Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
File: Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json)
Hash identifier: CnBmZIKhwEXDTmcp3Jm8w8H0C1X3bfx583Ebc5IgTT0=
Subject key identifier: 84:DF:34:98:C7:E0:F0:6B:82:C4:D5:CB:50:62:B5:8D:F1:36:AD:10
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial: 0199FBEC06B837AC81AE3DA18CCFAC4BEAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
Manifest number: 03E7
Signing time: Sun 19 Oct 2025 10:02:53 +0000
Manifest this update: Sun 19 Oct 2025 10:02:53 +0000
Manifest next update: Mon 20 Oct 2025 10:02:53 +0000
Files and hashes: 1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: mDACZVwXdEvH+7nTO7Of2YXUaM0NF11b0kI0PBAOkxA=)
2: Fzr1By55ZDL1AtjsLrCzN_F0gos.roa (hash: Qt6aTT1EiGUDBJx7fPAgx7FJH8IrDb++OhiY8fc3GRU=)
3: TVVwgauLv5P4p_N1MbSMDHrhgkU.roa (hash: nBwDhWyQjjSPhhqjp9xgHoZZMM8YBA0mhGeSxmJeXVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:06:b8:37:ac:81:ae:3d:a1:8c:cf:ac:4b:ea:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Validity
Not Before: Oct 19 10:02:53 2025 GMT
Not After : Oct 20 10:02:53 2025 GMT
Subject: CN=84df3498c7e0f06b82c4d5cb5062b58df136ad10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:6a:89:89:32:a6:ce:8a:19:55:04:81:71:
ee:e9:22:73:2f:cd:8d:cc:06:19:9f:e5:14:ce:f3:
08:64:94:b7:9d:7d:2c:a7:aa:76:86:5a:29:62:1a:
2a:f8:f1:db:4a:be:9b:3a:e3:a4:b2:95:37:26:64:
6c:94:e8:81:63:b5:7b:be:86:c8:80:37:7c:f0:68:
f5:9c:66:1f:52:0b:c5:ce:15:4d:57:c5:ec:4d:84:
76:be:50:ec:8e:7a:48:05:c4:46:7b:52:91:06:93:
05:cd:27:3b:75:71:68:35:1d:33:08:3e:b3:6b:2b:
c3:2b:b6:34:ef:c9:9b:e9:40:10:3a:05:21:64:be:
fd:33:5d:43:19:da:c7:fd:35:23:fe:0e:c7:10:7c:
3b:17:1c:a4:86:5c:64:8f:5b:93:95:58:40:80:ed:
a6:78:cc:84:a1:b6:b1:b2:95:1b:82:67:0d:ef:cc:
9e:1e:c8:46:5f:35:cc:3f:0d:65:c2:3f:79:92:d2:
a3:a4:b4:97:f1:ec:3c:58:ed:c1:6a:0f:9d:aa:ac:
41:e5:ac:8b:bc:21:7a:53:b8:da:f3:9f:f1:29:ee:
79:44:50:fd:e5:d3:a1:ee:02:22:37:f8:79:94:e1:
16:60:65:57:2e:45:6d:74:8d:2c:8c:4d:1a:80:9d:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DF:34:98:C7:E0:F0:6B:82:C4:D5:CB:50:62:B5:8D:F1:36:AD:10
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6e:00:9c:0d:ff:23:0a:08:28:b6:6d:1e:c1:95:c7:05:01:
3c:88:52:01:d0:3b:0b:b9:65:a7:c9:0c:2c:34:cf:14:89:f7:
70:88:37:d2:8e:2e:b9:5c:75:f4:45:24:69:34:53:b7:d3:08:
