Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: JzfMuXlNMY6TsRrknm4pUN3HyPKVpjZqoA9Y6NxPXgA=
Subject key identifier: 78:9B:2C:E1:57:C9:B1:D0:3C:BF:5C:4E:22:9D:6F:3C:B4:74:04:25
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 019887D6DB332A3EDFCDA3EFC0C61BD91A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 134C
Signing time: Fri 08 Aug 2025 04:01:01 +0000
Manifest this update: Fri 08 Aug 2025 04:01:01 +0000
Manifest next update: Sat 09 Aug 2025 04:01:01 +0000
Files and hashes: 1: BepPUqJmcox6vrPVeFLnic_YFR0.roa (hash: C5IbNUmrfVvGpmpP7H7NCibsdAPbj5KKxAELI101al0=)
2: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: vnxPbEVfuoSAIAtXUOHMqIJIpRC+OIIHzT11HF3JjIc=)
3: yKqwm37t4yVmxr4NwzTqfwD-IDY.roa (hash: MxaSTIqKL5tTZsGpRXKzjl3dEdK1M2+iZYuBArbrbWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:db:33:2a:3e:df:cd:a3:ef:c0:c6:1b:d9:1a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Aug 8 04:01:01 2025 GMT
Not After : Aug 9 04:01:01 2025 GMT
Subject: CN=789b2ce157c9b1d03cbf5c4e229d6f3cb4740425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:70:22:87:16:c6:59:57:25:1b:ce:d3:ce:
04:c2:da:4a:69:5e:ba:8d:7c:6e:9a:4e:85:10:b9:
6d:b8:3b:d0:7a:6c:3c:a7:b2:7a:f6:dd:10:25:fd:
c5:de:1c:00:45:00:ed:7c:5b:1d:a1:b4:af:3e:b1:
3c:51:b5:dc:3b:24:8a:e1:4a:3a:ad:78:c4:15:e2:
ce:c2:b9:95:0e:4a:53:bf:74:15:81:b1:44:28:40:
e2:5b:1d:00:63:fc:48:e2:71:6d:4b:ba:8e:53:be:
e4:54:14:dd:1b:df:c8:9d:19:5e:ec:6b:e3:30:96:
67:b5:44:f8:fd:d6:2d:49:4d:9f:37:67:9f:80:7c:
b5:1d:50:71:7f:90:cb:a1:84:77:d2:f8:ad:f5:44:
ec:c5:e7:e7:ad:93:37:76:53:ec:8d:de:a5:d2:3b:
ff:99:d8:5b:84:3c:92:56:53:17:38:0b:53:79:ad:
9a:be:c1:77:f4:4b:84:7c:61:a1:53:62:af:a7:22:
de:bf:45:44:8e:20:36:b5:51:ce:ca:ff:f0:44:00:
3d:60:b0:68:81:08:09:70:d7:30:a4:24:42:13:e1:
5b:77:8d:4b:30:c3:f0:a9:ee:c9:73:84:ff:d4:bd:
ea:47:9d:8c:8d:d0:5c:cb:8e:9f:ae:a1:91:ef:f0:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9B:2C:E1:57:C9:B1:D0:3C:BF:5C:4E:22:9D:6F:3C:B4:74:04:25
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:18:b8:57:a0:a9:bf:c3:3a:50:0e:ee:06:00:e8:da:da:b6:
a0:90:be:ce:83:ce:a0:56:dc:c6:af:18:a4:e9:39:f6:82:af:
04:5b:d4:26:7e:1c:cf:68:10:db:3f:83:bb:23:da:c9:77:cf:
49:89:76:57:46:06:76:db:da:3a:be:15:f3:de:5b:b4:57:81:
3c:31:69:98:48:99:9c:c6:e8:07:6d:09:ac:f6:87:8b:b6:42:
be:e6:cc:77:45:d4:6a:3b:bd:8a:e3:29:6f:9c:5f:1e:f0:17:
14:4d:22:32:b4:55:22:39:d6:4b:8d:98:bb:6c:e0:87:ea:76:
06:89:57:ad:56:a1:7d:ca:72:1b:6e:a2:02:6b:37:51:93:c7:
e9:f3:4d:50:db:d6:19:18:88:00:d2:74:90:9a:af:36:58:28:
da:6b:a8:48:65:e9:28:e1:12:67:c3:c5:35:01:b4:63:1d:41:
a7:ef:da:86:ad:73:7a:e4:d8:9e:d5:28:31:93:0b:17:25:eb:
21:8a:77:c2:a3:81:b6:9a:5e:ee:96:40:1c:48:0b:32:5b:cf:
03:c3:80:18:ad:68:8c:27:7f:ab:ec:1d:68:6c:72:b0:44:d8:
d5:9d:2e:58:d7:2b:0a:f4:48:08:d4:8e:81:34:81:50:89:7f:
0d:c5:b7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:08:10 2025 by rpki-client