Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
File: CO0aVoa6aCicbP5MfDbgN63hHso.mft (raw, json)
Hash identifier: n/yzGJZ7r3fyFTiQ1VBR8tP4vdGv6awDWFYjzkgsXT4=
Subject key identifier: 32:62:B4:9E:8C:F1:69:7C:22:6F:FB:20:28:C1:1F:7E:22:3A:D4:E4
Authority key identifier: 08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA
Certificate issuer: /CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca
Certificate serial: 01987D1C54E637B29929D2C1FE1A97992DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
Manifest number: 019B
Signing time: Wed 06 Aug 2025 02:01:05 +0000
Manifest this update: Wed 06 Aug 2025 02:01:05 +0000
Manifest next update: Thu 07 Aug 2025 02:01:05 +0000
Files and hashes: 1: CO0aVoa6aCicbP5MfDbgN63hHso.crl (hash: 7ngirEFmi0SSwJ8p979K9uf+rkN/e8QOeh7cu8SsaPA=)
2: XIYNgLktIjso42Y1xvc7ZQ9ush8.roa (hash: 2xDZhva1yvr4fqGcAJL4jzSvNBum97k23PuodDDKzAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:54:e6:37:b2:99:29:d2:c1:fe:1a:97:99:2d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca
Validity
Not Before: Aug 6 02:01:05 2025 GMT
Not After : Aug 7 02:01:05 2025 GMT
Subject: CN=3262b49e8cf1697c226ffb2028c11f7e223ad4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:57:11:78:dd:fa:ba:4d:b8:70:45:0b:01:
34:a1:c9:a0:ae:46:85:c6:f7:a1:91:ed:32:69:9e:
d9:1c:64:7e:f9:d1:6e:ae:37:30:20:4b:d6:4b:bd:
68:c2:2c:22:45:96:68:aa:9b:df:04:d6:4e:1f:0a:
ae:ad:70:3a:37:80:83:a0:ae:84:2c:f4:c5:0f:e7:
de:9f:89:51:19:41:41:0c:11:a3:bb:cb:b0:d1:7e:
ed:eb:4c:3a:75:0b:d1:da:ba:77:df:a0:c3:9f:3a:
4e:80:84:ef:05:59:62:e5:e2:c0:66:d6:1c:48:23:
2c:f5:7f:62:7b:5a:fe:17:ec:4b:d4:a4:2a:f1:98:
de:64:09:b0:c2:2d:6c:9d:9b:b1:01:c5:06:fe:1a:
2f:08:e5:1a:99:ac:f2:03:d3:d4:2e:06:2f:7f:41:
c2:6f:7a:9a:ec:36:62:aa:92:36:a4:4d:f3:a9:8f:
0d:73:21:54:07:6e:cd:1c:b2:ae:86:3d:c7:64:ad:
a3:24:5c:93:42:cf:18:1d:7b:23:dd:2f:96:8b:66:
4c:d4:3e:b4:5e:0c:13:1b:d0:50:65:ee:92:cb:a1:
a3:da:2a:bb:4c:42:3c:52:e3:dc:23:28:ab:5f:2a:
0b:41:c9:04:df:1d:ec:05:f7:43:4f:4f:bc:89:18:
97:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:62:B4:9E:8C:F1:69:7C:22:6F:FB:20:28:C1:1F:7E:22:3A:D4:E4
X509v3 Authority Key Identifier:
keyid:08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:33:72:ef:d4:1d:c4:df:69:c4:b9:19:14:02:b1:0d:e1:2c:
b8:dc:d9:72:ee:39:5f:4b:e3:05:93:49:4a:d8:9b:5b:ab:80:
