Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
File: Co59_NIAyF6zysZvhZtxEKuZsQo.mft (raw, json)
Hash identifier: tD2j2RpVWE+QqqA6rfyJGG8lHr41SkWHnOHaF4+FOKo=
Subject key identifier: 07:A1:DE:B8:C4:4A:E1:8F:18:4D:14:C5:DB:47:13:02:41:9E:B1:80
Authority key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
Certificate issuer: /CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Certificate serial: 019A0335B1E24CBF5DC192244FC6F914C253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
Manifest number: 03C9
Signing time: Mon 20 Oct 2025 20:00:41 +0000
Manifest this update: Mon 20 Oct 2025 20:00:41 +0000
Manifest next update: Tue 21 Oct 2025 20:00:41 +0000
Files and hashes: 1: Co59_NIAyF6zysZvhZtxEKuZsQo.crl (hash: zky5ggTQ7eXX60yQyjMpPI7MLGefk/LASMGwDV1wGNs=)
2: ZnFCz6rKLcZRx4oWRqGX1WP5row.roa (hash: Fg68tw9/QoQIkz8jU0UgngyMGnhnkYCZ0zRagw9xxDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:35:b1:e2:4c:bf:5d:c1:92:24:4f:c6:f9:14:c2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Validity
Not Before: Oct 20 20:00:41 2025 GMT
Not After : Oct 21 20:00:41 2025 GMT
Subject: CN=07a1deb8c44ae18f184d14c5db471302419eb180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:ef:f1:85:2f:a6:85:a8:b1:c8:32:26:cf:
20:3d:44:fd:1d:a8:85:8c:ab:72:aa:10:70:f2:5d:
52:1b:de:41:ae:15:56:d1:56:fb:96:19:7f:04:8e:
ad:24:fb:7f:9d:15:6c:8e:a6:94:93:77:be:ae:cb:
fd:b6:50:3b:1f:8a:57:5b:ba:a6:1a:1a:c2:57:bc:
d4:4d:a2:23:52:2f:9a:c7:6e:05:30:1d:b1:e9:72:
3f:ff:10:93:32:01:1f:c1:8a:a8:1e:75:b7:cf:05:
09:e7:5c:c5:a1:c9:64:81:dd:9b:31:ce:9b:07:bd:
1d:52:ae:c1:5e:54:7a:bf:26:58:35:b0:c9:8f:ea:
92:fa:db:46:58:f2:07:1d:25:35:5e:b6:bb:a4:ee:
00:bf:28:46:78:b6:11:0b:a4:42:35:d6:c9:77:ae:
1c:60:4a:c9:3f:a0:62:ad:f6:0d:19:89:d0:02:19:
70:d3:1f:95:dd:45:6c:58:92:6a:ea:92:a7:54:1d:
33:f2:9b:e7:9f:1e:f9:c9:2c:f4:35:0e:0e:b5:f3:
af:ef:24:fa:7e:de:3a:13:54:6e:28:e4:96:7f:e5:
ec:d8:69:99:1d:f3:e0:b7:19:37:d2:79:86:19:75:
e8:f2:b2:27:7a:f0:93:2a:3c:8a:39:f6:6d:72:6c:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A1:DE:B8:C4:4A:E1:8F:18:4D:14:C5:DB:47:13:02:41:9E:B1:80
X509v3 Authority Key Identifier:
keyid:0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0b:8a:c1:b9:d7:01:1b:e8:a5:6f:68:3f:e3:3a:56:c5:c8:
fa:cc:08:12:35:49:80:ce:f7:34:fc:0a:ba:94:2a:87:46:4b:
51:2b:85:b9:dc:a9:01:4a:71:a2:04:8b:b5:28:b4:36:1a:55:
56:5f:91:d9:ba:fe:63:e5:7f:30:5e:69:47:07:2f:ca:bd:1d:
e8:c1:ec:06:82:68:64:5f:94:38:63:a5:c4:3e:bb:70:1c:b2:
db:5f:94:ff:bd:d3:b6:59:7c:df:1c:af:e1:24:9a:f7:44:c4:
24:f3:b7:53:12:9e:1f:b2:a0:db:01:c9:df:38:6f:79:80:33:
67:c0:75:90:be:a2:1b:80:c9:cb:63:6b:b9:22:c5:7e:57:3a:
0a:ba:0e:e1:bd:20:75:ff:ae:0c:33:bf:73:8d:5b:8b:a9:1d:
3e:cd:8e:5f:29:65:a5:62:55:1e:c5:ff:20:27:63:37:67:dd:
8f:80:f3:e7:38:73:8e:1d:fa:01:f4:5f:67:f3:f8:d0:91:15:
46:ee:06:f4:ed:db:c0:3a:72:39:06:37:14:e3:50:00:90:45:
4d:1b:8f:56:2d:14:a2:85:57:4d:d0:d2:dd:94:38:84:87:57:
d8:8a:3c:1a:27:26:7c:1c:17:3e:05:fd:36:a1:ad:f7:ac:b7:
4e:47:fa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:10:12 2025 by rpki-client