Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: C6ZaGH/XAe+YoCpfgADizWoF+M3Qg03jGiTZZ3VfUi4=
Subject key identifier: 0C:AE:14:18:C3:AA:44:86:FA:FE:A5:8F:F7:D0:16:E5:F3:E0:91:8E
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 01987CE53B7B5EDDBDC322D7B462B1F4FAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 0DC2
Signing time: Wed 06 Aug 2025 01:00:54 +0000
Manifest this update: Wed 06 Aug 2025 01:00:54 +0000
Manifest next update: Thu 07 Aug 2025 01:00:54 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: UouJlhUObvHzpX7tAweQM6bN+KOwFiJR2nuPDw6frVs=)
2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:3b:7b:5e:dd:bd:c3:22:d7:b4:62:b1:f4:fa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Aug 6 01:00:54 2025 GMT
Not After : Aug 7 01:00:54 2025 GMT
Subject: CN=0cae1418c3aa4486fafea58ff7d016e5f3e0918e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:6b:af:45:6f:83:0d:ee:d0:28:a0:c6:51:
6a:86:62:2c:7d:b6:73:2c:b1:1b:de:10:63:0c:37:
ae:72:d4:ba:37:81:6e:06:32:c8:29:69:4c:82:b6:
30:22:51:fc:14:71:05:2b:eb:00:7d:1c:f8:11:7d:
a2:08:7d:ef:1d:9e:03:d8:6e:52:cf:50:cd:02:14:
ee:cf:ec:41:2c:8a:d6:8d:ea:7a:22:5a:4f:8d:00:
18:9d:85:69:9b:77:3b:38:21:cf:04:46:6c:9f:57:
f4:c5:78:b6:8e:02:ce:24:fa:f1:4b:a7:ff:a3:2d:
48:98:b2:f0:3c:51:2a:a0:b2:53:ff:8b:88:94:1f:
fa:e8:cc:d5:a6:f6:48:31:c0:58:80:11:a5:ea:c9:
81:a0:07:b8:e5:c7:b4:f3:40:63:ca:bb:2f:c6:19:
9a:c0:79:84:d3:bc:e2:62:5d:11:68:30:9c:27:5b:
64:e4:50:fd:28:ee:46:22:8c:ce:8a:ec:5a:f5:d0:
b9:da:50:09:8d:57:f0:14:5b:c8:21:74:b2:4f:0e:
59:42:fa:df:14:dc:d8:a1:c0:a8:28:f0:cb:b4:f4:
cd:09:48:ee:6a:21:c7:d1:eb:2c:84:75:e2:d1:42:
66:4e:23:ee:7c:b4:d8:f1:4e:70:8c:57:e4:c3:3b:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AE:14:18:C3:AA:44:86:FA:FE:A5:8F:F7:D0:16:E5:F3:E0:91:8E
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d1:c7:f1:e3:04:7b:b5:d9:ba:ba:05:9c:b9:af:60:ca:b0:
c7:fa:cf:ea:04:90:a1:66:57:18:de:b3:46:e8:3c:55:8a:3a:
3c:4d:1a:71:4b:f8:e7:6a:1b:da:c1:96:f6:79:6c:a4:78:26:
eb:33:f9:e2:25:28:d0:16:76:f4:d1:e3:70:8d:7a:fe:76:34:
33:45:08:8b:32:a0:3e:b7:5b:b7:ad:8a:aa:c0:5a:59:a5:05:
ac:e3:ca:2b:2b:70:af:bd:33:23:de:24:14:a2:c8:f4:3f:53:
9e:b4:a9:d8:1c:ab:04:96:1d:da:2a:d1:1f:0a:b7:77:a0:b7:
03:e5:7c:04:97:ca:e4:45:d5:ca:d2:7b:b0:28:fb:96:62:a8:
bc:4c:0a:1c:7b:c7:c3:e4:e7:ac:ef:e0:b7:c7:95:fc:38:3e:
0d:9e:b4:c6:80:a1:5c:a6:bf:8f:c2:4c:5d:e3:2a:2f:26:bf:
d4:52:9c:9b:3c:7e:7c:ef:3f:00:2c:20:89:ce:a3:54:74:cf:
4a:50:08:ae:e3:30:a1:ff:11:95:fc:5f:ff:bd:88:cb:f7:71:
c9:77:c9:e6:1d:2e:a7:58:67:81:a2:5c:d7:16:f3:ab:92:c4:
04:c3:e9:8f:ca:cb:7b:63:b5:59:77:f1:92:d3:e9:0b:5c:c3:
46:a9:1c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:28 2025 by rpki-client