Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: IvtpFAXfP5URgP0vwh17JI3spDifGhqRdq42pmKFgEc=
Subject key identifier: 3B:0A:15:5B:20:AD:54:97:C2:1B:0F:7E:5A:8B:35:2C:DD:70:C1:5F
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 0197B7EAAA10779A2D44E2F6EB255F24C4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 0D5C
Signing time: Sat 28 Jun 2025 19:01:38 +0000
Manifest this update: Sat 28 Jun 2025 19:01:38 +0000
Manifest next update: Sun 29 Jun 2025 19:01:38 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: acRRWoFw/uLOJUDP7+pGAVYa6zo868Iaqayx3eXH5G0=)
2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:aa:10:77:9a:2d:44:e2:f6:eb:25:5f:24:c4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Jun 28 19:01:38 2025 GMT
Not After : Jun 29 19:01:38 2025 GMT
Subject: CN=3b0a155b20ad5497c21b0f7e5a8b352cdd70c15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:be:a4:39:28:6a:03:35:8c:33:0d:aa:9e:
dd:3f:24:d5:81:62:5a:09:c4:fe:3a:1b:ea:98:8f:
bb:61:0d:5c:70:dd:c1:6d:c0:ed:6b:04:34:8b:dd:
24:41:c7:58:e2:28:a4:03:5c:e6:a9:37:05:fe:37:
48:2a:76:61:c1:72:9b:4e:7a:26:b0:5c:27:c0:55:
16:2e:bc:7b:a4:7d:ce:e6:68:86:6e:52:de:ab:9d:
3c:4c:f2:8c:ce:d9:bb:3f:c1:e2:3a:54:38:3b:be:
8e:23:91:b8:5f:f4:6b:2f:d3:e5:16:49:18:01:ae:
99:12:b4:51:95:4b:2c:50:db:64:19:6e:9a:f2:32:
61:e3:a4:ea:bf:de:19:99:00:a4:5f:6e:3c:3e:bc:
5b:63:98:fb:d9:4c:21:ac:c0:ba:94:b5:c8:f0:b8:
a1:48:ba:28:58:de:c5:77:0d:82:c0:94:f8:22:51:
95:b4:36:6d:1c:16:c0:94:dd:13:2f:d0:51:c4:4c:
6f:40:f1:43:99:74:d2:77:cc:e9:1c:f5:91:6a:89:
51:5e:7b:e0:ca:e5:05:62:2e:0e:31:50:c2:bb:c9:
d9:c8:12:f2:48:42:ac:d4:53:93:69:bb:25:c1:90:
7a:92:de:89:98:db:19:63:a1:c1:b5:e9:6e:2f:9b:
2d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0A:15:5B:20:AD:54:97:C2:1B:0F:7E:5A:8B:35:2C:DD:70:C1:5F
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d5:94:ae:62:76:f5:27:4c:31:4d:ef:88:01:df:75:8b:80:
51:88:6c:ff:87:a7:0a:3f:89:91:74:eb:8d:73:f7:2d:f3:04:
c4:e8:60:2d:7e:44:40:20:32:25:4c:c5:46:41:6c:ac:a5:3c:
2c:e0:61:1e:96:d3:da:ce:e9:88:d6:51:4f:b8:e9:d1:b5:25:
6d:02:d4:11:9c:37:c1:be:a2:cb:41:e2:c1:b1:3d:14:c3:37:
8a:39:df:33:bc:0a:06:16:bf:af:d3:b9:bd:63:db:bd:6d:76:
3b:e0:76:d1:6c:0c:d2:41:49:7b:fa:af:10:1c:61:1a:e4:51:
76:e5:3e:3e:bb:17:ff:f7:76:b6:a8:0e:3e:af:d3:41:9b:79:
43:b7:4d:b9:8c:8d:37:b9:1d:8e:ab:0a:87:75:cb:c5:6b:27:
04:bf:88:c0:5b:30:f7:38:64:b4:fd:25:29:e1:8b:1e:df:93:
1c:1a:a9:2b:07:e2:05:88:e1:6e:15:39:f9:3e:6f:0f:47:a9:
a6:d1:45:a8:ff:c8:26:2b:b3:23:17:69:2c:94:a3:c0:9a:7e:
e1:cd:0a:8f:06:a1:b2:05:2b:8a:d4:36:85:26:c0:dd:be:e2:
21:b4:bf:d3:9c:31:85:47:0f:87:03:dd:02:1a:4e:01:e5:ea:
39:be:8b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:36 2025 by rpki-client