Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: hT+BWXc4vFbDhgSLfAE5P+up6ugB1Q5XBTDM7AQvCBU=
Subject key identifier: 4F:B8:88:98:79:14:FF:5B:3A:3E:8B:00:67:EB:4C:CB:D4:D3:CC:E8
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 019A4F98EE81C45F8826D698C266417AEF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 1438
Signing time: Tue 04 Nov 2025 16:00:13 +0000
Manifest this update: Tue 04 Nov 2025 16:00:13 +0000
Manifest next update: Wed 05 Nov 2025 16:00:13 +0000
Files and hashes: 1: BepPUqJmcox6vrPVeFLnic_YFR0.roa (hash: C5IbNUmrfVvGpmpP7H7NCibsdAPbj5KKxAELI101al0=)
2: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: WUGI21cLwLEQ8MD+l24MABGbf9HU7CSaNaZ1Si6eIs0=)
3: yKqwm37t4yVmxr4NwzTqfwD-IDY.roa (hash: MxaSTIqKL5tTZsGpRXKzjl3dEdK1M2+iZYuBArbrbWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ee:81:c4:5f:88:26:d6:98:c2:66:41:7a:ef:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Nov 4 16:00:13 2025 GMT
Not After : Nov 5 16:00:13 2025 GMT
Subject: CN=4fb888987914ff5b3a3e8b0067eb4ccbd4d3cce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:1a:17:19:86:8c:4e:94:80:0a:7c:4b:9c:
00:3d:b0:67:5c:a0:fe:39:9b:45:b7:58:e0:fb:30:
d5:3a:4b:8b:ec:39:ae:9b:7b:b4:0c:38:b8:c4:02:
ef:b4:b7:12:62:85:3a:97:85:07:cd:98:16:70:24:
41:0c:c3:b5:53:87:e9:48:07:a5:55:8e:4e:73:de:
a1:e2:a0:ce:01:d4:2e:1e:df:e1:59:ca:25:84:39:
25:0e:9b:f9:95:8e:d0:64:a0:9d:10:bf:22:f2:38:
e7:53:a9:1d:8a:92:15:dd:a3:75:ca:12:2a:a3:55:
e0:28:eb:68:cd:a3:e8:bb:66:d6:87:c6:4a:e6:50:
42:c4:22:e8:61:77:8c:36:56:39:4b:f7:da:15:ff:
16:e5:28:90:eb:7d:9a:ea:41:be:a8:bf:a1:8d:72:
fa:20:e3:18:a3:de:bc:40:77:e7:cd:eb:0f:31:75:
dd:54:e2:75:1f:0c:0f:c8:3f:f5:fb:c2:ec:57:fc:
3f:fa:ba:e8:b6:57:61:62:66:d9:f2:b7:92:c6:6e:
d5:ed:d6:3f:07:52:f0:a7:1f:64:7e:79:6a:ea:d9:
a4:b1:9a:61:2d:ea:dd:14:11:5c:5b:b4:4e:29:0d:
cb:23:ef:0d:ff:df:03:42:9b:64:9a:95:7a:7e:e1:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B8:88:98:79:14:FF:5B:3A:3E:8B:00:67:EB:4C:CB:D4:D3:CC:E8
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:73:db:08:e7:06:bf:5e:3b:16:55:d5:29:4c:fc:4d:a6:c9:
45:f4:f8:1e:0c:d3:39:31:af:c0:9a:ab:06:53:64:2e:c6:90:
32:45:b3:ad:dc:9a:7d:02:3a:af:93:6e:c4:fd:a6:8f:7c:44:
80:1e:83:37:3d:1f:77:43:21:3f:15:11:44:2b:b0:aa:6f:ba:
84:de:98:10:2e:12:dc:9f:ff:cf:f4:79:65:41:e5:74:7d:26:
17:cd:61:54:93:d2:cd:05:fb:14:90:08:58:9e:6e:fb:08:4a:
e6:6e:28:68:75:79:26:c4:fc:a6:49:ce:40:6b:02:af:c8:3a:
c5:42:59:53:87:08:5e:54:ae:dc:e9:16:bc:d1:36:f9:1d:ff:
c9:57:43:07:38:da:1a:9d:ca:f0:93:a5:dc:1d:8e:13:81:5d:
bb:f4:64:90:99:67:aa:ff:fe:14:1d:dd:24:70:f8:b7:53:14:
d4:2d:bb:77:c2:aa:bd:83:ea:f5:e9:03:8c:62:79:ee:73:d3:
3b:70:42:32:eb:1f:e2:2b:a8:3a:05:d0:18:aa:6c:53:2b:68:
ba:68:30:a1:55:f6:b1:bc:a2:33:92:c8:ef:64:5b:78:54:fa:
60:31:70:cf:4a:26:fa:0e:4b:9d:d8:4a:98:bd:7d:7c:50:5e:
25:a2:69:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmO6BxF+IJtaYwmZBeu9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhODRlNDczYWE1NjRlYjUxYTdlN2ViOGIxOGYxNGFjMGNi
YzJjOWMwHhcNMjUxMTA0MTYwMDEzWhcNMjUxMTA1MTYwMDEzWjAzMTEwLwYDVQQD
Eyg0ZmI4ODg5ODc5MTRmZjViM2EzZThiMDA2N2ViNGNjYmQ0ZDNjY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXgaFxmGjE6UgAp8S5wAPbBnXKD+
OZtFt1jg+zDVOkuL7Dmum3u0DDi4xALvtLcSYoU6l4UHzZgWcCRBDMO1U4fpSAel
VY5Oc96h4qDOAdQuHt/hWcolhDklDpv5lY7QZKCdEL8i8jjnU6kdipIV3aN1yhIq
o1XgKOtozaPou2bWh8ZK5lBCxCLoYXeMNlY5S/faFf8W5SiQ632a6kG+qL+hjXL6
IOMYo968QHfnzesPMXXdVOJ1HwwPyD/1+8LsV/w/+rrotldhYmbZ8reSxm7V7dY/
B1Lwpx9kfnlq6tmksZphLerdFBFcW7ROKQ3LI+8N/98DQptkmpV6fuGYYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+4iJh5FP9bOj6LAGfrTMvU08zoMB8GA1UdIwQY
MBaAFAqE5HOqVk61Gn5+uLGPFKwMvCycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgt
NTQ2MjhkZmNiYTRjLzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgtNTQ2MjhkZmNiYTRj
LzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAunPbCOcG
v147FlXVKUz8TabJRfT4HgzTOTGvwJqrBlNkLsaQMkWzrdyafQI6r5NuxP2mj3xE
gB6DNz0fd0MhPxURRCuwqm+6hN6YEC4S3J//z/R5ZUHldH0mF81hVJPSzQX7FJAI
WJ5u+whK5m4oaHV5JsT8pknOQGsCr8g6xUJZU4cIXlSu3OkWvNE2+R3/yVdDBzja
Gp3K8JOl3B2OE4Fdu/RkkJlnqv/+FB3dJHD4t1MU1C27d8KqvYPq9ekDjGJ57nPT
O3BCMusf4iuoOgXQGKpsUytoumgwoVX2sbyiM5LI72RbeFT6YDFwz0om+g5LndhK
mL19fFBeJaJpIA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:26 2025 by rpki-client