Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
File: coCW6KzXbpqhfz62eAQG49pWPtI.mft (raw, json)
Hash identifier: YU5OWC7R4WBFMVd/GAphfHLGT3nTT8BLyqiGg9xKe5I=
Subject key identifier: F6:68:1D:8D:93:29:57:EA:4C:8E:3B:B9:76:E9:94:66:74:5A:26:A6
Authority key identifier: 72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
Certificate issuer: /CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
Certificate serial: 0198D73B4C65E6A93620B2D513F81A7D662A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
Manifest number: 1504
Signing time: Sat 23 Aug 2025 14:00:44 +0000
Manifest this update: Sat 23 Aug 2025 14:00:44 +0000
Manifest next update: Sun 24 Aug 2025 14:00:44 +0000
Files and hashes: 1: coCW6KzXbpqhfz62eAQG49pWPtI.crl (hash: oOivOLVOA9uStE63BPG/2w19WRkOfLBT2hb6aH0xOFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:4c:65:e6:a9:36:20:b2:d5:13:f8:1a:7d:66:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
Validity
Not Before: Aug 23 14:00:44 2025 GMT
Not After : Aug 24 14:00:44 2025 GMT
Subject: CN=f6681d8d932957ea4c8e3bb976e99466745a26a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:6e:1c:d7:1f:71:5f:01:f3:a5:19:af:40:
32:46:34:15:a1:4f:ff:a6:0f:a4:4f:81:33:78:87:
9e:26:c0:a2:14:34:d4:d5:4a:7e:ee:3a:ac:f1:26:
9f:ec:2c:98:60:35:01:3f:9c:7e:58:24:b2:4d:1a:
fe:b9:17:35:68:6f:c8:11:21:cf:5f:9c:b1:59:63:
9b:e0:2e:45:84:54:62:31:92:eb:8b:14:8c:b2:7b:
06:a9:56:56:db:b7:08:a7:a5:5b:e3:82:1a:5b:41:
c2:e6:1c:58:78:a0:59:ac:98:cf:92:83:59:d9:cc:
0c:d2:40:ed:f8:38:a3:af:93:75:3f:ce:f8:a0:51:
0c:5a:6f:5b:0b:c7:63:15:cd:4d:1f:4b:24:5f:1a:
73:08:cc:68:98:54:93:85:01:e9:26:8d:99:d7:16:
86:91:c4:5c:1e:76:39:ff:a1:aa:27:92:ac:d2:db:
25:f4:ea:39:f7:2e:78:9a:15:a9:1a:08:c0:ca:2f:
f5:59:76:63:c9:53:d9:d0:16:79:25:a7:7a:0c:3d:
52:4f:c2:de:1f:67:82:45:b6:7e:86:49:06:40:95:
78:d8:c1:ea:b3:49:8d:76:71:0a:6a:c4:90:08:ba:
6f:b2:65:e6:8e:b7:34:61:f1:6c:77:b4:7d:09:2d:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:68:1D:8D:93:29:57:EA:4C:8E:3B:B9:76:E9:94:66:74:5A:26:A6
X509v3 Authority Key Identifier:
keyid:72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ab:3b:bd:61:01:a9:72:53:5c:4a:c6:ca:b2:a0:8a:ad:bd:
fe:b0:9c:99:f8:eb:22:e1:26:39:71:12:a0:de:05:d0:62:7c:
63:f6:f9:a9:18:81:0d:6a:f2:b5:96:e0:30:bb:74:79:1d:ea:
2e:6c:6d:9a:ca:66:87:4e:a3:b4:71:3d:d7:81:fd:3b:a2:04:
45:2c:3b:3a:32:fb:8e:77:c6:50:48:32:c3:88:74:74:5f:1d:
fb:c6:1b:b8:b6:b1:7b:0f:14:2a:8d:b0:ec:22:b1:7e:eb:c8:
55:3e:80:0a:5b:c8:da:17:44:d7:b8:61:26:39:2b:10:ff:cd:
76:27:cc:f7:d6:f7:62:fd:02:1c:e6:6f:f2:1f:36:b6:2c:6f:
aa:34:ae:07:37:76:d3:62:78:bd:a4:99:bb:ee:2b:0c:ee:3c:
c6:e4:6c:53:f6:3a:9a:91:ff:71:b0:cb:e8:d4:df:0d:3b:f7:
c5:12:cd:31:8b:dc:fb:d5:ee:04:93:e0:89:00:6b:11:42:5c:
bd:e5:ef:2d:1f:e8:5d:05:ff:b1:0f:7e:53:3f:bd:80:0c:50:
00:f0:43:ac:e8:d0:ff:b7:01:87:42:26:cf:33:6b:d9:11:cd:
6b:a9:91:89:7c:fa:d1:de:60:5c:60:d8:46:60:ec:09:73:0c:
bd:22:e4:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO0xl5qk2ILLVE/gafWYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyODA5NmU4YWNkNzZlOWFhMTdmM2ViNjc4MDQwNmUzZGE1
NjNlZDIwHhcNMjUwODIzMTQwMDQ0WhcNMjUwODI0MTQwMDQ0WjAzMTEwLwYDVQQD
EyhmNjY4MWQ4ZDkzMjk1N2VhNGM4ZTNiYjk3NmU5OTQ2Njc0NWEyNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzJuHNcfcV8B86UZr0AyRjQVoU//
pg+kT4EzeIeeJsCiFDTU1Up+7jqs8Saf7CyYYDUBP5x+WCSyTRr+uRc1aG/IESHP
X5yxWWOb4C5FhFRiMZLrixSMsnsGqVZW27cIp6Vb44IaW0HC5hxYeKBZrJjPkoNZ
2cwM0kDt+Dijr5N1P874oFEMWm9bC8djFc1NH0skXxpzCMxomFSThQHpJo2Z1xaG
kcRcHnY5/6GqJ5Ks0tsl9Oo59y54mhWpGgjAyi/1WXZjyVPZ0BZ5Jad6DD1ST8Le
H2eCRbZ+hkkGQJV42MHqs0mNdnEKasSQCLpvsmXmjrc0YfFsd7R9CS2g0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZoHY2TKVfqTI47uXbplGZ0WiamMB8GA1UdIwQY
MBaAFHKAluis126aoX8+tngEBuPaVj7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY29DVzZLelhicHFoZno2MmVBUUc0OXBXUHRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9iZjE0NGItYWFiNS00MDdlLTkwNGYt
YzE3MzRkNTBjYjNiLzEvY29DVzZLelhicHFoZno2MmVBUUc0OXBXUHRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9iZjE0NGItYWFiNS00MDdlLTkwNGYtYzE3MzRkNTBjYjNi
LzEvY29DVzZLelhicHFoZno2MmVBUUc0OXBXUHRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6s7vWEB
qXJTXErGyrKgiq29/rCcmfjrIuEmOXESoN4F0GJ8Y/b5qRiBDWrytZbgMLt0eR3q
Lmxtmspmh06jtHE914H9O6IERSw7OjL7jnfGUEgyw4h0dF8d+8YbuLaxew8UKo2w
7CKxfuvIVT6AClvI2hdE17hhJjkrEP/NdifM99b3Yv0CHOZv8h82tixvqjSuBzd2
02J4vaSZu+4rDO48xuRsU/Y6mpH/cbDL6NTfDTv3xRLNMYvc+9XuBJPgiQBrEUJc
veXvLR/oXQX/sQ9+Uz+9gAxQAPBDrOjQ/7cBh0ImzzNr2RHNa6mRiXz60d5gXGDY
RmDsCXMMvSLkVA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:09 2025 by rpki-client