Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: 22D+5PfdfRjYZ/8hguHBfFzp2G6jGryc1pNNhbbs3Rc=
Subject key identifier: 6B:53:7B:6B:7D:E5:93:FE:18:AD:7E:1F:2C:53:BF:15:35:49:E7:CE
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 0199FFC7554CCB243BDB5BF5974BB98D248B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 1204
Signing time: Mon 20 Oct 2025 04:01:17 +0000
Manifest this update: Mon 20 Oct 2025 04:01:17 +0000
Manifest next update: Tue 21 Oct 2025 04:01:17 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: qqddgndfSneeDuYbANbKiBEnxTHy5M2N5eASjmrJtgc=)
2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:55:4c:cb:24:3b:db:5b:f5:97:4b:b9:8d:24:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Oct 20 04:01:17 2025 GMT
Not After : Oct 21 04:01:17 2025 GMT
Subject: CN=6b537b6b7de593fe18ad7e1f2c53bf153549e7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:d4:77:62:ea:a0:f8:3f:b5:b3:f7:dd:1e:
ea:49:33:91:17:ed:d1:c0:af:fe:ce:8f:bd:8d:17:
5a:52:52:14:1b:9a:74:e9:17:68:b8:39:6b:26:f2:
26:73:21:26:d3:30:a1:45:42:5a:66:d0:c6:22:fe:
3c:a3:25:9d:58:a9:e0:85:69:93:12:17:63:83:8c:
41:b1:fe:6e:80:a5:36:d9:ab:6c:38:eb:23:14:0a:
17:13:39:67:f7:71:ec:52:8f:ef:b4:04:8c:bd:45:
61:0c:d1:da:78:0d:be:6b:dc:cd:00:4c:c3:52:03:
b6:ec:e0:5f:2a:b9:4e:d5:14:3c:eb:21:1d:7c:3a:
0e:6c:6e:b5:eb:b9:9b:57:ce:3c:30:04:d0:68:21:
83:42:0f:3d:b9:01:a3:7b:a7:84:a5:0d:bf:03:66:
63:30:8d:2c:96:11:55:dd:f3:a1:4f:c6:31:3d:38:
2a:8c:10:03:11:3b:30:31:8f:9f:80:8f:ee:3b:26:
be:bd:49:f5:00:38:ea:71:b9:eb:12:a2:7d:22:00:
33:56:d0:08:75:11:f4:da:91:1e:c8:90:88:e9:90:
32:17:bc:bb:90:e6:3a:57:bc:71:1b:70:2d:5f:b3:
16:46:f7:6f:0f:ea:b2:f8:3c:c7:e9:e2:ef:24:cb:
7b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:53:7B:6B:7D:E5:93:FE:18:AD:7E:1F:2C:53:BF:15:35:49:E7:CE
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:85:66:78:10:50:92:c2:93:0d:63:3a:4a:d1:f1:c1:c7:91:
64:3b:e1:fc:7a:62:05:b2:db:f0:e6:ff:e8:f5:b4:01:85:e0:
5c:26:17:f4:ac:7f:da:ff:24:92:14:d6:f6:36:f8:4d:67:94:
03:b3:29:d9:8a:81:ff:c1:95:2b:9e:c7:5c:0d:8a:0c:23:5e:
07:dd:15:96:a3:21:3b:34:b7:de:8f:94:27:41:59:d5:0e:c4:
77:c5:7e:3d:6b:5d:f4:e9:33:50:01:aa:c5:01:50:9f:a1:b8:
af:12:cd:c6:b6:07:f3:0a:88:c0:05:03:51:83:d7:d1:fb:87:
a1:42:51:d4:2f:4f:d3:4f:43:09:66:4f:63:52:50:44:d4:b4:
f5:80:42:ef:6b:df:e4:d8:83:7d:de:94:ff:75:1f:0e:a0:63:
0b:2a:c9:7c:5b:5a:ad:c3:df:bd:e7:91:1d:08:a8:a4:68:50:
27:d0:cf:55:e6:9d:c9:84:17:95:fd:26:da:09:6e:0d:10:32:
1a:f4:45:01:e4:58:d1:43:5b:53:23:07:40:6b:e3:ef:a7:7b:
72:4c:27:ee:f4:3e:fb:af:9a:3d:72:74:62:61:45:ea:19:bb:
b6:62:e2:c5:e9:51:a4:2b:35:17:3d:2f:1e:94:1e:8b:d4:d5:
46:fe:fd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:38:31 2025 by rpki-client