Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
File: _COczybqOCV6B9QJT6bXCyaWn7k.mft (raw, json)
Hash identifier: LgIqpIRar8OpMLUwA4wnOSjm9gQhmQfmZfQHITulLf0=
Subject key identifier: EF:13:42:55:F3:2D:DE:01:4A:73:20:8B:68:25:9C:F7:D8:7F:C6:6C
Authority key identifier: FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
Certificate issuer: /CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Certificate serial: 019A4DE206B982C46B9387FDF1E29C30F174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
Manifest number: 0545
Signing time: Tue 04 Nov 2025 08:00:49 +0000
Manifest this update: Tue 04 Nov 2025 08:00:49 +0000
Manifest next update: Wed 05 Nov 2025 08:00:49 +0000
Files and hashes: 1: 8b2MYp-hkoi3xWAERwOdBetyEr0.roa (hash: xdjzN/dKBz+p1uPtY9z1q8M+hEUT4eY7/Ecx7N8LfC8=)
2: _COczybqOCV6B9QJT6bXCyaWn7k.crl (hash: CDTKzRPGIACGaFc1kW/HWyYsqpuLi4z/Izcgd4q0cZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:06:b9:82:c4:6b:93:87:fd:f1:e2:9c:30:f1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Validity
Not Before: Nov 4 08:00:49 2025 GMT
Not After : Nov 5 08:00:49 2025 GMT
Subject: CN=ef134255f32dde014a73208b68259cf7d87fc66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:50:93:a8:2a:63:59:83:58:dc:32:0f:1b:
08:8c:3a:b9:de:0b:68:75:f4:07:54:b9:3f:bf:52:
8d:87:1e:25:cb:9b:6d:72:c9:72:f9:d9:70:d6:46:
fd:94:c9:c6:b0:47:38:40:40:3d:8c:9c:fe:d4:35:
b7:73:a2:09:cc:f9:eb:67:66:76:b5:d1:91:75:a4:
6e:41:5e:53:de:47:55:91:d0:e2:36:ce:e0:b8:76:
ec:74:f3:56:f3:8a:44:40:1b:90:f3:b0:6c:89:5f:
f6:bf:3a:f8:70:ce:35:53:39:a9:6b:38:f4:8a:f9:
6b:8f:dd:83:ef:3a:7f:58:bb:4e:c0:3f:ad:3b:88:
3e:08:c9:54:72:a1:5b:46:03:81:ad:dd:c8:10:23:
db:06:8f:db:1f:4f:2f:fc:15:bc:65:6e:81:e9:41:
fa:fd:9e:56:3b:38:cb:18:e9:29:69:0f:8d:31:ac:
ee:51:f3:72:29:cb:49:b0:a4:2a:c0:f4:84:9d:45:
21:66:5e:45:60:14:12:0d:11:28:ae:82:0f:f1:d5:
48:95:01:87:5f:4c:20:12:db:e6:d2:29:3a:23:8c:
d2:a0:c4:58:b9:5e:33:6d:9f:7c:1c:d1:59:2c:a3:
fd:81:25:31:90:ca:e1:f2:da:a5:9b:9b:b4:f2:42:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:13:42:55:F3:2D:DE:01:4A:73:20:8B:68:25:9C:F7:D8:7F:C6:6C
X509v3 Authority Key Identifier:
keyid:FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:25:d4:aa:f7:07:3f:d2:03:1d:85:c2:83:29:a1:d1:31:71:
b9:c2:c8:c6:fc:56:fa:8e:7d:0d:b3:c4:13:6b:1a:4d:40:2e:
ea:74:0e:57:6c:36:8a:00:cd:7d:bd:df:4a:e3:b3:97:c1:5e:
13:3b:a0:42:ef:9d:c3:65:94:31:7c:66:ba:97:96:a4:88:e4:
29:ea:c9:c5:f9:73:18:50:25:84:51:71:71:60:16:7c:96:5e:
6d:a7:df:34:9f:55:a2:cd:d1:bf:d4:4e:a7:e4:68:e3:c6:44:
e0:09:15:2e:f2:ea:ef:8c:93:70:14:72:3d:26:a9:8f:ff:d3:
1f:45:46:20:d4:68:a7:7b:85:aa:d8:93:9e:83:6e:5b:1f:1c:
c2:41:5f:f9:9f:9b:04:3f:8f:b4:aa:2c:63:00:39:e7:6f:00:
a4:71:05:1b:01:cd:f9:22:dd:30:bb:e6:94:c3:82:5c:87:ed:
f9:21:b4:2f:87:4f:51:ff:8c:8d:2c:1c:76:4f:90:cf:09:d1:
23:18:b9:a1:f7:16:7b:92:cb:9d:31:16:d6:e2:38:db:27:9a:
04:78:be:c3:ff:f9:e8:86:f0:45:19:33:f3:1e:aa:ef:85:4a:
d9:1b:03:c9:fa:1c:b6:ef:24:47:b5:1a:3c:30:f3:02:45:df:
c0:ec:50:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:41 2025 by rpki-client