Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
File: Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json)
Hash identifier: ua7oaoOSMydIL12N6DN+Qf8cjT1azIJiGfJPsYqsCc4=
Subject key identifier: 96:61:5D:0B:CE:B2:1B:08:F1:C6:81:82:CD:5C:E4:0F:09:3A:E8:64
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial: 0198D47286C75885C7FF9E8E9A3FC4AB611B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
Manifest number: 034E
Signing time: Sat 23 Aug 2025 01:02:12 +0000
Manifest this update: Sat 23 Aug 2025 01:02:12 +0000
Manifest next update: Sun 24 Aug 2025 01:02:12 +0000
Files and hashes: 1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: SiSbkN6Y+ghy/tv8vxemZVh49+p6oHOnYrK9fe+VPSA=)
2: Fzr1By55ZDL1AtjsLrCzN_F0gos.roa (hash: Qt6aTT1EiGUDBJx7fPAgx7FJH8IrDb++OhiY8fc3GRU=)
3: TVVwgauLv5P4p_N1MbSMDHrhgkU.roa (hash: nBwDhWyQjjSPhhqjp9xgHoZZMM8YBA0mhGeSxmJeXVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:86:c7:58:85:c7:ff:9e:8e:9a:3f:c4:ab:61:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Validity
Not Before: Aug 23 01:02:12 2025 GMT
Not After : Aug 24 01:02:12 2025 GMT
Subject: CN=96615d0bceb21b08f1c68182cd5ce40f093ae864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:a3:d6:41:f3:b3:6d:48:87:39:d3:05:55:
f1:89:3f:34:67:43:3a:47:3d:f3:ba:b2:b8:59:a1:
9e:eb:e5:b2:f6:be:4a:0a:32:b1:e0:93:3d:cf:6f:
68:34:63:19:7a:51:b3:db:d6:20:c3:4b:0f:98:c4:
d3:53:fb:2d:cd:e4:ff:43:01:1d:d4:86:77:aa:cc:
48:d5:cd:d8:db:65:4a:bb:a0:6e:92:49:33:5a:86:
e7:87:6b:d5:b2:46:5e:23:22:8f:a3:7d:d5:d8:db:
66:4f:14:b9:25:9e:da:7c:5b:68:01:02:00:17:ec:
3e:95:ba:2a:3f:21:34:ac:99:c0:0b:ef:76:92:ba:
5c:4a:0c:ea:23:12:b6:99:07:cf:29:fe:b8:33:43:
85:bf:b9:55:12:b7:69:a7:54:e4:57:38:c9:70:02:
ba:f2:65:90:9c:ea:0e:c3:10:ab:92:a0:bc:60:f2:
8e:71:a8:29:1b:fe:ee:77:98:2e:24:9c:9b:c6:e2:
18:54:6f:5d:b4:ba:c4:70:85:4b:cb:1e:ea:1c:8d:
53:7c:cf:55:a5:99:a3:12:08:84:ef:42:e4:31:3a:
9a:0d:0b:b4:83:db:f3:68:c6:12:85:b7:8c:a5:0b:
9e:36:1a:4e:1a:89:db:ed:d7:27:62:2c:cc:c9:43:
41:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:61:5D:0B:CE:B2:1B:08:F1:C6:81:82:CD:5C:E4:0F:09:3A:E8:64
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2b:4c:8f:74:a3:cf:32:ef:1e:e2:a7:a1:99:6c:1f:a5:9c:
2d:32:d7:46:04:9b:ba:99:ac:0c:ec:cb:5d:88:84:bc:05:b8:
8c:dd:06:ae:32:b3:7e:c6:ae:55:70:c8:3f:e1:1c:48:db:a3:
