:29:4C:D9:6B:88:80:56:34:0A:E0:A7:C9:E2:8D:23:52:61:B9:52
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:dd:a4:8f:db:6e:d5:04:b8:ef:dd:a4:f8:f9:b5:31:51:e5:
19:50:ee:3a:9a:7d:20:50:32:52:75:e4:97:96:ee:ff:93:5e:
04:fd:ec:c1:61:2f:0e:76:dd:23:2b:d8:5f:0f:8d:4c:f8:05:
1d:8b:3e:01:25:5b:d8:10:8c:07:ab:92:d0:71:e8:30:5c:43:
37:d2:e1:38:e4:e5:6f:b4:0c:5c:89:c0:4e:f2:01:16:61:a4:
15:27:d8:a3:18:3f:bf:53:29:0c:80:83:ee:ed:84:0c:28:23:
23:f2:6d:53:45:26:e7:a4:d6:35:4a:76:dc:ef:2e:30:56:56:
be:f9:67:97:4d:a9:a9:3b:e4:e3:cb:7d:e0:02:c2:61:d9:a3:
29:14:df:a4:7f:a7:df:f8:0d:d3:89:12:dd:bb:78:15:1f:3a:
79:21:20:38:37:95:46:f1:c6:39:36:ba:c8:c0:bb:d4:ab:27:
d8:3a:54:13:f9:c1:6a:1f:bc:4a:5b:64:ff:b3:82:8f:c6:b8:
34:b8:32:a3:27:d9:4c:b6:bc:0d:8b:62:1c:6f:b1:e2:af:f5:
a2:bd:db:f1:ad:90:7e:cb:d8:f1:12:9e:b0:c3:7c:c7:36:e7:
e4:bf:1a:05:ed:db:1b:e1:ac:9b:09:1d:4d:02:97:88:52:d9:
7d:01:5e:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j7LHBcuCY/fsC5bVIW2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhODRlNDczYWE1NjRlYjUxYTdlN2ViOGIxOGYxNGFjMGNi
YzJjOWMwHhcNMjUxMDE5MTMwMTM5WhcNMjUxMDIwMTMwMTM5WjAzMTEwLwYDVQQD
Eyg4YzI5NGNkOTZiODg4MDU2MzQwYWUwYTdjOWUyOGQyMzUyNjFiOTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ra1CRMr8qEkdlPv1bXBa/gnRPTr
IuVbnhp60edXkTKJiugggxcD9/AaD4I8Y2PZN3LV6ruR9DQ0p5enxTJoeYz33Y9X
UHG0q3ixeAOXPFRpZo6SWWJBobDi9oSL7nVMfLqi3oyId1BgraUuLRfmNW1lrhbS
Tj4cn1V+lmh/CSk74pBIyvJVxstAgxMiIyyCXwacH+6xf4qLD7hel6Qi+NnJPNfu
uBhFIvq6UYu2Zs1/j0FWr1h/pz+nWuDyx9raEA7s2l/bgISr+HcTa6kGv3LQCL83
eV686HKafIUEw5FYaP53rq1VGOv+lXn7ySoLwHi3rFRfnqZxhhbKc+5MRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwpTNlriIBWNArgp8nijSNSYblSMB8GA1UdIwQY
MBaAFAqE5HOqVk61Gn5+uLGPFKwMvCycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgt
NTQ2MjhkZmNiYTRjLzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgtNTQ2MjhkZmNiYTRj
LzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFt2kj9tu
1QS4792k+Pm1MVHlGVDuOpp9IFAyUnXkl5bu/5NeBP3swWEvDnbdIyvYXw+NTPgF
HYs+ASVb2BCMB6uS0HHoMFxDN9LhOOTlb7QMXInATvIBFmGkFSfYoxg/v1MpDICD
7u2EDCgjI/JtU0Um56TWNUp23O8uMFZWvvlnl02pqTvk48t94ALCYdmjKRTfpH+n
3/gN04kS3bt4FR86eSEgODeVRvHGOTa6yMC71Ksn2DpUE/nBah+8Sltk/7OCj8a4
NLgyoyfZTLa8DYtiHG+x4q/1or3b8a2QfsvY8RKesMN8xzbn5L8aBe3bG+Gsmwkd
TQKXiFLZfQFetw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:41 2025 by rpki-client