Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
File: cop1W_9p20tgWlFDplt9w5y6u7E.mft (raw, json)
Hash identifier: eWD747QcHTcbqIHP0+c2HyDhnqxx2hrsPm0aYn/e/8g=
Subject key identifier: 46:B1:4C:E3:ED:E1:39:4A:26:EE:DD:5C:02:A2:EA:29:65:2E:79:11
Authority key identifier: 72:8A:75:5B:FF:69:DB:4B:60:5A:51:43:A6:5B:7D:C3:9C:BA:BB:B1
Certificate issuer: /CN=728a755bff69db4b605a5143a65b7dc39cbabbb1
Certificate serial: 0199FDDA177C6A47A6C40CDEF144E44617EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
Manifest number: 10A2
Signing time: Sun 19 Oct 2025 19:02:32 +0000
Manifest this update: Sun 19 Oct 2025 19:02:32 +0000
Manifest next update: Mon 20 Oct 2025 19:02:32 +0000
Files and hashes: 1: cop1W_9p20tgWlFDplt9w5y6u7E.crl (hash: 6FOG20JpmUDKg4k1ctenNDzTy7t4ocCEqeJXlh4wWJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:17:7c:6a:47:a6:c4:0c:de:f1:44:e4:46:17:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728a755bff69db4b605a5143a65b7dc39cbabbb1
Validity
Not Before: Oct 19 19:02:32 2025 GMT
Not After : Oct 20 19:02:32 2025 GMT
Subject: CN=46b14ce3ede1394a26eedd5c02a2ea29652e7911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:fd:30:c0:55:55:08:da:84:7d:54:e0:da:
24:94:c2:1c:31:92:9d:ed:c2:a7:a5:b9:aa:8c:91:
00:81:06:73:80:ae:25:98:1d:bd:be:0c:06:8d:ce:
e3:2f:d7:20:87:37:87:80:70:68:ef:17:3d:c4:9d:
6a:5b:19:be:39:fe:0e:ea:e0:24:9c:21:ca:1c:00:
60:74:05:2a:bb:3b:ac:96:27:da:b2:70:19:9e:e1:
00:1c:7a:13:5d:57:eb:ff:40:85:63:06:88:c3:96:
72:d6:8c:7c:36:0a:99:06:a0:64:f4:8c:f8:20:bf:
67:84:cc:e9:9d:eb:14:13:e7:2d:78:e4:13:cc:78:
24:a5:8d:56:e9:41:ab:43:d0:29:f4:b6:9c:71:13:
a3:b8:eb:e3:e1:29:83:5e:53:f2:e0:5d:38:7d:d8:
5c:57:2b:fc:34:9d:f2:b4:51:b4:0d:de:29:71:af:
9a:07:4b:d8:46:88:6f:8d:1a:81:bf:29:12:a3:71:
19:af:9d:8f:da:cd:e0:d3:b4:4f:10:25:1c:0a:14:
ec:90:93:f1:32:d9:56:e6:55:d2:13:8f:15:a6:c2:
f1:ba:16:bb:d7:ac:78:79:d1:21:ac:e0:78:e4:7f:
82:e3:33:b9:15:15:26:df:18:30:aa:33:d6:2e:62:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B1:4C:E3:ED:E1:39:4A:26:EE:DD:5C:02:A2:EA:29:65:2E:79:11
X509v3 Authority Key Identifier:
keyid:72:8A:75:5B:FF:69:DB:4B:60:5A:51:43:A6:5B:7D:C3:9C:BA:BB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b5:87:dd:20:94:02:9d:45:41:e3:43:bd:2a:e5:bd:2e:67:
8f:ca:9c:f8:40:4f:7e:ad:8b:a1:81:f8:44:26:57:91:06:a0:
ad:59:ef:a1:9e:07:82:1b:11:e8:82:59:72:e8:cf:aa:2d:06:
4f:60:ce:bc:00:5b:ab:19:81:29:bd:b2:04:82:63:f5:df:55:
e3:87:98:95:c5:fa:9d:a8:25:f3:4a:cd:63:bd:06:d9:41:b4:
25:ae:51:a8:5a:73:29:97:d9:4c:7b:f5:4c:db:0e:80:2c:5e:
63:2f:c0:87:bf:80:2e:85:24:9d:74:0b:db:54:b5:4a:56:f3:
72:fb:f3:6b:6d:1d:2c:5b:a7:27:9c:50:c9:15:6d:f4:64:27:
3a:98:8a:7c:aa:8e:fa:54:05:40:94:91:e1:53:d9:37:98:6e:
a9:bf:68:ae:81:50:57:04:00:2f:0f:34:bb:ed:0b:b2:7d:92:
3e:4c:63:4a:4d:e4:c0:e3:da:7c:9b:22:de:50:d9:d8:65:96:
17:f5:67:cb:bc:db:da:f3:03:a3:0f:c5:98:c5:31:09:12:88:
b4:82:bf:17:d9:ee:3e:86:47:1c:88:15:16:0e:c1:69:31:25:
a5:a7:69:24:12:d3:8a:13:50:d4:1b:29:a9:5a:fc:5b:05:1b:
2b:a8:3c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:20:50 2025 by rpki-client