Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: IJlHhFjXgUPJNlqbuGoY/N09iDSyTJMhaNdR4ZvK4sc=
Subject key identifier: 75:78:7C:B8:4B:8E:9D:73:4B:FB:95:2C:4A:8D:86:A0:70:FA:0B:13
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 019A4DAAA8DBFD76EFF0D40A78D65AE7C498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0C8C
Signing time: Tue 04 Nov 2025 07:00:21 +0000
Manifest this update: Tue 04 Nov 2025 07:00:21 +0000
Manifest next update: Wed 05 Nov 2025 07:00:21 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: RQMC0aPsoU+/Yz1bK1ArJGaByEqwu2vpuyQyRwuq6G0=)
2: Uj6BezAzB94GByjzrVUNlk0ht78.roa (hash: dN/7lNPFzPzip+lXMHPQrtHop8fW612WIaM/9STYSBo=)
3: i6d_wSF6B7XpMiMocY9g5Bflzus.roa (hash: Ie39FF54w1T4xPfnonYM6fmqfVN96lUmKfBb590VzVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:a8:db:fd:76:ef:f0:d4:0a:78:d6:5a:e7:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Nov 4 07:00:21 2025 GMT
Not After : Nov 5 07:00:21 2025 GMT
Subject: CN=75787cb84b8e9d734bfb952c4a8d86a070fa0b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:e4:b0:03:3d:f0:19:aa:2c:36:f0:28:34:
91:d8:74:37:db:99:5c:df:b4:de:df:d6:a8:fe:78:
2f:86:dc:2d:73:5e:7c:f2:b5:16:15:14:8f:0c:df:
7c:2f:b8:79:14:b5:cd:2e:ca:42:34:c6:8e:a9:e3:
7e:46:8f:3e:83:cb:d4:58:e7:dc:a9:46:45:8e:56:
a2:ba:71:c3:6a:a8:92:66:de:5a:ee:bb:ab:7a:a9:
85:84:77:85:cb:1c:8e:04:33:f7:3b:ea:55:af:2d:
d7:e1:fd:5c:b2:58:11:c4:88:6e:09:a6:d4:7d:a7:
bb:73:54:76:f0:13:21:8c:8a:2f:c6:e2:f1:94:fd:
57:b3:13:04:34:fd:1a:da:32:23:60:cd:23:54:f0:
fa:e6:b0:25:9c:d3:e5:ca:b9:e3:af:a0:3c:39:45:
cc:95:22:2e:6d:d6:f8:9c:c0:f9:7b:6d:a7:be:72:
fa:5d:33:8f:16:00:e6:cc:b0:fb:5d:f8:c3:37:81:
cd:d9:fa:5d:ab:dc:6f:7d:b0:36:50:7c:f8:83:e1:
c8:f1:d7:50:6f:c7:14:ce:eb:0a:73:97:00:b8:ed:
5a:83:eb:2e:52:32:83:1b:1e:6f:7d:83:a9:6b:a5:
1e:6b:f6:6b:7c:0e:a9:72:f6:6b:79:77:98:9e:4e:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:78:7C:B8:4B:8E:9D:73:4B:FB:95:2C:4A:8D:86:A0:70:FA:0B:13
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ac:de:f1:7c:b5:d2:61:c4:e3:58:a4:0a:3d:e4:88:9c:8e:
ad:c0:89:99:1b:67:8c:31:bd:1c:f5:13:3b:e6:39:ad:ce:40:
80:d7:ad:9a:29:2f:ad:82:0f:8b:dd:9d:ac:0b:6e:2e:f8:f9:
04:ac:0f:2a:3d:90:0e:0d:51:26:ce:2b:f2:b7:e8:4d:36:0e:
59:81:1e:4b:91:b6:fb:47:1b:83:d2:ab:d1:06:65:fd:12:fe:
64:f9:4d:6a:f3:cb:c3:00:5c:2c:ea:3f:7e:68:98:d1:04:a9:
55:9c:81:80:16:be:fb:e4:da:7b:68:f5:00:48:18:d1:f6:9d:
13:25:30:9a:78:4a:76:a6:1a:da:73:c0:62:7a:56:0e:b4:1a:
68:2d:36:9b:35:7b:b3:35:f8:ca:18:e0:34:49:59:7d:3a:20:
ec:17:68:25:49:49:71:16:a9:99:a1:7e:7f:76:4f:c8:37:9c:
37:e5:ab:f9:cf:6e:48:25:bf:8d:46:b1:fc:50:8e:cc:64:38:
d8:e7:90:02:c0:9a:64:54:e7:a1:c9:44:bf:eb:7f:9b:1e:e5:
4a:79:cf:08:2c:20:ba:88:24:84:19:72:67:c6:d5:21:26:a2:
0f:d7:3d:ec:2a:cd:35:68:55:6f:cb:b4:c9:ed:51:ce:e6:9b:
1d:9b:00:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqqjb/Xbv8NQKeNZa58SYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxY2ExYTcwNmFiY2ZiZTFiODU4NjUyMzhkODQzNWVlMzNl
NzU4MjAwHhcNMjUxMTA0MDcwMDIxWhcNMjUxMTA1MDcwMDIxWjAzMTEwLwYDVQQD
Eyg3NTc4N2NiODRiOGU5ZDczNGJmYjk1MmM0YThkODZhMDcwZmEwYjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkLksAM98BmqLDbwKDSR2HQ325lc
37Te39ao/ngvhtwtc1588rUWFRSPDN98L7h5FLXNLspCNMaOqeN+Ro8+g8vUWOfc
qUZFjlaiunHDaqiSZt5a7rureqmFhHeFyxyOBDP3O+pVry3X4f1cslgRxIhuCabU
fae7c1R28BMhjIovxuLxlP1XsxMENP0a2jIjYM0jVPD65rAlnNPlyrnjr6A8OUXM
lSIubdb4nMD5e22nvnL6XTOPFgDmzLD7XfjDN4HN2fpdq9xvfbA2UHz4g+HI8ddQ
b8cUzusKc5cAuO1ag+suUjKDGx5vfYOpa6Uea/ZrfA6pcvZreXeYnk4VgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHV4fLhLjp1zS/uVLEqNhqBw+gsTMB8GA1UdIwQY
MBaAFNHKGnBqvPvhuFhlI42ENe4z51ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzIt
ZThmN2ZkM2E0MDc4LzEvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzItZThmN2ZkM2E0MDc4
LzEvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqze8Xy1
0mHE41ikCj3kiJyOrcCJmRtnjDG9HPUTO+Y5rc5AgNetmikvrYIPi92drAtuLvj5
BKwPKj2QDg1RJs4r8rfoTTYOWYEeS5G2+0cbg9Kr0QZl/RL+ZPlNavPLwwBcLOo/
fmiY0QSpVZyBgBa+++Tae2j1AEgY0fadEyUwmnhKdqYa2nPAYnpWDrQaaC02mzV7
szX4yhjgNElZfTog7BdoJUlJcRapmaF+f3ZPyDecN+Wr+c9uSCW/jUax/FCOzGQ4
2OeQAsCaZFTnoclEv+t/mx7lSnnPCCwguogkhBlyZ8bVISaiD9c97CrNNWhVb8u0
ye1RzuabHZsAig==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:55 2025 by rpki-client