Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: xWDg2xkv1DZFS6Om9LkcsGbmm1yRmZ0hTMdJqPd8Ctc=
Subject key identifier: 79:67:47:0E:81:48:48:4B:56:B5:D7:CA:13:28:BF:EA:64:D6:33:E9
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 019A503E342554F5F7FA469BEA5A0EC72CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 0EB4
Signing time: Tue 04 Nov 2025 19:00:45 +0000
Manifest this update: Tue 04 Nov 2025 19:00:45 +0000
Manifest next update: Wed 05 Nov 2025 19:00:45 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: zYc8UV1GeWRMIIthlUJKQ2c1cdgID4hX4txUXOC80uY=)
2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:34:25:54:f5:f7:fa:46:9b:ea:5a:0e:c7:2c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Nov 4 19:00:45 2025 GMT
Not After : Nov 5 19:00:45 2025 GMT
Subject: CN=7967470e8148484b56b5d7ca1328bfea64d633e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:17:d0:da:ca:6c:ff:86:89:78:07:57:14:
d4:91:57:a0:97:ef:86:fa:b6:50:90:d6:f2:7b:3c:
11:f8:14:8f:65:68:d5:5f:0b:53:74:87:43:51:8a:
97:c2:9a:30:48:60:82:40:40:42:b4:5a:e1:93:68:
0a:df:5a:9c:78:d0:1d:51:8f:ac:45:17:85:e4:0f:
18:f6:1e:5a:39:a8:4a:e3:71:56:65:e8:6a:07:f9:
c2:12:e8:1e:c2:a6:aa:53:6f:ae:a0:e9:62:2a:e0:
b8:57:48:ec:54:c5:08:59:6d:52:1c:86:49:6d:1f:
b1:07:83:e9:d7:e8:58:05:21:8a:8b:f5:2d:59:bb:
13:91:53:2c:33:c7:4e:21:ef:99:34:07:65:da:db:
d8:7c:b3:b5:be:13:b1:d7:00:77:da:06:20:eb:3f:
22:14:a2:63:0f:8f:fe:f2:a1:65:d8:11:8b:d9:65:
8c:2a:29:2f:91:26:f4:cc:f7:81:80:1e:61:1d:1b:
9e:b2:e9:82:37:34:bd:07:13:b3:06:5b:bf:c1:40:
fb:23:19:f9:0e:45:3a:04:f2:6f:34:ae:27:98:d5:
48:4d:b0:f1:50:41:19:34:8d:00:ab:a1:02:13:17:
3f:21:0f:5f:86:b3:65:a8:0c:80:e8:33:ee:99:93:
d4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:67:47:0E:81:48:48:4B:56:B5:D7:CA:13:28:BF:EA:64:D6:33:E9
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:79:f0:08:53:e3:d8:3c:22:0f:01:f1:18:09:eb:f5:0d:05:
40:c4:ac:3a:5a:65:98:5d:87:ea:3a:9a:6d:a4:24:3c:97:d1:
36:74:7d:ae:90:62:69:ed:9b:9f:3d:05:4c:fb:24:a7:e8:f4:
a1:a9:5c:d4:ce:09:a0:39:e5:77:74:64:d9:fa:e3:12:d2:80:
3f:3c:63:51:86:02:f8:d5:c4:f0:35:58:f1:87:1a:a3:22:6b:
80:c2:c5:78:f2:db:fa:67:94:28:8c:14:f1:89:fb:32:61:70:
a4:2b:b7:c7:e5:5a:62:3f:9f:5c:11:35:21:d4:cd:90:17:1f:
5f:bf:78:fe:16:92:8a:7e:57:e8:23:7b:00:fb:ac:f6:f0:42:
ce:30:9e:e6:6f:e5:dc:5d:92:a2:93:60:de:82:66:0a:de:88:
a1:68:0d:46:02:b3:dd:5b:a4:ac:76:13:4d:0d:8c:72:d4:21:
49:23:ea:6d:ff:bd:82:da:68:f8:c1:3b:a2:e1:0a:53:6a:ff:
55:7c:bf:ba:0f:a8:62:6f:c9:d9:3a:db:92:5a:6b:b9:cd:4a:
cb:f0:c8:a2:fc:72:ac:7d:7a:21:14:1e:d9:36:30:78:44:77:
98:0a:b7:ec:10:fd:98:94:be:96:0d:e6:f6:b1:8e:15:25:17:
78:63:d4:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPjQlVPX3+kab6loOxyyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2EzMTNjZTM0NGQ3YTFmZGU2NWJjNGE0MzIxOWEwYjM3
NjEyMGMwHhcNMjUxMTA0MTkwMDQ1WhcNMjUxMTA1MTkwMDQ1WjAzMTEwLwYDVQQD
Eyg3OTY3NDcwZTgxNDg0ODRiNTZiNWQ3Y2ExMzI4YmZlYTY0ZDYzM2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwcX0NrKbP+GiXgHVxTUkVegl++G
+rZQkNbyezwR+BSPZWjVXwtTdIdDUYqXwpowSGCCQEBCtFrhk2gK31qceNAdUY+s
RReF5A8Y9h5aOahK43FWZehqB/nCEugewqaqU2+uoOliKuC4V0jsVMUIWW1SHIZJ
bR+xB4Pp1+hYBSGKi/UtWbsTkVMsM8dOIe+ZNAdl2tvYfLO1vhOx1wB32gYg6z8i
FKJjD4/+8qFl2BGL2WWMKikvkSb0zPeBgB5hHRuesumCNzS9BxOzBlu/wUD7Ixn5
DkU6BPJvNK4nmNVITbDxUEEZNI0Aq6ECExc/IQ9fhrNlqAyA6DPumZPUQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlnRw6BSEhLVrXXyhMov+pk1jPpMB8GA1UdIwQY
MBaAFJnKMTzjRNeh/eZbxKQyGaCzdhIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMt
ZTg2MDQ0Mzk0MDdmLzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMtZTg2MDQ0Mzk0MDdm
LzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3nwCFPj
2DwiDwHxGAnr9Q0FQMSsOlplmF2H6jqabaQkPJfRNnR9rpBiae2bnz0FTPskp+j0
oalc1M4JoDnld3Rk2frjEtKAPzxjUYYC+NXE8DVY8YcaoyJrgMLFePLb+meUKIwU
8Yn7MmFwpCu3x+VaYj+fXBE1IdTNkBcfX794/haSin5X6CN7APus9vBCzjCe5m/l
3F2SopNg3oJmCt6IoWgNRgKz3VukrHYTTQ2MctQhSSPqbf+9gtpo+ME7ouEKU2r/
VXy/ug+oYm/J2Trbklpruc1Ky/DIovxyrH16IRQe2TYweER3mAq37BD9mJS+lg3m
9rGOFSUXeGPUBw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:43:51 2025 by rpki-client