Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: LUuvvqz8MWVwF169kojKFL/mGoYFykF6ZaHnNeb32OM=
Subject key identifier: B5:BD:4F:82:95:81:DC:34:5F:51:90:7C:7E:05:35:A0:1E:6E:DC:1F
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 019A006C5D8A7B488380047A4E30475ED0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0C64
Signing time: Mon 20 Oct 2025 07:01:33 +0000
Manifest this update: Mon 20 Oct 2025 07:01:33 +0000
Manifest next update: Tue 21 Oct 2025 07:01:33 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: D0tufBg4gEiyvtFNGqKDZcXC9C1RNZI3W9ZYymF6210=)
2: Uj6BezAzB94GByjzrVUNlk0ht78.roa (hash: dN/7lNPFzPzip+lXMHPQrtHop8fW612WIaM/9STYSBo=)
3: i6d_wSF6B7XpMiMocY9g5Bflzus.roa (hash: Ie39FF54w1T4xPfnonYM6fmqfVN96lUmKfBb590VzVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:5d:8a:7b:48:83:80:04:7a:4e:30:47:5e:d0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Oct 20 07:01:33 2025 GMT
Not After : Oct 21 07:01:33 2025 GMT
Subject: CN=b5bd4f829581dc345f51907c7e0535a01e6edc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:81:f0:9f:3d:9c:89:30:7f:c2:70:1e:fb:32:
0c:e0:11:a6:11:d5:2b:08:a8:08:70:ef:3b:ce:e8:
93:e3:a0:d0:41:7d:6c:9c:69:e7:de:f0:3b:dd:9b:
2f:29:fa:ae:d3:7f:ed:3e:22:50:9c:7d:0b:5b:38:
f9:b9:55:f9:78:73:d7:ef:28:0c:6d:f6:1a:29:f4:
1c:7d:be:eb:4d:1e:05:73:2b:af:9e:c7:9e:1a:2e:
3f:95:e8:c6:e2:54:c1:78:a9:46:3b:51:5a:3b:95:
bb:bb:4e:a5:89:83:3c:65:85:b8:34:3a:c8:a0:28:
a9:83:1e:07:4d:c1:2c:cc:5d:19:0b:8b:bc:bc:eb:
7e:68:e9:5d:17:d9:4f:6a:48:be:bc:d3:b0:a2:65:
b5:72:ee:fa:cd:e7:2a:56:14:90:4a:83:7b:0b:19:
b8:7e:70:d3:31:53:ff:8a:1b:94:4d:a1:89:9c:8c:
fc:45:d2:fa:f8:a9:34:d4:5c:b2:90:b5:5a:18:2d:
9a:22:60:98:f3:f1:c0:a1:7d:41:e0:90:fe:d1:30:
b9:f9:d6:52:38:a7:44:45:58:1e:aa:99:3c:76:5e:
23:40:ad:8e:5d:d0:78:bd:69:5f:42:3d:96:94:37:
0f:04:a0:51:15:c0:f9:20:a1:be:7f:fc:b8:5f:ee:
39:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BD:4F:82:95:81:DC:34:5F:51:90:7C:7E:05:35:A0:1E:6E:DC:1F
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e1:b6:14:c8:21:22:67:22:48:34:cf:34:67:72:26:4d:90:
a9:56:08:28:00:33:ee:69:c9:2c:3a:89:9f:21:2d:ce:9b:37:
86:d0:52:b0:82:aa:cb:6a:f7:4b:0d:1e:0f:8d:76:64:60:40:
5c:21:58:6b:4b:d6:14:20:1f:a7:13:dd:64:14:b7:e2:d3:56:
fd:82:d4:89:6f:82:a0:1b:b8:89:a3:3d:75:19:7f:f8:81:a9:
8f:d6:70:d0:7d:8a:93:8a:41:67:9d:96:f6:b5:f8:cc:50:a8:
dd:68:32:58:e3:8a:e6:9f:8b:90:30:fc:d1:b4:53:b0:b1:47:
eb:9e:f6:21:3e:5b:14:92:07:1d:21:ea:7e:9d:53:19:73:e4:
54:31:f5:80:5a:8c:fa:18:3e:b7:92:22:44:5f:82:b0:bf:1f:
a2:fc:88:7a:14:92:7e:f3:91:41:96:ad:e5:fb:81:5f:8e:83:
58:76:66:51:d2:db:96:9b:1a:13:67:32:2c:c7:9f:79:ed:78:
1c:e7:d2:88:73:a4:8d:52:ca:dc:35:bc:38:bd:3a:63:56:d6:
ad:47:68:d9:17:fe:2e:1e:34:8d:3e:a7:1f:44:77:6d:08:f4:
f3:b2:32:47:a8:9d:8d:e4:8f:55:33:ac:f3:5d:1f:ca:fe:6f:
08:3b:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:18:39 2025 by rpki-client