Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier: Cz8kKrmUyM6Fqrshl2cGIHZ9/Cs07upktS9AYplhtUc=
Subject key identifier: C0:69:8B:06:8D:A6:49:D7:A1:92:40:2F:28:30:12:34:77:F4:61:67
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial: 019936F0C4B0F12E26A9AF4334D20002129F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number: 160E
Signing time: Thu 11 Sep 2025 04:02:52 +0000
Manifest this update: Thu 11 Sep 2025 04:02:52 +0000
Manifest next update: Fri 12 Sep 2025 04:02:52 +0000
Files and hashes: 1: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: 1qs3eOyUMY91Nsrlx/+BSRudh38EJIzSIBKvb0sdeEs=)
2: wZl766gEgIlD1PBWErT8JXtbQ6E.roa (hash: GJKy6CeHDJyN+o1oRpRHchOhI0KPIFrY454WKeTW5CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:f0:c4:b0:f1:2e:26:a9:af:43:34:d2:00:02:12:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Validity
Not Before: Sep 11 04:02:52 2025 GMT
Not After : Sep 12 04:02:52 2025 GMT
Subject: CN=c0698b068da649d7a192402f2830123477f46167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:11:95:14:98:d1:41:a7:ae:d4:b7:aa:e5:
1a:1a:4e:b5:5f:12:e6:e3:d2:36:d6:de:09:93:8d:
19:92:09:e2:e2:51:07:37:14:24:db:ae:67:9d:1a:
9a:47:ad:bc:e4:8c:53:32:27:d5:5e:de:5c:1e:2b:
bb:08:af:37:01:47:45:cb:36:34:1f:af:a7:86:d6:
eb:b6:f4:16:29:4a:58:e1:b2:6a:eb:5f:c7:1d:0e:
61:5b:49:4d:53:ac:0b:b4:f9:92:75:46:8a:ec:95:
a2:31:16:ba:c1:ed:f7:a3:4e:6a:f9:da:93:3f:62:
b3:d9:9f:4e:bf:57:ac:16:0d:80:4b:63:af:94:45:
39:58:3e:5e:47:a8:2f:61:71:18:25:b5:ce:09:3a:
8f:7a:7c:94:a1:ed:84:3d:25:1c:80:7d:cb:57:14:
71:55:4b:14:c7:8c:d6:8d:f6:d7:8d:37:4f:f4:02:
a1:fc:fd:33:5c:72:01:b6:c7:d2:dc:f4:9f:ae:88:
3b:65:b1:8f:f6:d2:08:c0:2b:ce:f9:48:67:ca:0d:
56:77:93:48:1b:a2:5e:7a:75:83:08:cc:50:00:7c:
27:8c:84:ca:6f:60:6d:a1:97:9a:4b:6a:01:42:13:
37:87:7d:fb:fc:6d:c1:3e:15:39:cd:24:6d:a1:70:
b6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:69:8B:06:8D:A6:49:D7:A1:92:40:2F:28:30:12:34:77:F4:61:67
X509v3 Authority Key Identifier:
keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d0:e3:01:e3:58:6c:70:fc:3e:37:26:72:f4:a3:64:41:6d:
a3:2f:da:61:9c:de:cf:97:6a:11:b7:0d:69:f7:28:d9:7f:1b:
fa:98:54:f3:7b:52:d5:75:1f:cc:91:cb:91:35:3a:af:dc:3f:
1b:fa:9c:db:4a:0d:48:bb:c9:64:a1:a4:76:57:b1:47:8a:2b:
e3:ad:e6:e2:86:b5:9e:c4:e0:67:a8:9d:31:dc:d4:b9:1d:92:
dd:b5:41:d6:d4:8a:63:6d:98:78:8d:21:c6:5d:a3:1f:99:87:
93:14:d3:1d:21:88:bb:47:ce:dc:5f:df:6b:0c:9c:ae:e0:3e:
d4:e6:a6:92:83:7b:8d:69:21:ce:68:04:77:49:46:9a:44:e5:
8c:cd:96:d6:06:af:6b:b3:53:04:20:eb:87:fc:be:98:6a:88:
bb:e1:ba:1d:cd:d9:ce:f2:2c:63:32:67:ff:fe:1b:8e:b5:1a:
45:80:aa:bd:18:a4:03:5a:39:0d:47:34:98:23:99:2e:13:d6:
51:18:0e:3f:e2:ad:38:5e:5f:d2:38:9a:1a:85:d7:53:e9:df:
1d:9c:a8:a6:ef:31:17:f6:ba:85:a4:1b:12:61:d4:73:6c:d8:
ae:43:18:88:4c:bf:ed:b9:34:81:af:24:0a:40:08:c3:f6:40:
14:b3:c1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:43:16 2025 by rpki-client