Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
File: cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft (raw, json)
Hash identifier: c2lM+O6EiM67944F6txmkVbPIc3dmqFLxuZ4Zo0PqPo=
Subject key identifier: 9A:1B:38:36:E2:66:08:F7:46:D2:E2:45:9C:8A:8B:AB:D8:67:90:74
Authority key identifier: 70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76
Certificate issuer: /CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
Certificate serial: 019A29672BFD5E3034528B21CBDF52582176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 06:00:18 +0000
Manifest this update: Tue 28 Oct 2025 06:00:18 +0000
Manifest next update: Wed 29 Oct 2025 06:00:18 +0000
Files and hashes: 1: cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl (hash: iUZ0DqTFoy/2PSpwB8IdyVUH0No1mr+9b5gIfldXt6A=)
2: hR1_ZEXfbdX4pGc2ctPKXHrqf78.roa (hash: ObK4r8CGHqPQX4CfItMJydsCSmFEvL3F0L64naX6VJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:2b:fd:5e:30:34:52:8b:21:cb:df:52:58:21:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
Validity
Not Before: Oct 28 06:00:18 2025 GMT
Not After : Oct 29 06:00:18 2025 GMT
Subject: CN=9a1b3836e26608f746d2e2459c8a8babd8679074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:69:88:70:df:29:f7:d4:0f:2c:e0:25:bb:
03:ad:85:12:e9:c6:85:07:37:55:18:ac:00:86:d6:
e4:f2:06:e1:10:b9:3f:97:f4:3c:48:59:e3:59:89:
a5:3a:e3:a0:23:e2:fe:51:56:c5:fe:98:ab:ba:7d:
f9:d3:d8:a6:4f:f2:e5:17:52:db:b3:b3:ed:e2:ec:
73:c7:38:f9:30:70:6c:54:9f:05:9c:eb:aa:b2:dd:
7e:d5:e7:9b:0b:be:01:0a:b1:17:d0:c3:39:6a:39:
d2:15:d1:f8:f1:85:12:2b:15:8c:ef:6f:10:e8:9c:
a6:58:47:4b:a1:50:71:d1:4a:62:27:e3:29:58:d7:
fe:b4:a9:ae:88:1c:3e:43:69:8b:b0:02:c0:c5:31:
43:48:99:14:cc:49:23:8e:81:67:06:ea:81:bd:69:
56:67:de:4f:99:26:50:d8:34:1e:38:97:aa:cf:8f:
46:1e:7f:95:63:6c:b5:71:14:5a:14:9b:15:d8:3e:
2b:eb:72:98:aa:f5:3d:fa:ef:10:0a:bd:aa:24:af:
48:d6:28:6c:b7:68:16:d1:d3:6c:03:c2:df:4e:41:
cd:4f:01:39:6d:a4:5e:29:6e:da:76:13:d8:bf:f6:
5d:4d:cb:66:a6:a4:78:17:45:e7:10:70:bf:16:0a:
62:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1B:38:36:E2:66:08:F7:46:D2:E2:45:9C:8A:8B:AB:D8:67:90:74
X509v3 Authority Key Identifier:
keyid:70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:90:70:0d:bd:59:5b:e9:49:83:2b:a5:19:92:33:f2:4f:99:
2d:9b:03:22:99:63:c0:17:0a:b0:89:8a:4c:76:39:3f:4c:92:
d7:ff:63:a6:5d:45:ba:50:0f:72:be:90:ef:99:83:b8:fe:b6:
f3:95:74:65:51:e7:73:58:65:26:c8:df:7e:9d:a3:74:72:9c:
29:de:ba:ff:5b:88:f8:c0:0b:8c:fe:0e:94:db:ce:3d:bb:3c:
bb:79:87:79:61:a7:3a:81:e7:31:da:2c:22:e8:1f:70:89:5b:
82:5e:72:66:74:7b:79:b8:fe:93:7b:34:7b:de:a2:f9:6e:ea:
fa:5d:bd:32:9c:ad:fd:b1:27:c9:d7:b3:c2:6d:13:d5:5e:c5:
70:18:28:1a:31:0e:0d:4a:30:c8:bc:6d:20:cd:e4:01:0f:7f:
bc:69:15:7a:78:c6:67:88:49:12:26:cd:44:ea:af:d2:84:9d:
2e:7f:2c:83:f5:2d:ec:52:e4:b5:f3:06:ea:c7:61:68:fe:d2:
96:8e:34:ec:f4:10:2c:05:34:5b:0f:a8:f1:82:39:95:e9:74:
79:80:4c:72:2a:23:60:e4:34:6a:36:ba:ab:d2:eb:0e:9f:64:
60:c5:87:8c:67:2b:6b:b9:97:19:9b:74:fd:2b:d1:da:45:40:
fb:95:c5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:13:00 2025 by rpki-client