Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: Jwl00MuY4lxBqabwMWs30JfCZ17Awpu7Q+8XB0eznRw=
Subject key identifier: E9:0A:2A:D2:83:7D:13:2D:23:26:75:9E:D9:EE:53:31:C9:1F:41:8E
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 019922552733BBABF40EE31BEB5E5A2A5A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 139C
Signing time: Sun 07 Sep 2025 04:00:29 +0000
Manifest this update: Sun 07 Sep 2025 04:00:29 +0000
Manifest next update: Mon 08 Sep 2025 04:00:29 +0000
Files and hashes: 1: BepPUqJmcox6vrPVeFLnic_YFR0.roa (hash: C5IbNUmrfVvGpmpP7H7NCibsdAPbj5KKxAELI101al0=)
2: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: zfaR6aQ2+9qYHuDXnkvi7chO/Tc+JKx1NwRvAMXE894=)
3: yKqwm37t4yVmxr4NwzTqfwD-IDY.roa (hash: MxaSTIqKL5tTZsGpRXKzjl3dEdK1M2+iZYuBArbrbWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:27:33:bb:ab:f4:0e:e3:1b:eb:5e:5a:2a:5a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Sep 7 04:00:29 2025 GMT
Not After : Sep 8 04:00:29 2025 GMT
Subject: CN=e90a2ad2837d132d2326759ed9ee5331c91f418e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:71:74:ee:32:fb:2e:81:04:f7:61:15:8a:a2:
25:39:d4:8b:dd:73:0f:f9:73:66:ba:33:a3:a0:44:
9e:00:8c:89:d6:3d:04:3a:6b:ed:eb:97:26:a7:be:
29:6f:b4:5c:60:a2:bf:fb:3c:fb:cf:52:2c:f5:7b:
4c:39:77:7d:f9:c1:93:e4:a9:f1:41:91:45:e8:da:
a0:7a:f7:72:da:4e:10:de:2e:e9:4f:87:43:4d:aa:
e3:77:e4:9f:e9:4e:2f:85:3c:96:19:0f:7e:b4:06:
51:41:36:6d:18:cf:2e:93:03:67:73:b6:27:c9:ba:
dc:74:b8:f4:d7:88:bc:e2:25:92:27:86:81:53:01:
b5:00:f3:9f:15:eb:db:4b:68:7f:6a:7b:d3:fd:13:
d7:62:4b:f4:f1:b7:de:fc:a9:00:5f:2b:17:f0:bf:
b4:77:b8:6b:af:4e:c8:54:5b:9f:d8:0a:37:6e:75:
2b:e3:43:82:84:1c:d1:65:88:07:d3:60:76:3f:3c:
4e:73:cc:6e:5e:61:35:ad:f4:5d:53:63:fd:57:76:
c3:18:15:2a:18:e6:de:ae:1a:a9:1e:bf:eb:86:28:
16:7c:d2:f2:05:99:e8:d8:dc:11:c9:a8:f3:3a:10:
e5:f1:7a:06:1e:6b:63:6c:e0:60:cc:69:63:d4:c2:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0A:2A:D2:83:7D:13:2D:23:26:75:9E:D9:EE:53:31:C9:1F:41:8E
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:16:c2:7a:33:e1:ff:ca:d2:09:8e:7c:02:5f:d6:2e:ff:07:
9d:09:34:83:fc:fa:9d:23:45:ff:73:e9:b4:d1:ff:f2:90:e5:
84:59:ec:22:da:79:47:2e:26:c0:da:da:03:42:df:13:b2:4b:
e3:de:94:a7:86:91:9d:be:ee:ca:25:c5:19:97:ac:ff:8c:8c:
8d:2e:10:2f:ca:48:e3:a5:13:8b:d4:3a:ed:b5:b7:22:45:88:
a7:d3:5d:cf:0a:8c:4a:98:19:b7:db:9e:6b:ca:bc:db:20:e6:
62:5c:20:5a:c0:ff:c4:a3:71:9e:ee:22:3f:71:41:fd:5e:6e:
a9:cb:88:9c:c0:65:d0:e2:f6:0f:44:51:15:fe:ec:aa:23:d5:
da:ff:9b:2f:f0:27:c9:93:ee:96:69:e7:22:da:00:84:0f:b0:
4a:45:9e:a1:e8:01:0c:9b:91:e6:6a:e5:da:3d:e3:a1:dc:59:
45:02:53:5c:2d:be:6b:4a:f0:4f:ca:20:12:6a:c3:14:f7:b5:
37:8f:3c:db:50:81:d4:61:8c:25:8b:83:af:54:be:2c:6d:21:
f5:39:59:73:9b:78:44:8d:e5:83:f0:f0:9e:c6:ea:04:d2:66:
3b:b1:f4:7b:72:37:32:27:dc:18:d5:6c:6f:9d:73:b7:1d:e6:
3f:cc:36:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVSczu6v0DuMb615aKlpBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhODRlNDczYWE1NjRlYjUxYTdlN2ViOGIxOGYxNGFjMGNi
YzJjOWMwHhcNMjUwOTA3MDQwMDI5WhcNMjUwOTA4MDQwMDI5WjAzMTEwLwYDVQQD
EyhlOTBhMmFkMjgzN2QxMzJkMjMyNjc1OWVkOWVlNTMzMWM5MWY0MThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53F07jL7LoEE92EViqIlOdSL3XMP
+XNmujOjoESeAIyJ1j0EOmvt65cmp74pb7RcYKK/+zz7z1Is9XtMOXd9+cGT5Knx
QZFF6Nqgevdy2k4Q3i7pT4dDTarjd+Sf6U4vhTyWGQ9+tAZRQTZtGM8ukwNnc7Yn
ybrcdLj014i84iWSJ4aBUwG1APOfFevbS2h/anvT/RPXYkv08bfe/KkAXysX8L+0
d7hrr07IVFuf2Ao3bnUr40OChBzRZYgH02B2PzxOc8xuXmE1rfRdU2P9V3bDGBUq
GOberhqpHr/rhigWfNLyBZno2NwRyajzOhDl8XoGHmtjbOBgzGlj1MIVPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkKKtKDfRMtIyZ1ntnuUzHJH0GOMB8GA1UdIwQY
MBaAFAqE5HOqVk61Gn5+uLGPFKwMvCycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgt
NTQ2MjhkZmNiYTRjLzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgtNTQ2MjhkZmNiYTRj
LzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhbCejPh
/8rSCY58Al/WLv8HnQk0g/z6nSNF/3PptNH/8pDlhFnsItp5Ry4mwNraA0LfE7JL
496Up4aRnb7uyiXFGZes/4yMjS4QL8pI46UTi9Q67bW3IkWIp9NdzwqMSpgZt9ue
a8q82yDmYlwgWsD/xKNxnu4iP3FB/V5uqcuInMBl0OL2D0RRFf7sqiPV2v+bL/An
yZPulmnnItoAhA+wSkWeoegBDJuR5mrl2j3jodxZRQJTXC2+a0rwT8ogEmrDFPe1
N48821CB1GGMJYuDr1S+LG0h9TlZc5t4RI3lg/DwnsbqBNJmO7H0e3I3MifcGNVs
b51ztx3mP8w21Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:08 2025 by rpki-client