Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
File: _COczybqOCV6B9QJT6bXCyaWn7k.mft (raw, json)
Hash identifier: P7Yc2NS84SqKVHvcVs+RJD3jmMSkPejVV+CmObw9gmE=
Subject key identifier: CC:15:F7:AE:A9:31:C1:9F:10:EB:BE:F5:DB:CC:2B:90:4B:44:FE:7B
Authority key identifier: FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
Certificate issuer: /CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Certificate serial: 0197B77C80AEC04326F0AC7F5620FAAE7831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
Manifest number: 03EE
Signing time: Sat 28 Jun 2025 17:01:19 +0000
Manifest this update: Sat 28 Jun 2025 17:01:19 +0000
Manifest next update: Sun 29 Jun 2025 17:01:19 +0000
Files and hashes: 1: 8b2MYp-hkoi3xWAERwOdBetyEr0.roa (hash: xdjzN/dKBz+p1uPtY9z1q8M+hEUT4eY7/Ecx7N8LfC8=)
2: _COczybqOCV6B9QJT6bXCyaWn7k.crl (hash: Cjsw/VokPGAi62Tkd4GjeKepvPjHCwipno7bAPrQSDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:80:ae:c0:43:26:f0:ac:7f:56:20:fa:ae:78:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Validity
Not Before: Jun 28 17:01:19 2025 GMT
Not After : Jun 29 17:01:19 2025 GMT
Subject: CN=cc15f7aea931c19f10ebbef5dbcc2b904b44fe7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:0c:cc:58:69:86:cb:c6:ec:f2:4e:07:9f:
91:a4:24:52:02:03:d1:21:36:00:5a:d8:37:ed:46:
39:13:8a:c3:da:a1:4f:da:bf:3e:86:ef:04:dd:0e:
cb:54:02:4d:71:a1:61:bc:98:8f:4b:c8:32:a9:57:
7d:f2:3d:cc:cc:df:23:43:66:b8:70:27:07:18:1a:
0c:7a:fd:75:4b:c6:4a:fd:1e:89:9f:b6:90:5a:5f:
90:b2:06:22:c0:43:54:27:07:3c:4b:16:e6:1d:8a:
b9:8c:74:0a:2d:3d:74:8b:1a:51:56:a7:16:ef:dd:
e9:1c:a6:41:61:ad:33:fb:53:f7:80:ef:79:6e:06:
bd:3c:38:52:8c:13:c8:15:ad:6a:85:cd:9d:53:f2:
6d:96:17:24:e9:0b:09:b7:77:fd:eb:20:1c:2d:13:
94:c4:8f:e3:09:ae:fe:68:1f:86:ab:be:08:7d:1f:
b8:dd:8a:f6:9b:d0:cd:67:a7:46:a0:8e:0d:7a:e6:
ab:a2:a1:0e:b7:ca:c7:2d:09:ef:dc:4f:2f:f3:db:
eb:58:3d:22:28:5a:85:c8:c1:cd:55:74:f7:f4:70:
68:52:71:a0:e5:bc:d3:8b:3a:ed:60:6f:28:9f:31:
af:be:7b:37:7c:24:c1:1c:60:ff:1d:6f:f0:c9:2f:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:15:F7:AE:A9:31:C1:9F:10:EB:BE:F5:DB:CC:2B:90:4B:44:FE:7B
X509v3 Authority Key Identifier:
keyid:FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:83:52:88:b1:ca:c7:99:10:6b:2a:f9:b9:d3:20:69:2f:41:
99:86:ef:22:23:79:ea:f1:4a:d2:4e:da:c9:85:61:98:a3:36:
75:b7:5f:10:c1:1e:9b:f0:87:7b:f7:a3:24:10:98:85:4e:6d:
66:c4:c9:2c:97:cb:e9:28:1a:bc:02:36:e6:dd:f3:b6:b0:12:
80:e9:16:5d:5a:f5:53:9d:d3:c2:61:e3:c0:ae:38:71:a8:58:
50:ce:7e:f5:90:83:b9:ae:2f:89:54:e0:1f:1a:6d:d7:3e:f6:
79:41:d0:84:e7:57:70:63:0f:49:b2:82:ed:32:12:55:c5:d7:
d9:cd:81:c4:56:0e:cd:9e:78:66:e2:fe:21:69:7f:6c:11:0a:
4b:19:38:2c:6f:a0:76:4f:2f:81:7a:84:52:aa:6d:c0:c5:84:
ed:2c:69:e6:a8:c1:b1:5e:82:1c:80:ab:de:57:18:f1:ef:4b:
5a:1d:26:51:ec:e9:91:60:a0:24:95:cc:f9:4a:be:14:1a:57:
fc:94:bc:83:ef:8f:89:27:98:2e:a4:12:12:af:b7:88:3b:cd:
1f:e5:54:84:86:57:75:77:76:8e:ee:52:80:68:e8:83:40:69:
49:83:b3:70:60:13:d9:84:7b:6d:49:72:cf:db:f5:15:0a:61:
b5:57:08:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:18 2025 by rpki-client