Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
File: Co59_NIAyF6zysZvhZtxEKuZsQo.mft (raw, json)
Hash identifier: GD61+AA6iY0usi6iWUlPXZBLiQUdOil2582zp/JFPFQ=
Subject key identifier: 21:51:8A:83:24:23:0B:69:9E:4E:A8:71:00:11:BB:3A:41:B2:5F:E4
Authority key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
Certificate issuer: /CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Certificate serial: 019A73382DD51A01FEE3E14F45707E43E1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
Manifest number: 0403
Signing time: Tue 11 Nov 2025 14:00:52 +0000
Manifest this update: Tue 11 Nov 2025 14:00:52 +0000
Manifest next update: Wed 12 Nov 2025 14:00:52 +0000
Files and hashes: 1: Co59_NIAyF6zysZvhZtxEKuZsQo.crl (hash: K9aU19yivjx6vd2UY/zPIC45xA8+duTcDwvpKkqFOao=)
2: ZnFCz6rKLcZRx4oWRqGX1WP5row.roa (hash: Fg68tw9/QoQIkz8jU0UgngyMGnhnkYCZ0zRagw9xxDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:2d:d5:1a:01:fe:e3:e1:4f:45:70:7e:43:e1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Validity
Not Before: Nov 11 14:00:52 2025 GMT
Not After : Nov 12 14:00:52 2025 GMT
Subject: CN=21518a8324230b699e4ea8710011bb3a41b25fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:c7:07:58:9c:b0:c0:14:54:aa:da:52:99:
51:2c:45:ad:2c:51:d9:38:7b:99:94:bb:0d:8a:92:
d0:e3:3f:61:58:aa:7c:e9:fc:c0:4e:67:3a:67:d8:
bc:02:b2:20:f4:a7:63:91:eb:19:b3:b1:f2:1d:61:
3d:9c:94:4e:2d:c2:23:e9:33:17:3a:e1:91:5c:32:
a8:8b:31:82:75:93:58:ac:d0:c6:82:4f:cd:67:43:
5f:e9:c4:32:39:af:c0:f7:07:8d:cb:d5:06:34:62:
b7:91:09:f8:45:0a:63:dc:46:79:ac:32:02:d0:47:
a8:cb:02:24:23:4c:86:1f:68:1d:76:3d:f9:bd:75:
e5:5f:8b:be:db:d1:64:1a:f1:70:65:e4:4d:16:e0:
25:be:c2:2f:a1:5f:a3:bd:77:b2:cd:d8:05:fa:23:
82:db:23:27:0a:ff:37:79:3a:84:99:22:1b:28:e9:
33:a0:f9:1a:cd:dd:66:0f:63:03:85:be:63:22:d8:
cf:12:f5:60:d2:47:61:a0:09:e3:da:f3:e8:65:81:
20:05:d0:77:36:e6:93:9d:ef:80:79:0b:6b:54:62:
ea:35:37:86:7a:74:57:0d:ea:75:55:19:2a:e3:1b:
f2:12:79:e9:d4:c9:d8:ec:15:78:ff:61:bf:41:36:
da:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:51:8A:83:24:23:0B:69:9E:4E:A8:71:00:11:BB:3A:41:B2:5F:E4
X509v3 Authority Key Identifier:
keyid:0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:64:29:92:31:1b:ba:c5:75:de:c9:63:cb:85:5f:c3:19:80:
c2:37:7c:96:45:b8:9c:89:83:fe:c2:84:87:da:4d:e0:16:dd:
03:17:1c:28:f7:12:5e:36:d2:46:b7:11:c3:63:f0:2c:44:26:
a4:c3:88:43:cb:cc:32:1b:18:ee:d5:cd:31:c3:f4:17:fe:7c:
cf:1d:cc:dc:e3:9e:d8:99:7a:69:c1:ea:58:e4:ae:8a:98:55:
51:0a:be:e2:c4:98:1a:6c:d9:ee:31:94:74:1c:48:f6:d8:d1:
0e:31:a5:48:b7:bd:57:03:02:5e:f8:f6:a2:d2:84:9f:f6:a9:
cf:48:ac:97:bf:f4:8f:2d:52:fd:23:ab:80:c3:f5:9a:79:97:
5e:57:23:40:07:f6:a8:01:ff:82:9e:6e:ad:bd:5a:81:62:eb:
d0:f4:96:fd:81:ac:94:ab:87:01:ed:e2:dd:fc:c2:6a:2c:0d:
d0:d9:50:3e:94:93:c6:43:79:45:cc:71:1b:04:64:8e:b0:10:
d1:45:34:42:17:35:6f:ef:c8:05:ee:62:ff:aa:36:67:1f:a1:
d2:69:52:65:28:4d:59:e6:cd:de:79:65:12:e9:68:44:42:cc:
f5:be:c0:5c:a1:0c:78:90:8a:87:60:80:4a:f8:f8:e9:cf:22:
6b:89:54:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOC3VGgH+4+FPRXB+Q+HxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOGU3ZGZjZDIwMGM4NWViM2NhYzY2Zjg1OWI3MTEwYWI5
OWIxMGEwHhcNMjUxMTExMTQwMDUyWhcNMjUxMTEyMTQwMDUyWjAzMTEwLwYDVQQD
EygyMTUxOGE4MzI0MjMwYjY5OWU0ZWE4NzEwMDExYmIzYTQxYjI1ZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVbHB1icsMAUVKraUplRLEWtLFHZ
OHuZlLsNipLQ4z9hWKp86fzATmc6Z9i8ArIg9KdjkesZs7HyHWE9nJROLcIj6TMX
OuGRXDKoizGCdZNYrNDGgk/NZ0Nf6cQyOa/A9weNy9UGNGK3kQn4RQpj3EZ5rDIC
0EeoywIkI0yGH2gddj35vXXlX4u+29FkGvFwZeRNFuAlvsIvoV+jvXeyzdgF+iOC
2yMnCv83eTqEmSIbKOkzoPkazd1mD2MDhb5jItjPEvVg0kdhoAnj2vPoZYEgBdB3
NuaTne+AeQtrVGLqNTeGenRXDep1VRkq4xvyEnnp1MnY7BV4/2G/QTba7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFRioMkIwtpnk6ocQARuzpBsl/kMB8GA1UdIwQY
MBaAFAqOffzSAMhes8rGb4WbcRCrmbEKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wZjllZmYtYjYwOC00MWRmLTkxZDQt
YTQ3ZWI5MzI5NTk3LzEvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wZjllZmYtYjYwOC00MWRmLTkxZDQtYTQ3ZWI5MzI5NTk3
LzEvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2QpkjEb
usV13sljy4VfwxmAwjd8lkW4nImD/sKEh9pN4BbdAxccKPcSXjbSRrcRw2PwLEQm
pMOIQ8vMMhsY7tXNMcP0F/58zx3M3OOe2Jl6acHqWOSuiphVUQq+4sSYGmzZ7jGU
dBxI9tjRDjGlSLe9VwMCXvj2otKEn/apz0isl7/0jy1S/SOrgMP1mnmXXlcjQAf2
qAH/gp5urb1agWLr0PSW/YGslKuHAe3i3fzCaiwN0NlQPpSTxkN5RcxxGwRkjrAQ
0UU0Qhc1b+/IBe5i/6o2Zx+h0mlSZShNWebN3nllEuloRELM9b7AXKEMeJCKh2CA
Svj46c8ia4lU8w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:46 2025 by rpki-client