Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: XRaM9ZEETWjal9Esf9m7OLbrD1kE6BOvzak4t8a/R6A=
Subject key identifier: BC:31:29:3D:6A:9A:BB:7C:0F:70:87:FB:0A:D3:D5:6D:55:9E:59:64
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 0198D5BC1607758CA162DE802055A1F5899D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 0DF0
Signing time: Sat 23 Aug 2025 07:02:10 +0000
Manifest this update: Sat 23 Aug 2025 07:02:10 +0000
Manifest next update: Sun 24 Aug 2025 07:02:10 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: 39tVYM6IFxnKSB3cFFSSFS9r+eBfkqNSQArHkCbfonA=)
2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:16:07:75:8c:a1:62:de:80:20:55:a1:f5:89:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Aug 23 07:02:10 2025 GMT
Not After : Aug 24 07:02:10 2025 GMT
Subject: CN=bc31293d6a9abb7c0f7087fb0ad3d56d559e5964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:58:e3:0e:a9:6e:5d:6d:60:ac:bf:92:62:
cc:92:66:77:c9:a7:8e:44:ed:f4:b7:e5:4f:90:1a:
20:b3:8a:00:e0:d3:e8:91:96:7e:9e:e0:f7:32:bd:
1a:ec:73:3f:64:d1:7d:f5:f9:c6:85:72:d3:40:59:
d3:62:d6:97:e4:99:ec:a0:05:44:7b:15:0a:d8:e5:
3e:5f:cf:2a:91:8f:a6:a1:50:8e:d1:45:d2:97:c6:
de:17:a5:ff:66:03:1e:82:90:12:1f:74:28:03:44:
ea:97:c3:bb:18:66:e0:16:34:d2:cb:ac:02:a4:f5:
2c:7c:a2:d0:2b:06:32:7a:f2:11:9b:cb:58:eb:57:
9e:c0:2f:40:76:ab:26:32:b2:5f:ba:d8:70:d8:83:
d4:fe:cc:92:e9:e5:1a:1a:26:0d:ef:e4:9f:0f:cf:
51:35:7d:b8:ab:40:fc:4b:31:1c:f3:3b:d8:c7:57:
8c:14:aa:f0:f7:31:75:b9:e6:34:50:4e:c7:d6:0d:
31:cd:8b:4f:b8:9c:f9:2e:8f:91:64:99:31:fc:5d:
96:59:83:6c:e7:84:62:48:36:46:97:4a:98:eb:e9:
90:a2:06:02:6e:2b:98:43:49:1b:f3:85:17:c8:a7:
64:24:d3:d7:bb:79:db:87:cc:6e:97:63:a3:38:f5:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:31:29:3D:6A:9A:BB:7C:0F:70:87:FB:0A:D3:D5:6D:55:9E:59:64
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3b:57:fa:bd:09:be:dc:12:3d:e8:a1:72:ab:e2:5e:39:52:
3e:5a:6f:f5:35:a5:0b:a0:7c:3d:5e:f4:65:9f:8b:6d:c1:fe:
7f:7e:0a:7e:97:be:7a:6a:44:fa:df:d1:7c:13:72:03:d0:a5:
9f:11:ec:9c:3f:9b:16:3a:ef:42:fc:87:32:a4:97:48:41:e2:
15:bc:2c:19:2b:2e:00:44:52:ee:cd:e1:1a:3a:e1:bf:68:9d:
d4:50:38:1f:9a:1d:27:90:31:62:17:8a:c3:c2:5c:38:8a:40:
37:2d:97:7e:e4:16:55:a9:e7:34:61:17:6e:69:75:d4:14:d8:
00:f5:00:a2:8e:ae:bb:c9:ef:6d:ef:d4:f5:bc:82:aa:a8:1a:
03:12:6f:91:6e:a7:f6:66:d8:07:54:4c:d5:88:b6:20:de:a2:
cc:93:b3:56:20:1c:07:68:fa:f0:8d:34:ac:a8:39:fa:bc:32:
6b:bb:55:50:e7:01:31:02:dc:c2:9b:dd:0a:51:77:60:29:c0:
29:7c:7b:4c:ff:84:e7:4e:a6:50:bc:ff:75:c1:e7:04:01:db:
89:98:e4:c4:6f:63:10:bf:d6:df:94:61:0a:f4:43:c8:04:60:
9a:b5:51:b6:a4:27:e3:12:18:18:b1:99:f9:ea:b5:91:4b:c1:
c5:56:75:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvBYHdYyhYt6AIFWh9YmdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2EzMTNjZTM0NGQ3YTFmZGU2NWJjNGE0MzIxOWEwYjM3
NjEyMGMwHhcNMjUwODIzMDcwMjEwWhcNMjUwODI0MDcwMjEwWjAzMTEwLwYDVQQD
EyhiYzMxMjkzZDZhOWFiYjdjMGY3MDg3ZmIwYWQzZDU2ZDU1OWU1OTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiotY4w6pbl1tYKy/kmLMkmZ3yaeO
RO30t+VPkBogs4oA4NPokZZ+nuD3Mr0a7HM/ZNF99fnGhXLTQFnTYtaX5JnsoAVE
exUK2OU+X88qkY+moVCO0UXSl8beF6X/ZgMegpASH3QoA0Tql8O7GGbgFjTSy6wC
pPUsfKLQKwYyevIRm8tY61eewC9AdqsmMrJfuthw2IPU/syS6eUaGiYN7+SfD89R
NX24q0D8SzEc8zvYx1eMFKrw9zF1ueY0UE7H1g0xzYtPuJz5Lo+RZJkx/F2WWYNs
54RiSDZGl0qY6+mQogYCbiuYQ0kb84UXyKdkJNPXu3nbh8xul2OjOPUWUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwxKT1qmrt8D3CH+wrT1W1VnllkMB8GA1UdIwQY
MBaAFJnKMTzjRNeh/eZbxKQyGaCzdhIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMt
ZTg2MDQ0Mzk0MDdmLzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMtZTg2MDQ0Mzk0MDdm
LzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVztX+r0J
vtwSPeihcqviXjlSPlpv9TWlC6B8PV70ZZ+LbcH+f34Kfpe+empE+t/RfBNyA9Cl
nxHsnD+bFjrvQvyHMqSXSEHiFbwsGSsuAERS7s3hGjrhv2id1FA4H5odJ5AxYheK
w8JcOIpANy2XfuQWVannNGEXbml11BTYAPUAoo6uu8nvbe/U9byCqqgaAxJvkW6n
9mbYB1RM1Yi2IN6izJOzViAcB2j68I00rKg5+rwya7tVUOcBMQLcwpvdClF3YCnA
KXx7TP+E506mULz/dcHnBAHbiZjkxG9jEL/W35RhCvRDyARgmrVRtqQn4xIYGLGZ
+eq1kUvBxVZ12g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:27 2025 by rpki-client