Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: D3wKaOc2t1gqEMG1fMvkdRM/wUHDkUeYvzXfWFbEkEs=
Subject key identifier: 4E:99:F8:1C:DC:0B:77:60:FF:2C:AC:62:6F:20:48:84:48:F3:83:08
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 01974EFC8B21FA4A528E4BB28E35DD7A9E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 12AA
Signing time: Sun 08 Jun 2025 10:01:02 +0000
Manifest this update: Sun 08 Jun 2025 10:01:02 +0000
Manifest next update: Mon 09 Jun 2025 10:01:02 +0000
Files and hashes: 1: BepPUqJmcox6vrPVeFLnic_YFR0.roa (hash: C5IbNUmrfVvGpmpP7H7NCibsdAPbj5KKxAELI101al0=)
2: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: 4GdvNjyA8xcmL+wTfTlj4mTN3ocau04DbEq3o5rL7Uw=)
3: yKqwm37t4yVmxr4NwzTqfwD-IDY.roa (hash: MxaSTIqKL5tTZsGpRXKzjl3dEdK1M2+iZYuBArbrbWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:8b:21:fa:4a:52:8e:4b:b2:8e:35:dd:7a:9e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Jun 8 10:01:02 2025 GMT
Not After : Jun 9 10:01:02 2025 GMT
Subject: CN=4e99f81cdc0b7760ff2cac626f20488448f38308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:f4:c3:5f:7b:00:9c:b0:cf:61:d3:46:3c:
62:fe:bc:6b:10:c4:b0:1b:13:6e:4f:64:9b:6f:f7:
03:f6:5d:df:2d:73:1f:4e:0c:9f:41:ad:1e:33:be:
a2:29:50:de:3b:f1:54:fe:f4:08:8f:e7:57:45:26:
48:63:e9:d7:f9:f2:bc:29:bf:9e:05:80:2a:92:e1:
11:2c:82:7c:00:30:63:f7:85:8a:1a:35:c0:c0:3d:
0a:17:5f:69:23:ad:c8:bb:0d:b4:88:b8:14:93:e3:
b6:e6:7a:18:34:bd:67:85:7e:f2:2f:72:19:0a:52:
96:f6:71:75:0c:7b:05:e5:6e:07:99:34:12:aa:68:
c3:35:0e:94:41:07:d7:41:4c:d8:8d:9c:75:02:46:
14:e2:19:34:7b:c8:41:a8:cf:b1:cd:ad:cc:d3:f8:
a8:6d:6f:3e:fb:37:c5:24:7b:f9:46:e0:9d:04:16:
bd:ee:0a:e9:1d:f1:6c:72:b7:80:61:8b:b9:f2:f5:
06:7f:57:4c:25:4f:2c:0e:c3:2e:47:85:31:ea:0b:
a6:c9:3c:3f:14:19:ed:fd:4b:93:ac:99:35:7e:b9:
c6:4d:b3:21:25:9e:9f:0c:da:06:5b:6d:3e:63:09:
61:b9:e9:93:5f:a5:49:53:be:d2:d4:32:81:71:9c:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:99:F8:1C:DC:0B:77:60:FF:2C:AC:62:6F:20:48:84:48:F3:83:08
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a1:c3:b2:b2:0d:ed:8c:8e:69:ca:b6:b4:4e:e7:c2:a5:22:
86:9c:a3:5d:5e:e9:b4:27:a8:94:04:23:b0:18:28:4e:00:9b:
fd:1e:cf:00:a9:38:98:64:d9:a9:d4:f9:46:76:c2:49:52:28:
fc:09:aa:fd:c2:cd:c7:ca:d8:b8:c6:3d:aa:ad:22:fa:b0:e9:
7d:c1:8e:11:75:1e:28:2e:d8:44:c6:c6:c9:2e:78:ac:9b:e5:
9e:3e:dd:a0:2a:2f:cf:01:71:f6:7f:2e:a0:e1:8e:b9:f2:9a:
d8:6c:69:50:3f:b0:00:59:67:9c:c3:fb:af:09:c2:41:3d:ac:
43:83:cb:7e:5d:52:63:9c:42:1e:02:e3:bf:ca:8e:fe:38:2b:
11:9a:0b:55:68:28:31:d3:3a:d1:d0:12:29:86:bb:c5:f0:42:
03:b8:16:17:3a:8a:d6:96:d4:2d:a0:63:f1:b2:4f:72:7b:09:
06:a4:14:f2:0f:8c:e9:b0:b2:6a:69:37:85:bd:68:1c:61:28:
45:6f:b6:29:00:64:3c:18:80:71:c2:ba:1d:f3:0d:65:32:c5:
ed:19:f8:be:3c:6c:00:ae:86:f2:94:8e:58:16:16:61:ab:48:
16:44:24:b0:d2:1b:f5:84:a7:c3:70:aa:c4:74:cc:b4:48:5b:
e6:bd:90:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdO/Ish+kpSjkuyjjXdep4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhODRlNDczYWE1NjRlYjUxYTdlN2ViOGIxOGYxNGFjMGNi
YzJjOWMwHhcNMjUwNjA4MTAwMTAyWhcNMjUwNjA5MTAwMTAyWjAzMTEwLwYDVQQD
Eyg0ZTk5ZjgxY2RjMGI3NzYwZmYyY2FjNjI2ZjIwNDg4NDQ4ZjM4MzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOP0w197AJywz2HTRjxi/rxrEMSw
GxNuT2Sbb/cD9l3fLXMfTgyfQa0eM76iKVDeO/FU/vQIj+dXRSZIY+nX+fK8Kb+e
BYAqkuERLIJ8ADBj94WKGjXAwD0KF19pI63Iuw20iLgUk+O25noYNL1nhX7yL3IZ
ClKW9nF1DHsF5W4HmTQSqmjDNQ6UQQfXQUzYjZx1AkYU4hk0e8hBqM+xza3M0/io
bW8++zfFJHv5RuCdBBa97grpHfFscreAYYu58vUGf1dMJU8sDsMuR4Ux6gumyTw/
FBnt/UuTrJk1frnGTbMhJZ6fDNoGW20+YwlhuemTX6VJU77S1DKBcZxOxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6Z+BzcC3dg/yysYm8gSIRI84MIMB8GA1UdIwQY
MBaAFAqE5HOqVk61Gn5+uLGPFKwMvCycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgt
NTQ2MjhkZmNiYTRjLzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgtNTQ2MjhkZmNiYTRj
LzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6HDsrIN
7YyOacq2tE7nwqUihpyjXV7ptCeolAQjsBgoTgCb/R7PAKk4mGTZqdT5RnbCSVIo
/Amq/cLNx8rYuMY9qq0i+rDpfcGOEXUeKC7YRMbGyS54rJvlnj7doCovzwFx9n8u
oOGOufKa2GxpUD+wAFlnnMP7rwnCQT2sQ4PLfl1SY5xCHgLjv8qO/jgrEZoLVWgo
MdM60dASKYa7xfBCA7gWFzqK1pbULaBj8bJPcnsJBqQU8g+M6bCyamk3hb1oHGEo
RW+2KQBkPBiAccK6HfMNZTLF7Rn4vjxsAK6G8pSOWBYWYatIFkQksNIb9YSnw3Cq
xHTMtEhb5r2Q/A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:30:56 2025 by rpki-client