9d:c0:1a:65:4f:83:7f:c0:c9:94:88:e1:9b:ef:32:ed:a8:0d:
91:7d:b6:12:d4:9a:5e:45:24:eb:45:69:e0:41:dc:a0:4c:5d:
58:c0:80:83:a6:72:f1:98:e3:8e:c8:e1:ff:a5:73:64:e1:fc:
d8:53:79:68:e0:01:29:00:79:48:c1:b2:95:33:d5:ad:f7:01:
91:88:d0:36:d8:08:48:99:19:d1:fc:5e:90:5f:71:f6:86:11:
bd:57:c8:12:ad:3b:d4:5f:a4:8e:51:d7:97:15:94:df:56:69:
46:36:6e:9d:db:2c:4a:4b:e2:63:75:d8:00:b2:d1:d8:e6:00:
9e:73:07:d9:44:18:f5:2c:90:40:7f:d0:08:e8:06:55:78:0d:
ad:97:6d:37:db:08:d7:a9:89:0a:31:65:18:4a:46:9f:4a:9e:
57:3b:40:80:45:ea:e0:87:d4:37:d9:c7:e2:7a:bb:f1:19:58:
5c:8f:2b:68:29:13:a3:ea:27:ab:89:2b:1b:ef:b7:9d:b4:aa:
f0:17:a9:34:1f:b0:c1:b6:c9:6c:89:7b:5c:ac:5c:7c:f7:16:
93:ac:b0:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9HFTmN7KZKdLB/hqXmS3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZWQxYTU2ODZiYTY4Mjg5YzZjZmU0YzdjMzZlMDM3YWRl
MTFlY2EwHhcNMjUwODA2MDIwMTA1WhcNMjUwODA3MDIwMTA1WjAzMTEwLwYDVQQD
EygzMjYyYjQ5ZThjZjE2OTdjMjI2ZmZiMjAyOGMxMWY3ZTIyM2FkNGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4NXEXjd+rpNuHBFCwE0ocmgrkaF
xvehke0yaZ7ZHGR++dFurjcwIEvWS71owiwiRZZoqpvfBNZOHwqurXA6N4CDoK6E
LPTFD+fen4lRGUFBDBGju8uw0X7t60w6dQvR2rp336DDnzpOgITvBVli5eLAZtYc
SCMs9X9ie1r+F+xL1KQq8ZjeZAmwwi1snZuxAcUG/hovCOUamazyA9PULgYvf0HC
b3qa7DZiqpI2pE3zqY8NcyFUB27NHLKuhj3HZK2jJFyTQs8YHXsj3S+Wi2ZM1D60
XgwTG9BQZe6Sy6Gj2iq7TEI8UuPcIyirXyoLQckE3x3sBfdDT0+8iRiX3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJitJ6M8Wl8Im/7ICjBH34iOtTkMB8GA1UdIwQY
MBaAFAjtGlaGumgonGz+THw24Det4R7KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ08wYVZvYTZhQ2ljYlA1TWZEYmdONjNoSHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mY2I3NzMtMWY1Yi00NDIxLWIxZDQt
OTBhYjc5ZTdlZTIzLzEvQ08wYVZvYTZhQ2ljYlA1TWZEYmdONjNoSHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mY2I3NzMtMWY1Yi00NDIxLWIxZDQtOTBhYjc5ZTdlZTIz
LzEvQ08wYVZvYTZhQ2ljYlA1TWZEYmdONjNoSHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDNy79Qd
xN9pxLkZFAKxDeEsuNzZcu45X0vjBZNJStibW6uAncAaZU+Df8DJlIjhm+8y7agN
kX22EtSaXkUk60Vp4EHcoExdWMCAg6Zy8Zjjjsjh/6VzZOH82FN5aOABKQB5SMGy
lTPVrfcBkYjQNtgISJkZ0fxekF9x9oYRvVfIEq071F+kjlHXlxWU31ZpRjZundss
SkviY3XYALLR2OYAnnMH2UQY9SyQQH/QCOgGVXgNrZdtN9sI16mJCjFlGEpGn0qe
VztAgEXq4IfUN9nH4nq78RlYXI8raCkTo+onq4krG++3nbSq8BepNB+wwbbJbIl7
XKxcfPcWk6ywiw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:31:59 2025 by rpki-client