Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: yC31C1IkEqENVRgl1J3A5JYr9fOZreFb9P4inAo7N84=
Subject key identifier: 27:A4:EE:4B:DF:AC:EA:EC:60:4F:11:C8:C8:4C:73:86:2C:22:36:8F
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 0198443EDEEF7DE39D2209520139EF6AF3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0B7E
Signing time: Sat 26 Jul 2025 01:00:27 +0000
Manifest this update: Sat 26 Jul 2025 01:00:27 +0000
Manifest next update: Sun 27 Jul 2025 01:00:27 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: abQ5iNAFPcQW3VXKYIRr8i+n5p1TCnHPzfFh6WGAR54=)
2: Uj6BezAzB94GByjzrVUNlk0ht78.roa (hash: dN/7lNPFzPzip+lXMHPQrtHop8fW612WIaM/9STYSBo=)
3: i6d_wSF6B7XpMiMocY9g5Bflzus.roa (hash: Ie39FF54w1T4xPfnonYM6fmqfVN96lUmKfBb590VzVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3e:de:ef:7d:e3:9d:22:09:52:01:39:ef:6a:f3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Jul 26 01:00:27 2025 GMT
Not After : Jul 27 01:00:27 2025 GMT
Subject: CN=27a4ee4bdfaceaec604f11c8c84c73862c22368f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:4e:0b:d1:aa:42:a1:8c:47:87:f7:97:7b:
30:a7:75:b3:a8:2b:09:60:5b:c6:96:79:1d:43:ae:
1e:00:d9:b3:1f:8f:ab:1f:f0:ce:ad:49:d0:e1:f5:
6f:a5:e0:90:6d:65:39:88:e2:1f:26:65:e8:11:ea:
61:77:20:e8:bd:28:b3:92:ae:b5:52:b3:c7:a8:bc:
96:86:f9:29:eb:d9:22:d4:10:f9:ed:4b:b0:a0:d8:
08:0f:5f:de:1b:c2:54:f6:9c:2b:10:ff:cf:8e:85:
d5:07:72:fb:09:94:9a:6e:1b:14:5b:8f:4d:40:4d:
59:a7:b0:c9:6d:15:6f:0c:22:a6:60:ac:29:01:25:
e3:bd:55:7e:06:65:dd:b7:85:7e:4f:e1:67:a5:e1:
d3:b5:67:19:99:90:cd:e2:dc:14:e3:fe:92:44:86:
c3:32:bc:72:eb:2c:6f:a5:c9:f9:fa:0f:a5:e5:f5:
c8:e8:8e:ef:a4:f1:1e:be:ae:0a:2d:57:2e:30:3d:
15:0a:09:16:99:4c:f2:13:44:1d:4a:62:7c:af:6d:
85:a2:fe:cc:45:29:06:3b:11:46:ed:38:ec:95:31:
04:46:c0:1f:d0:02:ae:13:e3:71:58:03:7e:f8:a1:
4f:5f:82:35:fd:f5:bb:d7:47:a6:49:bc:a6:34:99:
76:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A4:EE:4B:DF:AC:EA:EC:60:4F:11:C8:C8:4C:73:86:2C:22:36:8F
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d2:67:9a:1e:fe:21:cb:9f:dd:74:b2:e3:b5:04:72:31:69:
5a:01:aa:1c:da:23:0b:8f:13:2a:7d:ae:5b:bf:9b:89:5b:ab:
7b:1f:5f:08:56:a9:25:4d:ef:9a:e8:7d:34:3f:70:53:4f:9f:
3f:98:51:c9:44:45:a7:9b:98:29:86:b1:5e:6f:b5:d6:9e:8b:
8b:c0:2b:ff:07:cb:01:36:69:68:9d:73:2d:44:90:f3:d1:12:
43:12:7e:67:5f:2a:6d:13:4c:0f:9d:97:36:75:db:c6:95:03:
a1:3d:37:79:75:ad:28:a2:54:37:75:55:b7:15:8c:bd:4c:83:
76:62:fa:0f:17:37:90:17:02:da:4b:a6:8d:e2:cf:59:8c:4b:
6f:8e:91:80:02:52:fc:1a:de:9e:2a:28:34:a7:3c:47:b6:01:
55:5c:ac:ab:f1:17:25:56:2e:1f:8b:57:bd:cc:ca:b3:b7:08:
64:6a:34:5f:61:84:c3:a6:c5:02:ac:d4:9c:ff:1a:38:b5:53:
5b:64:b3:23:8d:53:b7:ff:33:80:98:b9:87:3e:0f:5e:66:35:
2c:17:d2:68:22:b3:79:ce:38:c5:6f:3d:bc:b8:b9:b4:78:b3:
5c:a6:06:97:29:77:02:04:ee:50:d9:34:22:de:28:cb:bf:c2:
b3:c0:02:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEPt7vfeOdIglSATnvavPeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxY2ExYTcwNmFiY2ZiZTFiODU4NjUyMzhkODQzNWVlMzNl
NzU4MjAwHhcNMjUwNzI2MDEwMDI3WhcNMjUwNzI3MDEwMDI3WjAzMTEwLwYDVQQD
EygyN2E0ZWU0YmRmYWNlYWVjNjA0ZjExYzhjODRjNzM4NjJjMjIzNjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRdOC9GqQqGMR4f3l3swp3WzqCsJ
YFvGlnkdQ64eANmzH4+rH/DOrUnQ4fVvpeCQbWU5iOIfJmXoEephdyDovSizkq61
UrPHqLyWhvkp69ki1BD57UuwoNgID1/eG8JU9pwrEP/PjoXVB3L7CZSabhsUW49N
QE1Zp7DJbRVvDCKmYKwpASXjvVV+BmXdt4V+T+FnpeHTtWcZmZDN4twU4/6SRIbD
Mrxy6yxvpcn5+g+l5fXI6I7vpPEevq4KLVcuMD0VCgkWmUzyE0QdSmJ8r22Fov7M
RSkGOxFG7TjslTEERsAf0AKuE+NxWAN++KFPX4I1/fW710emSbymNJl2rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCek7kvfrOrsYE8RyMhMc4YsIjaPMB8GA1UdIwQY
MBaAFNHKGnBqvPvhuFhlI42ENe4z51ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzIt
ZThmN2ZkM2E0MDc4LzEvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzItZThmN2ZkM2E0MDc4
LzEvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9Jnmh7+
Icuf3XSy47UEcjFpWgGqHNojC48TKn2uW7+biVurex9fCFapJU3vmuh9ND9wU0+f
P5hRyURFp5uYKYaxXm+11p6Li8Ar/wfLATZpaJ1zLUSQ89ESQxJ+Z18qbRNMD52X
NnXbxpUDoT03eXWtKKJUN3VVtxWMvUyDdmL6Dxc3kBcC2kumjeLPWYxLb46RgAJS
/BreniooNKc8R7YBVVysq/EXJVYuH4tXvczKs7cIZGo0X2GEw6bFAqzUnP8aOLVT
W2SzI41Tt/8zgJi5hz4PXmY1LBfSaCKzec44xW89vLi5tHizXKYGlyl3AgTuUNk0
It4oy7/Cs8ACMA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:42:42 2025 by rpki-client