Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
File: Co59_NIAyF6zysZvhZtxEKuZsQo.mft (raw, json)
Hash identifier: B93jf05Df94Ew9VIjFxYl4wXiJIFW4iUIP49ttc+GKo=
Subject key identifier: 0E:28:E3:4F:7E:3F:52:7A:31:8B:A9:B9:00:CC:84:57:A2:52:80:B0
Authority key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
Certificate issuer: /CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Certificate serial: 019A5074BD96027AAE51CB62B1F3E09DC70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
Manifest number: 03F1
Signing time: Tue 04 Nov 2025 20:00:19 +0000
Manifest this update: Tue 04 Nov 2025 20:00:19 +0000
Manifest next update: Wed 05 Nov 2025 20:00:19 +0000
Files and hashes: 1: Co59_NIAyF6zysZvhZtxEKuZsQo.crl (hash: BTXDAlVPfODbG+juZAQ9CilPdWeDIem+J+OZ7xPjwkc=)
2: ZnFCz6rKLcZRx4oWRqGX1WP5row.roa (hash: Fg68tw9/QoQIkz8jU0UgngyMGnhnkYCZ0zRagw9xxDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:bd:96:02:7a:ae:51:cb:62:b1:f3:e0:9d:c7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Validity
Not Before: Nov 4 20:00:19 2025 GMT
Not After : Nov 5 20:00:19 2025 GMT
Subject: CN=0e28e34f7e3f527a318ba9b900cc8457a25280b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:98:14:82:80:fe:68:b4:e9:dd:40:b0:88:
66:3b:16:5f:e7:b1:39:b5:74:5e:07:2c:91:6d:4b:
c8:46:e0:17:d3:02:8f:0b:ca:08:84:c2:48:18:26:
55:b0:4b:e9:33:63:52:19:cd:5e:82:63:dd:bb:00:
69:bc:9d:bf:47:9e:16:d2:ca:ba:1a:73:d1:22:f9:
8f:59:84:91:00:86:43:8a:7c:6d:14:ef:48:dc:4c:
e4:0f:b8:23:c5:66:d1:53:39:33:89:d6:d5:b0:0f:
1f:ea:73:56:32:0a:ec:c3:06:02:8b:90:70:96:54:
03:b2:46:bb:b4:c0:5c:b8:39:03:fa:0e:7b:15:5c:
d0:c4:03:b9:b8:41:11:cb:b6:85:8c:4e:77:3b:9f:
ee:78:4f:31:75:e6:18:f2:9c:67:00:e9:e6:13:ea:
c0:b5:02:ac:33:a3:d7:6a:d4:90:91:8c:d3:04:f5:
d7:77:03:b9:0a:0f:19:dd:a7:0a:b0:ee:eb:4a:f3:
72:f0:c6:c3:20:3c:bb:ae:72:e2:f4:99:54:8c:d6:
cd:41:28:4e:67:99:f4:99:28:d7:4b:25:f3:8d:93:
f2:ce:78:5e:a7:f0:ca:7f:65:80:ed:85:59:f9:3f:
26:a9:0f:f0:7c:f8:ea:e5:be:45:f8:79:0c:1e:32:
f6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:28:E3:4F:7E:3F:52:7A:31:8B:A9:B9:00:CC:84:57:A2:52:80:B0
X509v3 Authority Key Identifier:
keyid:0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:7a:6c:76:e2:4b:af:c1:a0:01:d8:6d:4a:15:52:d6:c9:ec:
a5:58:56:70:40:51:1f:51:7c:ee:7b:20:a6:41:e9:3b:d1:6d:
3b:0c:a0:59:e3:22:c4:16:1d:f0:86:0b:1f:bc:de:42:74:24:
a8:1a:3d:d9:80:31:00:a8:ca:8a:8e:b0:30:2d:bd:6d:af:f2:
5a:50:c7:48:ae:3c:9a:73:94:b8:3b:44:fe:8d:86:9e:0c:39:
6a:1a:f7:30:ab:89:fc:99:c2:20:87:d3:a1:4e:4c:20:20:78:
61:fa:51:87:6a:cd:d6:0f:c5:a5:fe:cc:a5:5b:41:35:8f:02:
01:9b:dc:c3:c6:b6:91:28:e9:bc:02:79:61:d0:79:96:8c:d7:
25:ac:d2:6f:3e:c6:6e:74:43:05:04:13:c3:ae:e5:16:2d:fb:
c5:40:e4:fb:74:59:b5:e8:14:10:2d:d2:bf:0e:04:48:36:2d:
45:38:53:ea:55:ef:f5:37:d7:73:97:c8:b0:13:06:37:8f:d4:
65:7a:cb:e7:16:c5:8f:be:f8:7a:1c:3c:7b:d2:be:d9:00:8f:
a0:be:29:0a:3e:7b:87:6c:31:cb:09:99:cb:87:f8:25:01:bc:
82:65:e5:fd:44:07:ac:a6:f6:fc:75:08:fb:a9:2f:3d:76:78:
a4:4d:49:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:09 2025 by rpki-client