Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
File: coB1pPvaq0LFuhkzxwL7anhBAio.mft (raw, json)
Hash identifier: 1XcGGxJpX80Xet90LH9GpWHdPFQW7/JZ/BpjlRPVn3w=
Subject key identifier: 92:24:C5:04:E5:61:50:07:44:6D:84:41:40:8E:D5:DB:F9:B4:2D:D2
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Certificate issuer: /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial: 0198D47328D4DC88AFB8278EF0044A2F1110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
Manifest number: 0A57
Signing time: Sat 23 Aug 2025 01:02:53 +0000
Manifest this update: Sat 23 Aug 2025 01:02:53 +0000
Manifest next update: Sun 24 Aug 2025 01:02:53 +0000
Files and hashes: 1: KtyjoHVh-jWQ52KLDWiih3wa8dM.roa (hash: nNl4uWGbOXfH9a0zpwdYcXAwLZ/cX6WnZQrYg+krLsg=)
2: MlaxuC-MvqxdJWc5pKLiaE76NMk.roa (hash: tH+D4l6q8LLHR1Hf7c2XhR7vBl5T4KLwCh8ScplJjz8=)
3: coB1pPvaq0LFuhkzxwL7anhBAio.crl (hash: WoADqmDV7D2RSWUp798LkjT00fj0NFAMK+lbx2YUz/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:28:d4:dc:88:af:b8:27:8e:f0:04:4a:2f:11:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Validity
Not Before: Aug 23 01:02:53 2025 GMT
Not After : Aug 24 01:02:53 2025 GMT
Subject: CN=9224c504e5615007446d8441408ed5dbf9b42dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:45:fe:ae:0b:92:32:5c:7d:ec:78:20:e8:
7e:db:12:d2:31:64:1e:8c:5f:fc:ca:97:6b:29:a1:
0b:5b:d1:60:69:3e:2b:12:ff:d9:1b:c1:84:27:fd:
0b:b3:80:e2:9c:95:02:fd:44:fe:ca:04:da:b1:76:
99:4e:c9:55:b3:60:7e:a3:e0:54:20:bd:0f:ea:94:
70:5b:45:8f:b6:95:b4:2c:29:e1:e7:1a:09:00:c8:
ae:f5:e6:70:4b:2b:c8:66:b6:52:20:d3:9e:cb:30:
1c:be:89:2e:87:0e:d4:57:07:a1:21:88:65:7d:f1:
91:44:42:13:83:81:4e:03:f5:fd:7e:4e:ae:6e:1f:
87:0b:3f:ae:fd:4c:fc:6b:0c:3c:f5:3f:de:fe:b1:
a2:ce:e1:e1:09:3c:29:f1:6b:f5:01:66:59:f4:d7:
de:f8:c0:b7:2b:06:90:a6:0a:19:2a:48:ce:96:46:
22:bb:80:26:d1:c9:4b:8d:ac:b0:78:c3:26:05:a2:
3a:a1:1c:83:51:dd:ac:59:3f:e1:44:5c:47:e1:e1:
e0:6c:f9:7c:65:8a:bd:45:ad:5e:4d:2a:b0:50:0b:
a2:ad:95:6a:6e:15:36:39:c8:85:76:16:97:f7:55:
61:a6:f0:4e:db:af:bb:21:3c:2f:d6:69:1d:9a:cf:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:24:C5:04:E5:61:50:07:44:6D:84:41:40:8E:D5:DB:F9:B4:2D:D2
X509v3 Authority Key Identifier:
keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1f:2c:d0:87:27:5e:42:1a:6d:ad:46:f1:dc:d9:e1:21:50:
32:ae:0c:71:b4:ca:1c:4d:9a:56:ea:c1:9a:60:6c:4d:63:78:
