Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: 05YTGjqKYJXovq9MsRrYspv+KPbj32UydQVWIEe0obc=
Subject key identifier: 1F:1B:2C:4B:60:70:CB:93:60:C3:7C:8D:29:2C:4A:69:DD:2B:46:01
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 0199FD346B0F17FDE9130D540204260C5A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 0E89
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: bpFV6cmcICkvvRhrLLkVPJcpfgQDqc5eeatP7hlE0CM=)
2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6b:0f:17:fd:e9:13:0d:54:02:04:26:0c:5a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=1f1b2c4b6070cb9360c37c8d292c4a69dd2b4601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:c5:da:dc:1d:d9:3a:65:3f:05:a9:dd:e4:
05:c1:4a:45:a3:c0:7e:9d:fb:1c:5c:50:d2:08:55:
65:f8:15:c4:a5:05:35:5b:73:0a:2a:e0:57:83:e1:
49:65:8e:b2:e4:bf:38:c0:73:c3:65:fc:58:c4:37:
5b:85:d8:aa:23:fb:5e:6e:88:3d:2e:9a:13:7f:55:
d7:72:45:f0:90:c9:e9:76:d0:16:56:25:dc:3f:b6:
94:9a:45:a4:0f:3a:49:03:2c:5a:76:a0:ae:0a:c5:
85:b2:7e:7e:82:fe:29:2d:c9:84:76:bc:ca:12:2f:
da:bb:b3:7a:c2:8e:f6:c0:43:1f:60:55:4d:f6:18:
ab:96:0c:41:54:70:2a:64:07:9a:7f:7f:be:5b:f8:
3f:e1:64:d4:7c:6c:9c:76:66:5a:63:c1:9d:00:ab:
4e:7e:c1:08:bd:d2:22:d0:1a:34:c1:ec:7e:22:ba:
f4:78:3c:64:a2:39:ae:8d:61:94:bd:6e:cc:82:d9:
dd:9a:13:a1:73:a9:5e:50:68:57:eb:ae:d7:f5:c0:
72:68:dd:cc:2f:1e:26:cb:3b:f5:ce:a9:98:0e:dc:
5d:f0:85:c2:93:64:6e:3e:4b:04:18:e3:38:dc:91:
cb:85:10:fc:66:18:f8:e3:b5:d1:42:a9:74:6c:73:
ff:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1B:2C:4B:60:70:CB:93:60:C3:7C:8D:29:2C:4A:69:DD:2B:46:01
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6b:2c:f4:92:af:94:3c:d0:e9:d2:77:a7:da:80:7f:82:76:
30:41:3c:3e:d2:74:85:2d:88:47:08:7e:d3:78:9f:35:7d:6d:
e7:30:de:09:21:39:f0:70:37:04:01:3f:27:70:90:48:d2:e9:
e7:38:ae:49:bc:f3:91:46:d2:7c:3a:d4:82:92:61:78:4b:8c:
31:59:cc:0e:9f:4a:b1:f3:23:ff:91:55:e5:d9:1f:39:7c:d7:
05:f6:bf:4d:eb:c9:90:b7:64:ae:f8:83:29:35:46:61:59:ed:
54:90:94:06:59:24:69:e7:f8:95:5d:44:54:ff:60:bf:8f:e1:
30:7e:94:c9:e0:40:23:78:4b:e2:96:63:0d:a7:49:fe:ad:6d:
ae:6e:f3:78:9c:e7:62:75:59:7a:57:7d:d3:8d:3b:e2:e1:f2:
9f:3e:c4:55:b2:65:61:8e:23:5d:36:f4:9c:08:c7:cb:2a:ce:
d4:3e:3a:b3:37:47:a2:a6:65:3b:42:4c:cf:86:c8:02:25:05:
a6:3a:e9:03:a5:bd:51:4e:0b:21:ba:fa:f3:5f:4b:00:d0:94:
93:ac:10:58:e6:dd:9e:4d:37:e9:7d:82:32:42:06:38:01:2a:
1c:70:ad:44:12:68:ed:b5:42:9e:2b:1d:9f:42:1b:91:39:a4:
81:b3:bb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:03 2025 by rpki-client