Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
File: coCW6KzXbpqhfz62eAQG49pWPtI.mft (raw, json)
Hash identifier: F7wj35qTlmuYWdyZYXxyQIq8r0LBUDB+QS3LK83bplI=
Subject key identifier: 5F:E5:98:DA:7A:1E:DD:85:4E:BB:5C:19:BE:3B:33:42:10:A9:59:0E
Authority key identifier: 72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
Certificate issuer: /CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
Certificate serial: 0199FCC623C3FE72243D905BA82B2EE031B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
Manifest number: 159C
Signing time: Sun 19 Oct 2025 14:01:07 +0000
Manifest this update: Sun 19 Oct 2025 14:01:07 +0000
Manifest next update: Mon 20 Oct 2025 14:01:07 +0000
Files and hashes: 1: coCW6KzXbpqhfz62eAQG49pWPtI.crl (hash: 2sbLQ2rP/GD+a1+NGViLw8lIPHuFWuKgSbL3C29kSYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:23:c3:fe:72:24:3d:90:5b:a8:2b:2e:e0:31:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
Validity
Not Before: Oct 19 14:01:07 2025 GMT
Not After : Oct 20 14:01:07 2025 GMT
Subject: CN=5fe598da7a1edd854ebb5c19be3b334210a9590e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:ce:cc:a3:75:47:dc:39:e5:47:61:b5:fd:
7b:1b:a9:c3:6f:3f:68:a8:9e:d8:26:d1:14:34:cc:
22:c8:b0:05:d1:bf:f5:73:e2:66:25:c1:8d:d8:29:
76:b8:a6:63:08:15:35:2a:49:3f:6a:2f:91:2d:67:
e7:88:f1:44:d4:4a:38:c1:56:1e:6d:32:e4:cc:02:
fc:a6:45:6a:2a:ae:e9:a2:f5:78:4b:0d:af:ab:65:
22:7c:b1:9a:9c:39:db:ae:50:41:19:a1:87:4b:eb:
08:54:82:de:4a:5c:66:33:16:f5:fc:0b:74:90:d9:
4f:91:b5:1c:db:b4:b8:ac:ca:96:b7:4a:a9:8d:08:
e8:d8:1a:88:5b:e0:7e:6d:a3:82:fc:f1:96:fb:01:
99:8b:85:12:e1:2e:70:45:08:b2:74:ea:d2:48:d7:
5d:a1:c4:96:eb:a1:e5:be:9d:7d:4a:81:1f:c1:dc:
a8:38:c4:ac:53:19:a6:24:40:71:ae:75:fc:67:2a:
c6:08:b1:73:e4:d3:fa:3e:cc:62:72:69:24:22:63:
d7:43:84:70:33:88:4f:aa:99:a0:c0:ee:25:cc:dd:
48:a8:45:36:86:66:a5:a6:16:b2:f7:ed:8a:42:03:
26:86:07:08:05:3d:9d:8e:61:06:84:d7:bc:32:53:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E5:98:DA:7A:1E:DD:85:4E:BB:5C:19:BE:3B:33:42:10:A9:59:0E
X509v3 Authority Key Identifier:
keyid:72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:da:51:b3:e9:85:58:d2:0a:a4:4e:b1:88:de:a4:72:a7:68:
43:a4:0b:34:00:4c:2b:ff:ea:b9:fc:e8:6f:95:e0:73:17:a1:
bc:e4:78:08:24:93:de:94:e3:37:9e:b0:3e:63:41:a0:ab:7c:
eb:8a:59:07:21:44:02:af:65:0f:7c:e0:2d:3f:e8:86:ac:21:
f1:ea:a3:03:c3:4a:42:3c:ce:ed:ae:b5:ba:ff:84:8d:ed:90:
34:1b:e2:4e:59:70:f9:45:ff:25:06:32:b3:d3:52:22:59:4b:
9e:2f:21:62:03:3b:f6:6c:6e:42:58:80:bd:1e:ce:d4:72:03:
a9:9d:0e:e8:2d:9e:84:f8:95:44:d1:d3:05:40:b3:ae:46:3d:
c1:8e:99:0d:ec:f8:7f:32:cb:75:2f:3c:49:be:c3:03:be:6d:
03:b8:58:8e:35:0f:ad:b9:da:23:f5:d5:a3:08:a8:11:1d:0c:
3c:34:a4:da:b6:8e:c6:ec:7c:ec:b0:e5:f9:be:3a:03:1f:b9:
7a:2e:7f:fe:35:17:71:33:12:8a:50:5e:6f:b3:6d:61:3f:52:
ff:70:88:f6:17:56:13:f2:4a:ba:86:5f:e8:ae:ba:a0:7d:1a:
1e:78:35:73:dd:6c:5c:47:c7:97:d3:3b:b1:af:95:e4:3a:f3:
17:cb:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:50 2025 by rpki-client