62:85:c8:6e:76:a4:74:c9:b2:04:99:f4:f1:31:1c:b4:26:96:
dc:b8:e9:0c:bb:48:86:12:06:a7:b1:67:9c:28:47:6f:36:d4:
4f:fb:d5:0f:cd:0a:b0:d8:b9:64:5f:b2:52:97:50:7e:d6:5b:
a3:0b:86:e2:9e:18:b6:24:10:b0:62:24:aa:7a:29:85:36:ef:
34:92:08:c9:72:1e:1a:dc:44:48:20:da:d9:98:96:d1:1f:b6:
82:81:0b:38:9b:c1:5f:21:c1:c2:82:b7:10:11:d9:d8:65:dd:
14:60:7e:c1:4a:f2:c4:1c:90:cc:b0:83:0e:5a:db:14:da:e6:
f0:8c:5d:5c:08:4d:c3:0d:49:3e:1b:06:f8:e4:60:cc:a3:9f:
5b:00:7d:17:30:4e:83:30:cd:44:8c:a0:ca:cf:48:1d:98:6a:
1d:d4:64:64:e4:40:8d:bd:bb:62:7f:5d:bc:df:c6:bd:4e:c5:
b7:a7:5d:64:20:41:99:0a:a8:f8:b8:ce:04:20:df:36:bd:12:
e2:2a:a9:76:b3:85:ef:3f:9a:d2:dd:36:aa:ba:c3:44:64:ee:
63:c2:41:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcyjU3IivuCeO8ARKLxEQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyODA3NWE0ZmJkYWFiNDJjNWJhMTkzM2M3MDJmYjZhNzg0
MTAyMmEwHhcNMjUwODIzMDEwMjUzWhcNMjUwODI0MDEwMjUzWjAzMTEwLwYDVQQD
Eyg5MjI0YzUwNGU1NjE1MDA3NDQ2ZDg0NDE0MDhlZDVkYmY5YjQyZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsBF/q4LkjJcfex4IOh+2xLSMWQe
jF/8ypdrKaELW9FgaT4rEv/ZG8GEJ/0Ls4DinJUC/UT+ygTasXaZTslVs2B+o+BU
IL0P6pRwW0WPtpW0LCnh5xoJAMiu9eZwSyvIZrZSINOeyzAcvokuhw7UVwehIYhl
ffGRREITg4FOA/X9fk6ubh+HCz+u/Uz8aww89T/e/rGizuHhCTwp8Wv1AWZZ9Nfe
+MC3KwaQpgoZKkjOlkYiu4Am0clLjayweMMmBaI6oRyDUd2sWT/hRFxH4eHgbPl8
ZYq9Ra1eTSqwUAuirZVqbhU2OciFdhaX91VhpvBO26+7ITwv1mkdms88cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIkxQTlYVAHRG2EQUCO1dv5tC3SMB8GA1UdIwQY
MBaAFHKAdaT72qtCxboZM8cC+2p4QQIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY29CMXBQdmFxMExGdWhrenh3TDdhbmhCQWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9iNzUwOTEtM2FhNC00MDMyLWEzOTQt
ZWNkMjhhMjVmZWVmLzEvY29CMXBQdmFxMExGdWhrenh3TDdhbmhCQWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9iNzUwOTEtM2FhNC00MDMyLWEzOTQtZWNkMjhhMjVmZWVm
LzEvY29CMXBQdmFxMExGdWhrenh3TDdhbmhCQWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoB8s0Icn
XkIaba1G8dzZ4SFQMq4McbTKHE2aVurBmmBsTWN4YoXIbnakdMmyBJn08TEctCaW
3LjpDLtIhhIGp7FnnChHbzbUT/vVD80KsNi5ZF+yUpdQftZbowuG4p4YtiQQsGIk
qnophTbvNJIIyXIeGtxESCDa2ZiW0R+2goELOJvBXyHBwoK3EBHZ2GXdFGB+wUry
xByQzLCDDlrbFNrm8IxdXAhNww1JPhsG+ORgzKOfWwB9FzBOgzDNRIygys9IHZhq
HdRkZORAjb27Yn9dvN/GvU7Ft6ddZCBBmQqo+LjOBCDfNr0S4iqpdrOF7z+a0t02
qrrDRGTuY8JBjQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:30 2025 by rpki-client