Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
File: _COczybqOCV6B9QJT6bXCyaWn7k.mft (raw, json)
Hash identifier: svPa5ctmU9TLKqKkuzrFP0EJog+gjXj3VvuX/d9KZRs=
Subject key identifier: FA:1E:A6:FB:A7:25:47:BD:B4:5D:B8:14:9F:3A:A6:7E:65:45:2A:FB
Authority key identifier: FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
Certificate issuer: /CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Certificate serial: 0198959243C082CB1080688B6FD22583A9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
Manifest number: 0461
Signing time: Sun 10 Aug 2025 20:00:47 +0000
Manifest this update: Sun 10 Aug 2025 20:00:47 +0000
Manifest next update: Mon 11 Aug 2025 20:00:47 +0000
Files and hashes: 1: 8b2MYp-hkoi3xWAERwOdBetyEr0.roa (hash: xdjzN/dKBz+p1uPtY9z1q8M+hEUT4eY7/Ecx7N8LfC8=)
2: _COczybqOCV6B9QJT6bXCyaWn7k.crl (hash: 5+1eCxkZbREAMtUyl0pUAJZzJuoiS0edKoL9uMfs6ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:43:c0:82:cb:10:80:68:8b:6f:d2:25:83:a9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Validity
Not Before: Aug 10 20:00:47 2025 GMT
Not After : Aug 11 20:00:47 2025 GMT
Subject: CN=fa1ea6fba72547bdb45db8149f3aa67e65452afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:d7:52:b2:77:96:3c:47:1b:49:8b:b0:60:
2f:e4:29:89:d6:90:d4:de:34:6a:fb:cf:98:9f:3f:
c3:71:5a:37:39:5b:b6:ca:f9:8c:7c:a9:16:2a:5a:
b8:12:8e:61:f0:ad:45:23:d7:d5:97:ff:b7:62:71:
ea:d5:db:8b:12:f1:69:ff:47:d1:85:22:36:d1:e9:
f7:e6:c1:78:79:c5:90:b5:03:01:c4:7c:76:56:56:
2d:fa:29:fb:58:a8:54:99:51:fe:fb:9b:be:14:89:
de:3c:ed:3b:30:1e:38:bf:26:40:97:19:d4:64:c9:
fe:fc:1c:3f:5e:69:36:49:4f:73:75:83:af:9f:46:
9b:ce:0e:62:a3:df:92:84:13:f6:0d:c0:7e:09:67:
05:67:29:b4:f6:fe:8e:37:03:c5:bf:2c:51:59:c6:
a5:05:97:d5:e9:d8:ab:9a:d3:4f:1b:44:40:d6:cf:
88:fa:7d:e4:63:9c:49:50:2c:4a:fc:9f:fe:16:4a:
35:b5:5d:75:47:7a:49:8e:a2:5a:a4:91:b5:db:04:
7b:4f:1e:a1:fe:f9:6a:82:ba:4b:6c:a3:39:17:41:
21:ae:f2:02:55:b9:16:e0:52:b7:e6:c0:fe:ba:f0:
50:f1:58:57:e8:9a:b9:ea:a8:52:5c:d2:dc:56:b3:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1E:A6:FB:A7:25:47:BD:B4:5D:B8:14:9F:3A:A6:7E:65:45:2A:FB
X509v3 Authority Key Identifier:
keyid:FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:60:be:ba:fb:f9:51:eb:01:84:31:7b:57:9a:63:46:06:fb:
d9:97:1a:6c:b7:5e:7b:69:8e:46:91:1c:66:1b:62:ef:24:90:
eb:75:79:32:f3:f7:66:83:ba:0c:b4:8e:f6:3d:d0:a9:f3:60:
b0:fd:e7:49:bb:04:e3:40:0d:20:28:cb:0c:5d:dd:51:ed:3e:
e8:48:4c:24:f1:25:05:29:be:84:55:b5:1b:76:8b:01:4a:1e:
90:c8:ec:03:73:21:5d:c4:1f:b4:b3:b7:94:ef:d8:af:09:8b:
15:ff:1b:b3:b1:13:03:a8:72:28:78:bf:00:58:dd:22:dd:5f:
06:16:53:38:c7:7e:96:ae:e4:d7:51:e9:34:36:8a:a2:4b:7f:
1c:9c:0b:36:d3:12:8a:13:56:d8:9b:7c:21:f6:3d:46:2b:35:
f9:fd:0e:4d:1f:38:0a:2a:0b:a4:0f:bc:cf:a2:ac:24:21:57:
cd:95:3c:18:d9:4c:05:37:26:d0:92:5f:ca:af:43:af:e4:87:
5e:b1:39:a8:9c:55:ec:f3:a3:fb:86:46:3c:8e:08:2b:39:81:
62:25:1f:f6:c3:ef:64:12:78:97:95:52:b7:6f:67:0d:b9:94:
c0:8b:39:98:5b:78:ab:87:68:9d:28:3d:a1:43:ff:d3:89:73:
73:47:46:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVkkPAgssQgGiLb9Ilg6nLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMjM5Y2NmMjZlYTM4MjU3YTA3ZDQwOTRmYTZkNzBiMjY5
NjlmYjkwHhcNMjUwODEwMjAwMDQ3WhcNMjUwODExMjAwMDQ3WjAzMTEwLwYDVQQD
EyhmYTFlYTZmYmE3MjU0N2JkYjQ1ZGI4MTQ5ZjNhYTY3ZTY1NDUyYWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3HXUrJ3ljxHG0mLsGAv5CmJ1pDU
3jRq+8+Ynz/DcVo3OVu2yvmMfKkWKlq4Eo5h8K1FI9fVl/+3YnHq1duLEvFp/0fR
hSI20en35sF4ecWQtQMBxHx2VlYt+in7WKhUmVH++5u+FInePO07MB44vyZAlxnU
ZMn+/Bw/Xmk2SU9zdYOvn0abzg5io9+ShBP2DcB+CWcFZym09v6ONwPFvyxRWcal
BZfV6dirmtNPG0RA1s+I+n3kY5xJUCxK/J/+Fko1tV11R3pJjqJapJG12wR7Tx6h
/vlqgrpLbKM5F0EhrvICVbkW4FK35sD+uvBQ8VhX6Jq56qhSXNLcVrNx7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoepvunJUe9tF24FJ86pn5lRSr7MB8GA1UdIwQY
MBaAFPwjnM8m6jglegfUCU+m1wsmlp+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mMDZjNzktN2M3ZS00NTA0LTg4YzAt
YThhOTExYTNlMmUwLzEvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mMDZjNzktN2M3ZS00NTA0LTg4YzAtYThhOTExYTNlMmUw
LzEvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWC+uvv5
UesBhDF7V5pjRgb72ZcabLdee2mORpEcZhti7ySQ63V5MvP3ZoO6DLSO9j3QqfNg
sP3nSbsE40ANICjLDF3dUe0+6EhMJPElBSm+hFW1G3aLAUoekMjsA3MhXcQftLO3
lO/YrwmLFf8bs7ETA6hyKHi/AFjdIt1fBhZTOMd+lq7k11HpNDaKokt/HJwLNtMS
ihNW2Jt8IfY9Ris1+f0OTR84CioLpA+8z6KsJCFXzZU8GNlMBTcm0JJfyq9Dr+SH
XrE5qJxV7POj+4ZGPI4IKzmBYiUf9sPvZBJ4l5VSt29nDbmUwIs5mFt4q4donSg9
oUP/04lzc0dGvQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:32 2025 by rpki-client