Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: EYrizegvWIXM2gEMc/Vir3UpXukKBWbShQ3fmgWLttY=
Subject key identifier: DB:5E:C5:79:86:20:30:28:81:73:17:A4:96:68:CB:81:D4:A9:15:EF
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 019A348F825328781AEFC58303EC6108A9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 142A
Signing time: Thu 30 Oct 2025 10:00:11 +0000
Manifest this update: Thu 30 Oct 2025 10:00:11 +0000
Manifest next update: Fri 31 Oct 2025 10:00:11 +0000
Files and hashes: 1: BepPUqJmcox6vrPVeFLnic_YFR0.roa (hash: C5IbNUmrfVvGpmpP7H7NCibsdAPbj5KKxAELI101al0=)
2: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: vCqKNUj+q0EDV9RD0js18HjS2FlgF2cLgb0z/4xAzDU=)
3: yKqwm37t4yVmxr4NwzTqfwD-IDY.roa (hash: MxaSTIqKL5tTZsGpRXKzjl3dEdK1M2+iZYuBArbrbWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:8f:82:53:28:78:1a:ef:c5:83:03:ec:61:08:a9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Oct 30 10:00:11 2025 GMT
Not After : Oct 31 10:00:11 2025 GMT
Subject: CN=db5ec57986203028817317a49668cb81d4a915ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:dc:52:81:79:78:81:0e:2e:87:2e:86:9e:
4a:a3:c2:a3:a9:d0:48:81:16:3b:b8:33:6b:b8:58:
32:ff:d3:e8:29:64:00:32:24:3f:2c:1d:9b:b0:77:
66:f9:0d:02:96:2f:5e:af:d4:2b:7e:20:d1:8e:0a:
9a:24:1e:34:34:a9:19:0d:53:14:4f:f6:fc:43:31:
27:83:45:db:39:92:93:7b:5a:5b:ad:ac:c8:57:cb:
e4:fa:42:2c:2c:c5:65:82:32:8b:34:33:07:cb:8b:
78:ad:d4:3d:2c:e1:e8:88:fb:84:5b:1f:98:66:e9:
ce:5f:ed:66:27:2b:24:05:f9:0a:aa:42:f3:c7:83:
2a:00:cb:af:e0:5e:e8:e7:3c:5d:f3:66:35:5e:8c:
64:bc:cc:87:0c:99:6e:36:3e:00:b0:f3:4b:00:b1:
ee:a3:82:ea:3b:84:a5:de:7e:ba:41:df:19:07:33:
a6:04:d2:d5:fa:48:0c:93:57:72:d8:7b:b2:0e:1d:
97:f1:f6:b4:c7:72:86:39:6b:ef:43:34:9b:5f:4a:
d4:80:d1:76:4e:a3:6d:7c:a9:b7:2c:8e:c1:90:81:
d8:e5:57:81:c1:bf:44:8a:6c:b8:1c:1e:de:a1:50:
a4:89:ad:a7:a6:80:0d:a7:30:ef:ab:c3:a5:fe:5e:
fa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5E:C5:79:86:20:30:28:81:73:17:A4:96:68:CB:81:D4:A9:15:EF
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ab:a8:49:71:71:13:b9:85:5f:1a:14:f1:01:eb:93:e1:80:
b0:63:58:df:b5:c0:64:15:6b:51:01:01:c7:d9:e7:40:30:7c:
ea:66:f7:17:0c:47:eb:bd:bd:d1:f5:a5:cb:f3:36:e3:dd:1e:
0c:9a:4e:f6:43:e0:26:85:d0:7c:84:d4:5c:4c:8f:b2:d6:d9:
8d:1a:59:24:1b:4b:c0:67:e7:1f:d9:c2:db:5e:58:46:86:b3:
e6:3c:65:c2:8e:84:2f:64:0b:ec:82:cc:50:50:26:c4:45:36:
98:7a:3b:6c:f6:f6:1a:9d:4d:7c:f0:25:6a:ef:ea:7e:d7:c8:
d8:58:55:57:3b:ef:57:a4:e9:ef:81:80:88:2c:2e:9b:d3:02:
34:e2:62:61:60:e8:02:a0:4c:91:7b:af:5a:65:9c:7f:39:ad:
26:d0:a4:75:89:15:f5:f8:c3:b7:b0:39:75:21:e8:55:09:2e:
78:f7:8f:43:e9:3a:46:1f:9f:39:95:43:8f:61:80:69:c6:c3:
79:ac:3b:e4:ea:23:64:4e:55:ea:d6:38:82:b7:76:0d:7f:55:
93:e7:21:23:f2:8e:5a:c0:d0:a1:7e:8b:c0:d9:b6:a8:f2:91:
0a:11:a8:1d:6b:25:0b:65:ab:6b:98:4d:30:5a:18:59:f2:75:
d7:ab:a3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 17:54:45 2025 by rpki-client