Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: G9wF60BcW96Usr7pTdDgxYueLFr2gx53maDvtW6iXCs=
Subject key identifier: C0:38:36:67:A6:16:B1:21:70:49:32:DA:AC:CA:39:96:2F:B5:4A:E1
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 019A24782430834EA51B881235E06140711B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0C2C
Signing time: Mon 27 Oct 2025 07:00:44 +0000
Manifest this update: Mon 27 Oct 2025 07:00:44 +0000
Manifest next update: Tue 28 Oct 2025 07:00:44 +0000
Files and hashes: 1: XDbrvNT86ISN_spCbo4xvAzpVp4.roa (hash: VdcMI142dXyMiD8Y0gV4McGw1NiqJuUGtwcS5l0geTI=)
2: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: QltTWMs7bisptWCnt7naZDaxRbGPQkfXSWwbQ57XO7c=)
3: ziT1KvRp4nclVM5reU3sOFNH1x4.roa (hash: Q4C5iLbiXkuuyYxp+dYvmqYFnNUxA4NFMnWPDomm2KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:24:30:83:4e:a5:1b:88:12:35:e0:61:40:71:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Oct 27 07:00:44 2025 GMT
Not After : Oct 28 07:00:44 2025 GMT
Subject: CN=c0383667a616b121704932daacca39962fb54ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:79:d9:dc:a1:75:22:6b:7a:bb:20:99:e8:
a0:49:44:d2:ac:1f:7e:30:3a:e4:26:5c:70:72:15:
b2:14:bf:d6:1c:0a:24:37:b4:c3:e7:4d:f7:f9:b9:
72:aa:35:99:f4:2b:e3:fe:e1:56:9a:45:a0:11:89:
2c:ef:1e:64:18:1c:3f:64:c1:1a:59:e9:4f:5d:e3:
af:91:ca:fa:77:1b:ed:fa:07:27:6b:6e:d7:be:5e:
90:5d:e7:47:7c:24:0a:cc:b7:50:ea:43:23:ba:c5:
ab:a2:84:58:6d:54:8d:4f:b8:c2:5d:34:45:ad:cc:
54:00:c0:b3:e7:1c:1d:81:86:c2:88:99:31:b5:9d:
79:2a:26:5f:0b:a6:58:19:39:fe:d8:bf:ec:15:46:
33:bb:aa:65:40:89:85:73:bb:38:a5:70:d3:f1:ee:
d6:90:a0:24:a3:a4:aa:c4:af:5f:e9:d6:39:9b:4a:
5e:97:57:a1:f8:c0:09:0d:23:18:a5:38:c8:20:07:
07:c1:3e:9e:9f:b0:61:7a:63:de:58:49:91:dd:94:
b8:97:53:dd:d8:fb:9f:9e:01:70:16:d2:20:7a:08:
98:aa:d2:b9:10:ec:a2:57:ce:28:93:b3:d4:4b:a3:
d5:e9:db:70:2a:18:da:96:70:33:6c:d7:1e:fb:83:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:38:36:67:A6:16:B1:21:70:49:32:DA:AC:CA:39:96:2F:B5:4A:E1
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:14:ea:eb:ce:7b:7f:6f:7d:6c:8c:69:88:dd:c3:4b:c7:7e:
6e:00:a7:03:1d:78:1f:00:ad:65:80:50:bb:9e:1a:6f:07:72:
a1:09:1d:15:ee:41:05:41:33:46:2f:03:46:bb:8e:c6:4e:0c:
74:20:c0:6e:b6:f7:fb:96:fa:92:eb:06:4c:44:73:ee:58:e5:
f7:dc:da:06:89:7c:54:88:89:9a:8a:12:d3:e3:28:7a:91:92:
9d:e3:e9:93:08:90:ff:66:03:d3:32:1d:85:80:b3:bd:76:16:
56:13:8d:4c:e5:62:aa:1f:cf:6f:4d:5b:bb:b9:c3:5f:2d:0f:
88:f2:f2:b6:c1:0e:49:03:12:99:95:aa:d4:f1:8f:41:c2:44:
49:5d:5a:0f:b4:37:68:ec:59:1b:1a:d8:e2:d1:8c:b4:cf:82:
aa:e1:c8:6a:b1:5e:20:b9:31:02:d3:1d:72:8d:02:de:cf:b7:
43:00:ce:73:09:2a:0f:9b:09:16:7b:c9:28:e0:d0:6e:0c:9f:
ac:33:a8:d1:2f:d3:6c:c0:10:c4:09:38:8b:2f:ec:b1:35:40:
e9:69:e7:5a:67:0e:d3:1f:df:87:c9:32:4b:21:4b:88:96:4b:
7c:86:c4:5d:f2:cf:52:da:ca:d1:5a:7b:70:9b:ca:5d:18:46:
3a:e7:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:57:47 2025 by rpki-client