Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: w5iaU37AzcI9Hn4RSNcM/1zPLd+MvR7QuUE9IKb56Rk=
Subject key identifier: 96:D7:6E:61:AA:96:D5:EE:23:5F:77:02:76:EA:F4:82:C5:2E:15:B7
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 019A50E2C5DC0931EF7663BB0A08E82EDFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 122E
Signing time: Tue 04 Nov 2025 22:00:30 +0000
Manifest this update: Tue 04 Nov 2025 22:00:30 +0000
Manifest next update: Wed 05 Nov 2025 22:00:30 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: B1hs9XoTnqLOKwp8R//pzHp83G+98DCtFdNL3tpK3Lw=)
2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:c5:dc:09:31:ef:76:63:bb:0a:08:e8:2e:df:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Nov 4 22:00:30 2025 GMT
Not After : Nov 5 22:00:30 2025 GMT
Subject: CN=96d76e61aa96d5ee235f770276eaf482c52e15b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:2a:e6:17:a4:2e:4b:26:80:c4:73:b4:01:
41:96:bb:73:85:99:ca:a0:34:26:4e:86:57:7e:6f:
ac:e5:92:fd:28:c9:58:e9:a2:1b:e6:92:7f:ec:18:
3f:52:19:bc:f1:82:2f:97:8a:3f:a3:d0:5b:0e:5b:
d5:70:08:41:38:29:b1:f6:af:56:b9:f3:ee:d2:26:
7a:69:93:08:13:08:13:90:af:74:6f:c7:6e:49:b9:
ac:5f:3f:fa:19:bd:9e:e8:62:08:8b:9a:11:f2:d2:
5e:40:9c:4c:7b:e4:e6:cd:04:bf:f3:61:bd:e3:15:
62:97:47:ab:36:ed:94:a4:21:f1:15:cb:ed:8e:5d:
f4:c5:bf:5d:eb:f6:5a:b4:2b:5b:47:c5:68:2d:dd:
26:d4:71:af:25:f4:3b:78:24:03:71:69:1e:63:7d:
b1:52:f7:25:8c:3e:f0:48:91:8b:20:a2:47:51:0e:
e6:1f:33:5c:76:f2:70:0b:14:67:82:04:24:f1:0e:
6b:79:4d:22:e3:87:68:81:dd:76:94:00:a1:91:09:
6e:e9:3e:d5:1a:a0:fb:ef:15:08:c9:22:3f:59:68:
8e:5a:31:f7:e2:2c:7b:ce:ce:b3:d2:f9:e3:56:44:
6d:1d:e2:da:94:d9:4f:52:32:e3:67:04:a9:b2:4b:
ab:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D7:6E:61:AA:96:D5:EE:23:5F:77:02:76:EA:F4:82:C5:2E:15:B7
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:37:5c:26:e0:01:db:53:5d:bc:05:9f:80:43:1f:13:71:19:
8b:e9:f2:8a:d0:26:31:1b:61:e5:66:73:f0:f6:ff:89:24:fa:
3f:45:6e:26:6d:de:09:0a:6d:d3:d7:30:e6:25:c2:a9:53:f7:
eb:25:40:44:c5:d9:0a:eb:96:77:47:dd:9b:19:1c:ec:5b:b8:
a9:bf:0c:69:b2:62:1b:5c:de:37:fc:6e:df:eb:25:dc:1d:a9:
6e:af:c7:47:5e:10:c6:ab:bf:9b:b9:88:fd:03:34:85:d6:a4:
fc:11:69:85:d2:c0:c0:25:00:38:54:c3:91:86:4c:cf:7f:1a:
e4:9f:45:2c:b9:a5:16:b6:51:e1:ea:ce:25:9f:1a:cb:e5:29:
fa:82:20:50:6f:4b:e9:d0:14:2e:3f:f8:74:ec:60:85:bc:a4:
92:b1:2f:23:86:e2:bf:3c:8c:68:15:97:87:c8:b4:77:40:34:
75:0e:b7:ec:98:7a:15:db:a5:62:7a:d5:ed:b3:c0:87:5a:f6:
f9:ee:cc:7a:48:af:2d:69:c0:ce:79:86:c0:af:8c:d0:73:e8:
63:e8:61:90:d3:09:db:66:6a:7a:6c:9e:cc:1f:27:e9:00:1b:
63:2c:cb:97:3a:3b:3a:2b:57:92:30:cf:d4:77:78:51:d9:bc:
fd:d9:da:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4sXcCTHvdmO7CgjoLt+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOGJjYTFhMGU4NjQ0OGI3M2RhNTRjNDJjYjBkNzU3NjUz
NzNmMjcwHhcNMjUxMTA0MjIwMDMwWhcNMjUxMTA1MjIwMDMwWjAzMTEwLwYDVQQD
Eyg5NmQ3NmU2MWFhOTZkNWVlMjM1Zjc3MDI3NmVhZjQ4MmM1MmUxNWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupgq5hekLksmgMRztAFBlrtzhZnK
oDQmToZXfm+s5ZL9KMlY6aIb5pJ/7Bg/Uhm88YIvl4o/o9BbDlvVcAhBOCmx9q9W
ufPu0iZ6aZMIEwgTkK90b8duSbmsXz/6Gb2e6GIIi5oR8tJeQJxMe+TmzQS/82G9
4xVil0erNu2UpCHxFcvtjl30xb9d6/ZatCtbR8VoLd0m1HGvJfQ7eCQDcWkeY32x
UvcljD7wSJGLIKJHUQ7mHzNcdvJwCxRnggQk8Q5reU0i44dogd12lAChkQlu6T7V
GqD77xUIySI/WWiOWjH34ix7zs6z0vnjVkRtHeLalNlPUjLjZwSpskurcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbXbmGqltXuI193Anbq9ILFLhW3MB8GA1UdIwQY
MBaAFAqLyhoOhkSLc9pUxCyw11dlNz8nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xODZmZDQtM2M2NC00ZGJmLWE5MDAt
YTc5OTA2MjU4OWEzLzEvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8xODZmZDQtM2M2NC00ZGJmLWE5MDAtYTc5OTA2MjU4OWEz
LzEvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDdcJuAB
21NdvAWfgEMfE3EZi+nyitAmMRth5WZz8Pb/iST6P0VuJm3eCQpt09cw5iXCqVP3
6yVARMXZCuuWd0fdmxkc7Fu4qb8MabJiG1zeN/xu3+sl3B2pbq/HR14Qxqu/m7mI
/QM0hdak/BFphdLAwCUAOFTDkYZMz38a5J9FLLmlFrZR4erOJZ8ay+Up+oIgUG9L
6dAULj/4dOxghbykkrEvI4bivzyMaBWXh8i0d0A0dQ637Jh6FdulYnrV7bPAh1r2
+e7MekivLWnAznmGwK+M0HPoY+hhkNMJ22ZqemyezB8n6QAbYyzLlzo7OitXkjDP
1Hd4Udm8/dnaZg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:25 2025 by rpki-client