Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier: ZdCQxo/KwVT/ybcolUcgLGiMwqfXdL4LpmSI8jB9EU8=
Subject key identifier: 69:32:83:88:63:29:BF:08:8A:14:93:53:73:59:14:79:FF:FD:55:CC
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial: 019A4D3CEBF0BEBDE706A2593ADAF396F726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number: 0508
Signing time: Tue 04 Nov 2025 05:00:29 +0000
Manifest this update: Tue 04 Nov 2025 05:00:29 +0000
Manifest next update: Wed 05 Nov 2025 05:00:29 +0000
Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: DLwBqrYyL08Tf48eZ0YKIgccu2u76bIwRAy42qNcwSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:eb:f0:be:bd:e7:06:a2:59:3a:da:f3:96:f7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Validity
Not Before: Nov 4 05:00:29 2025 GMT
Not After : Nov 5 05:00:29 2025 GMT
Subject: CN=693283886329bf088a14935373591479fffd55cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:5a:f6:7f:2a:db:f3:1b:d5:0f:b1:8b:81:
fc:6b:af:09:20:38:05:6b:d6:80:69:34:d1:6b:94:
57:e2:5a:05:d3:90:9f:6a:2a:94:a6:0b:cf:d3:14:
b4:a7:de:25:00:54:98:fe:9e:70:5b:a6:6c:48:08:
f5:a7:4c:99:ca:72:02:cf:02:68:49:87:c1:f5:3e:
31:1b:1d:1b:b2:7d:04:e8:67:73:d1:4b:0f:13:62:
b6:2c:e3:e6:e0:72:cf:e3:5a:80:a0:42:4d:82:c7:
fb:ff:c8:bc:26:cd:75:07:9e:97:c7:c4:09:d0:b1:
78:08:b2:c8:44:d0:21:63:d1:9c:42:6f:b9:9f:0f:
7b:3f:d3:38:06:77:1a:fd:a8:c1:ab:73:ec:01:97:
24:b8:23:bc:e8:2f:44:2a:bc:20:36:be:4d:f1:2c:
75:6b:76:c2:04:91:ac:89:60:4c:28:a0:51:8c:1d:
3a:25:21:37:f4:2d:8a:47:73:94:30:3d:37:83:90:
6f:0f:3c:e7:e4:c1:10:79:16:a3:dd:c1:dc:3c:47:
75:e2:6a:cc:f7:be:37:40:c0:3e:3a:c6:b1:32:88:
2e:fb:ea:53:72:9c:2b:08:59:dc:f3:16:0b:02:3d:
fe:31:39:05:7f:d4:b6:c4:67:7a:7d:eb:44:45:6f:
5a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:32:83:88:63:29:BF:08:8A:14:93:53:73:59:14:79:FF:FD:55:CC
X509v3 Authority Key Identifier:
keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:3f:1e:5a:7f:74:75:81:52:08:8a:cd:96:0b:29:88:d5:d4:
df:43:fc:02:c6:10:38:4a:b9:73:1d:6e:26:f4:1e:a5:b3:64:
17:bf:ea:67:61:35:c4:70:84:74:6c:50:7a:af:12:58:75:e8:
86:b9:2a:f3:a1:f9:3f:e1:47:79:07:85:7e:36:76:3a:37:a5:
d7:01:0e:d7:80:a4:8b:2e:e7:50:21:b3:86:45:c0:7e:ad:9e:
19:57:0e:96:fc:4f:d4:64:6c:ff:f1:0b:be:00:c8:55:72:31:
a1:4b:c7:fc:21:f3:1d:7c:2d:b5:31:1c:f6:db:6d:bb:da:6a:
d6:48:75:39:3d:dd:e2:c5:60:a1:34:e5:31:67:a1:4b:8d:55:
ad:8d:34:3f:6b:2d:aa:70:90:d7:0b:46:52:24:b3:7b:4f:02:
a6:11:77:65:8f:d4:3f:7d:1b:f9:08:42:e9:e2:03:f1:71:93:
2e:9c:1d:dd:64:9a:3e:66:c4:ce:05:a9:a0:cf:8c:0b:aa:73:
3d:3a:f6:0f:ad:b6:9f:1a:19:bd:f5:b2:ca:79:2f:f0:3b:cb:
90:13:c6:e5:42:e9:89:37:c9:cb:61:5c:e2:3a:c4:a7:76:18:
6d:08:97:24:c1:61:72:fe:cc:b3:16:7b:0f:a5:3c:bd:3c:f8:
5e:b4:aa:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPOvwvr3nBqJZOtrzlvcmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhODVkMzc5NzI2YzhmYzA5NmQyN2U4OGZkYTExN2IzYjI2
NTRlNTkwHhcNMjUxMTA0MDUwMDI5WhcNMjUxMTA1MDUwMDI5WjAzMTEwLwYDVQQD
Eyg2OTMyODM4ODYzMjliZjA4OGExNDkzNTM3MzU5MTQ3OWZmZmQ1NWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK1a9n8q2/Mb1Q+xi4H8a68JIDgF
a9aAaTTRa5RX4loF05CfaiqUpgvP0xS0p94lAFSY/p5wW6ZsSAj1p0yZynICzwJo
SYfB9T4xGx0bsn0E6Gdz0UsPE2K2LOPm4HLP41qAoEJNgsf7/8i8Js11B56Xx8QJ
0LF4CLLIRNAhY9GcQm+5nw97P9M4Bnca/ajBq3PsAZckuCO86C9EKrwgNr5N8Sx1
a3bCBJGsiWBMKKBRjB06JSE39C2KR3OUMD03g5BvDzzn5MEQeRaj3cHcPEd14mrM
9743QMA+OsaxMogu++pTcpwrCFnc8xYLAj3+MTkFf9S2xGd6fetERW9avwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkyg4hjKb8IihSTU3NZFHn//VXMMB8GA1UdIwQY
MBaAFAqF03lybI/AltJ+iP2hF7OyZU5ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yM2Q1NjAtMjUzYi00ZmUxLTljOWQt
NWU5MmY0NzU1OTA0LzEvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yM2Q1NjAtMjUzYi00ZmUxLTljOWQtNWU5MmY0NzU1OTA0
LzEvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6D8eWn90
dYFSCIrNlgspiNXU30P8AsYQOEq5cx1uJvQepbNkF7/qZ2E1xHCEdGxQeq8SWHXo
hrkq86H5P+FHeQeFfjZ2Ojel1wEO14Ckiy7nUCGzhkXAfq2eGVcOlvxP1GRs//EL
vgDIVXIxoUvH/CHzHXwttTEc9tttu9pq1kh1OT3d4sVgoTTlMWehS41VrY00P2st
qnCQ1wtGUiSze08CphF3ZY/UP30b+QhC6eID8XGTLpwd3WSaPmbEzgWpoM+MC6pz
PTr2D622nxoZvfWyynkv8DvLkBPG5ULpiTfJy2Fc4jrEp3YYbQiXJMFhcv7MsxZ7
D6U8vTz4XrSqaA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:10 2025 by rpki-client