Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
File: Co59_NIAyF6zysZvhZtxEKuZsQo.mft (raw, json)
Hash identifier: 2EsCsR2UeCKfncqG/mIsv1IalVFCiXAEiHwOMInf+/8=
Subject key identifier: 45:9F:82:B3:11:71:98:1E:39:1A:D5:DF:FB:62:C2:D1:08:AC:02:AA
Authority key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
Certificate issuer: /CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Certificate serial: 0197B82131A0AEDEB7F62AF4DAD79D90F6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
Manifest number: 0299
Signing time: Sat 28 Jun 2025 20:01:12 +0000
Manifest this update: Sat 28 Jun 2025 20:01:12 +0000
Manifest next update: Sun 29 Jun 2025 20:01:12 +0000
Files and hashes: 1: Co59_NIAyF6zysZvhZtxEKuZsQo.crl (hash: stUsNLFDJB8Ns4FbODh1+k7qxKj9Tr5hRBV7PDgXQv0=)
2: ZnFCz6rKLcZRx4oWRqGX1WP5row.roa (hash: Fg68tw9/QoQIkz8jU0UgngyMGnhnkYCZ0zRagw9xxDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:31:a0:ae:de:b7:f6:2a:f4:da:d7:9d:90:f6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Validity
Not Before: Jun 28 20:01:12 2025 GMT
Not After : Jun 29 20:01:12 2025 GMT
Subject: CN=459f82b31171981e391ad5dffb62c2d108ac02aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:98:2f:d5:cd:76:c3:84:c1:be:4a:16:47:
1b:78:26:cf:2b:c5:cc:b8:29:13:06:27:20:d4:41:
4c:db:e1:71:76:71:47:43:8e:14:bf:76:65:54:a8:
f3:1f:a7:46:16:74:29:8e:b8:3c:c1:95:18:e5:f4:
a6:56:7a:22:ba:32:c4:86:a8:4f:6c:d3:ce:9c:73:
b1:82:2f:72:c7:ff:ed:6d:51:6d:5e:44:56:8f:bf:
17:be:5f:b1:f4:ee:8d:14:cd:9b:2b:a8:43:83:0c:
98:e2:d3:4f:78:f8:8f:b0:8d:e4:2e:a3:91:07:87:
73:79:9d:f1:07:2b:d0:45:e4:e3:97:ae:cf:4c:f8:
ac:22:d8:48:0e:e1:f1:b7:8b:b6:30:74:47:40:fe:
61:b5:e2:97:c3:37:2e:b6:93:99:0a:c9:5c:7c:a0:
e2:7e:9d:73:cb:18:3a:10:ac:52:f2:51:7b:f2:95:
68:45:53:d1:d5:7a:cb:0d:41:f9:31:50:0c:8a:b2:
1c:28:82:9c:fe:0a:29:45:90:f7:98:73:ce:e5:65:
21:e6:21:e2:a4:a1:d0:2a:67:14:bb:a8:27:3b:44:
ec:ba:90:80:bf:45:1b:e1:f7:0f:aa:9b:4d:3f:22:
97:4f:ed:d8:36:42:0d:1c:60:b4:68:ce:40:f7:a8:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9F:82:B3:11:71:98:1E:39:1A:D5:DF:FB:62:C2:D1:08:AC:02:AA
X509v3 Authority Key Identifier:
keyid:0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a6:46:45:4c:de:09:6d:30:b5:79:a6:b9:00:55:01:9f:68:
d8:a5:bc:e9:00:52:3f:bc:2e:1a:24:0c:18:4f:77:ff:74:f6:
23:e7:81:85:e0:f5:ef:ec:ac:43:f0:61:35:6d:e2:33:f4:23:
fc:96:1a:44:a6:92:8e:a2:07:d6:7f:7a:be:26:81:63:1e:67:
1b:aa:47:1a:84:72:52:1f:ba:61:81:6e:9e:5a:94:5f:a1:1d:
c9:22:26:3c:10:de:4e:6c:2a:83:c2:fd:8e:e7:62:2b:91:c8:
b5:2e:a0:18:44:96:dc:73:fb:2f:2c:86:9a:5a:82:ae:23:38:
3d:21:34:3d:d1:3c:ee:5d:d5:58:de:cc:5d:2b:30:b7:cf:6a:
c7:ba:59:e2:a7:c6:1f:ba:16:68:e7:88:a6:d5:6b:78:a5:7e:
4e:95:d0:66:24:a4:b8:16:36:19:53:85:bd:bd:91:72:c3:fa:
3d:9a:65:63:b5:85:6e:7a:90:dd:f5:50:63:7d:ee:81:51:ca:
5a:dc:6a:02:e0:34:3e:5b:03:b7:8e:a7:f9:d8:67:4e:4e:e1:
1b:97:9b:3e:27:77:66:1b:bb:83:c1:79:01:d8:68:54:50:1b:
6b:3e:0f:32:f4:e6:03:20:27:55:48:e1:11:92:9c:ab:3c:34:
df:02:d4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:56 2025 by rpki-client