d1:f6:b9:d3:26:ed:77:f2:4c:00:ab:7b:65:a4:10:e2:3e:48:
45:25:d0:39:f2:fc:a4:21:37:cc:d8:3b:02:a1:32:a8:1a:93:
3d:dc:bb:d2:e6:0b:51:b7:61:1c:8f:c0:d6:e3:84:a3:b8:04:
7c:fa:bb:60:97:22:ef:c7:3e:69:71:73:84:f9:1e:b8:a2:40:
bb:41:4e:d1:7a:2c:ee:af:52:46:79:9f:0d:2a:7d:11:dc:40:
7a:05:ef:42:0e:d2:06:01:54:d1:d2:d9:b2:27:b9:d7:fa:02:
72:53:f4:0b:40:13:24:6b:36:32:c4:6b:9a:7b:59:c4:05:a0:
6b:c7:ae:3c:2c:46:39:ae:85:ac:5c:23:c0:75:19:85:2f:17:
68:d8:0d:8d:6f:2b:70:75:00:98:45:95:1b:6a:c3:a5:15:71:
24:d3:bb:c1:f4:23:73:ad:e8:85:7c:2c:84:2e:09:0b:1b:16:
c9:e1:70:d6:cc:86:9b:52:19:8d:77:ad:57:14:99:0c:13:69:
68:80:0b:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcobHWIXH/56Omj/Eq2EbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOGU5M2YxOTYxYmViYzEwMDA5Y2IyNjVjMGJhZjM0NzAy
YTNkYWIwHhcNMjUwODIzMDEwMjEyWhcNMjUwODI0MDEwMjEyWjAzMTEwLwYDVQQD
Eyg5NjYxNWQwYmNlYjIxYjA4ZjFjNjgxODJjZDVjZTQwZjA5M2FlODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuyj1kHzs21IhznTBVXxiT80Z0M6
Rz3zurK4WaGe6+Wy9r5KCjKx4JM9z29oNGMZelGz29Ygw0sPmMTTU/stzeT/QwEd
1IZ3qsxI1c3Y22VKu6BukkkzWobnh2vVskZeIyKPo33V2NtmTxS5JZ7afFtoAQIA
F+w+lboqPyE0rJnAC+92krpcSgzqIxK2mQfPKf64M0OFv7lVErdpp1TkVzjJcAK6
8mWQnOoOwxCrkqC8YPKOcagpG/7ud5guJJybxuIYVG9dtLrEcIVLyx7qHI1TfM9V
pZmjEgiE70LkMTqaDQu0g9vzaMYShbeMpQueNhpOGonb7dcnYizMyUNBVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZhXQvOshsI8caBgs1c5A8JOuhkMB8GA1UdIwQY
MBaAFAqOk/GWG+vBAAnLJlwLrzRwKj2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ282VDhaWWI2OEVBQ2NzbVhBdXZOSEFxUGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zOWZhNDMtOTc5NC00MjFhLWJhODkt
YjkzNTZlNjFmNzNhLzEvQ282VDhaWWI2OEVBQ2NzbVhBdXZOSEFxUGFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8zOWZhNDMtOTc5NC00MjFhLWJhODktYjkzNTZlNjFmNzNh
LzEvQ282VDhaWWI2OEVBQ2NzbVhBdXZOSEFxUGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCtMj3Sj
zzLvHuKnoZlsH6WcLTLXRgSbupmsDOzLXYiEvAW4jN0GrjKzfsauVXDIP+EcSNuj
0fa50ybtd/JMAKt7ZaQQ4j5IRSXQOfL8pCE3zNg7AqEyqBqTPdy70uYLUbdhHI/A
1uOEo7gEfPq7YJci78c+aXFzhPkeuKJAu0FO0Xos7q9SRnmfDSp9EdxAegXvQg7S
BgFU0dLZsie51/oCclP0C0ATJGs2MsRrmntZxAWga8euPCxGOa6FrFwjwHUZhS8X
aNgNjW8rcHUAmEWVG2rDpRVxJNO7wfQjc63ohXwshC4JCxsWyeFw1syGm1IZjXet
VxSZDBNpaIAL7g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:28 2025 by rpki-client