57:39:2a:78:11:6c:6d:8e:38:40:cc:91:da:d4:5f:9b:a8:9e:
5e:56:da:f8:ea:c5:40:f3:f8:04:9e:af:cf:43:f2:63:31:ff:
71:53:30:a4:98:a6:c7:05:5e:c3:fb:29:cf:d1:ac:4b:f5:c2:
c5:26:d0:e5:23:2d:ec:de:04:79:31:62:ce:a6:b1:e0:4a:26:
31:85:26:da:a7:5c:20:0f:e2:80:1b:33:6d:09:43:17:3b:09:
61:ab:b6:ba:0b:39:29:cd:52:08:14:db:e0:4f:33:c7:9c:b9:
c9:ed:eb:bb:81:ca:a6:cf:88:b3:3c:bf:e8:e0:3f:04:47:bc:
e1:ba:e4:2f:7f:c8:77:80:1f:df:af:96:f3:ed:dc:43:e5:b1:
65:8e:4d:ea:94:36:da:d8:f4:71:29:28:d2:4a:d1:a9:25:c4:
f3:c1:a0:6a:65:03:bf:1c:b9:28:18:f7:85:37:30:dc:5a:08:
6c:4d:c0:49:25:41:8c:e3:2f:ae:89:69:ba:7f:79:33:b4:90:
90:8c:ec:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77Aa4N6yBrj2hjM+sS+qwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOGU5M2YxOTYxYmViYzEwMDA5Y2IyNjVjMGJhZjM0NzAy
YTNkYWIwHhcNMjUxMDE5MTAwMjUzWhcNMjUxMDIwMTAwMjUzWjAzMTEwLwYDVQQD
Eyg4NGRmMzQ5OGM3ZTBmMDZiODJjNGQ1Y2I1MDYyYjU4ZGYxMzZhZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGdqiYkyps6KGVUEgXHu6SJzL82N
zAYZn+UUzvMIZJS3nX0sp6p2hlopYhoq+PHbSr6bOuOkspU3JmRslOiBY7V7vobI
gDd88Gj1nGYfUgvFzhVNV8XsTYR2vlDsjnpIBcRGe1KRBpMFzSc7dXFoNR0zCD6z
ayvDK7Y078mb6UAQOgUhZL79M11DGdrH/TUj/g7HEHw7Fxykhlxkj1uTlVhAgO2m
eMyEobaxspUbgmcN78yeHshGXzXMPw1lwj95ktKjpLSX8ew8WO3Bag+dqqxB5ayL
vCF6U7ja85/xKe55RFD95dOh7gIiN/h5lOEWYGVXLkVtdI0sjE0agJ0TLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITfNJjH4PBrgsTVy1BitY3xNq0QMB8GA1UdIwQY
MBaAFAqOk/GWG+vBAAnLJlwLrzRwKj2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ282VDhaWWI2OEVBQ2NzbVhBdXZOSEFxUGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zOWZhNDMtOTc5NC00MjFhLWJhODkt
YjkzNTZlNjFmNzNhLzEvQ282VDhaWWI2OEVBQ2NzbVhBdXZOSEFxUGFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8zOWZhNDMtOTc5NC00MjFhLWJhODktYjkzNTZlNjFmNzNh
LzEvQ282VDhaWWI2OEVBQ2NzbVhBdXZOSEFxUGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANm4AnA3/
IwoIKLZtHsGVxwUBPIhSAdA7C7llp8kMLDTPFIn3cIg30o4uuVx19EUkaTRTt9MI
VzkqeBFsbY44QMyR2tRfm6ieXlba+OrFQPP4BJ6vz0PyYzH/cVMwpJimxwVew/sp
z9GsS/XCxSbQ5SMt7N4EeTFizqax4EomMYUm2qdcIA/igBszbQlDFzsJYau2ugs5
Kc1SCBTb4E8zx5y5ye3ru4HKps+Iszy/6OA/BEe84brkL3/Id4Af36+W8+3cQ+Wx
ZY5N6pQ22tj0cSko0krRqSXE88GgamUDvxy5KBj3hTcw3FoIbE3ASSVBjOMvrolp
un95M7SQkIzs0w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:24 2025 by rpki-client