Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: 0yKAlPYLnF3B7d4XtFi0vfYhP9YGdOQlfeL6NVP5/OI=
Subject key identifier: E7:8F:E1:6B:26:85:6C:BE:F2:C6:8D:DA:BA:F4:C8:36:DA:7B:18:33
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 01984C9DA062CCAA7AA6544AE0D977FC89DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 0DA9
Signing time: Sun 27 Jul 2025 16:00:55 +0000
Manifest this update: Sun 27 Jul 2025 16:00:55 +0000
Manifest next update: Mon 28 Jul 2025 16:00:55 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: 5v45IMZRp7SCIYGO4EXvdfOWamW9a5scrrUdK4W4+vY=)
2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9d:a0:62:cc:aa:7a:a6:54:4a:e0:d9:77:fc:89:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Jul 27 16:00:55 2025 GMT
Not After : Jul 28 16:00:55 2025 GMT
Subject: CN=e78fe16b26856cbef2c68ddabaf4c836da7b1833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:85:57:ba:8c:9a:a1:93:1c:2f:83:40:c7:
25:5b:71:59:52:ac:79:2e:e9:29:95:17:ea:79:71:
5b:08:e9:46:9e:88:e4:7a:5c:b2:3e:58:77:b3:71:
01:2d:90:01:43:c3:a6:39:4e:18:b9:c2:2b:58:e8:
6e:5f:4a:1f:05:b0:5a:63:ce:bf:a4:68:0c:cc:75:
3e:d6:c5:fd:95:e7:0a:0e:de:1c:0d:95:d5:3a:ed:
c3:7d:46:47:28:5a:d0:82:4a:e0:ff:46:8f:67:d5:
0b:4e:15:b2:4a:93:e6:8e:64:70:27:d8:7f:ce:a1:
ae:e5:f7:72:21:62:40:70:42:a2:64:94:96:db:2f:
96:3b:8e:b5:87:19:84:b9:b0:58:fa:5a:fa:93:ff:
8f:23:09:9e:1c:21:5d:b9:10:8c:a1:1b:a0:2d:63:
11:8f:bf:a0:56:96:20:c4:92:ce:70:d0:01:b5:ff:
98:b1:c3:15:78:1a:c4:4b:43:69:1c:4b:34:66:2f:
e3:69:da:d4:69:71:13:7b:e0:e9:55:5f:18:86:c9:
c5:ff:ca:1c:67:0b:4d:f0:f2:ff:68:60:dd:97:e2:
30:a4:d5:cc:6d:1e:9c:42:49:e8:df:2f:c0:fd:8a:
6f:6e:17:1a:b4:a7:b4:5d:1d:71:1e:06:42:bb:76:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8F:E1:6B:26:85:6C:BE:F2:C6:8D:DA:BA:F4:C8:36:DA:7B:18:33
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e1:bb:1c:ad:14:a6:ed:bd:e4:ae:0e:a8:41:22:3a:d5:73:
a9:71:dd:98:84:2c:b8:14:e9:bd:27:c1:23:f8:74:8a:b8:2d:
be:23:da:ef:3b:dc:f8:c6:8d:81:21:8e:8c:d0:9a:73:9c:25:
d8:fb:07:e4:03:60:3a:94:61:df:e5:06:fe:50:e0:ef:66:bf:
25:38:af:0f:81:00:c2:e4:e2:b4:77:ec:6e:72:90:bf:0a:af:
18:b8:e0:04:83:18:e5:d2:2a:d1:4b:85:42:29:27:98:aa:4f:
de:33:77:f3:e1:a4:aa:71:e4:d7:1a:a2:91:b4:9b:27:10:03:
b7:e9:5c:d0:28:df:df:c9:a8:da:7a:f7:5c:5f:ce:8e:b0:93:
d9:4e:df:0d:f5:17:4c:4d:30:9b:95:e2:a8:e5:f3:f6:a7:0a:
5b:2c:80:9c:cb:8c:70:37:b1:90:24:e5:99:a7:61:c9:21:ae:
a3:c6:fd:dc:8d:38:cf:f9:8a:47:56:00:d8:07:d6:7f:f9:5c:
3e:f0:bd:2b:27:ca:61:ac:a1:90:2d:92:77:b1:af:bb:f6:1e:
b6:dd:42:d1:b4:96:44:4f:36:23:9c:c5:4c:5a:23:7a:cf:36:
71:2a:ad:7c:7d:cb:e3:59:f6:de:d6:d1:fa:d3:98:e1:64:63:
d6:72:ff:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 00:34:17 2025 by rpki-client