Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: 0NSIHlWZmSmWLe4bEeEidJ2rnwz7FVulpqcDC2vZ62o=
Subject key identifier: EF:1A:E4:E4:CC:DE:A0:20:FC:2A:C8:F0:DA:49:4D:7C:66:74:8F:DC
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 019A2F69A6790814568B8753C147CEC5F776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 0EA3
Signing time: Wed 29 Oct 2025 10:00:44 +0000
Manifest this update: Wed 29 Oct 2025 10:00:44 +0000
Manifest next update: Thu 30 Oct 2025 10:00:44 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: t5Pb6Tq7nGmvFKR3bu2enbV1VrVhXBLFamOuNhRy6gw=)
2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:69:a6:79:08:14:56:8b:87:53:c1:47:ce:c5:f7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Oct 29 10:00:44 2025 GMT
Not After : Oct 30 10:00:44 2025 GMT
Subject: CN=ef1ae4e4ccdea020fc2ac8f0da494d7c66748fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d8:b7:33:c0:59:2e:23:cf:04:26:b2:47:f8:
4d:ca:ba:7e:09:a6:d9:0e:80:04:50:ef:10:70:22:
6f:89:6f:3b:73:a2:1f:bf:c0:20:da:ea:64:7c:4f:
ab:27:57:f1:f3:91:7a:bd:91:a2:48:cb:60:9f:54:
ba:d9:e5:e0:59:a2:ef:c7:c7:93:a1:3f:6e:58:d5:
0e:02:20:80:6f:ad:7b:94:6b:2b:c5:f8:ce:7f:6c:
8d:b7:88:97:3e:c1:81:9b:6c:e0:20:38:50:65:78:
6f:eb:b9:f8:e0:7a:a5:45:38:8d:84:25:10:38:7a:
88:51:d9:d7:52:0e:e1:49:64:84:6a:74:80:d7:59:
3d:26:f6:8f:d0:c8:33:f4:bb:0e:0a:25:80:c3:bd:
a3:63:6f:2b:52:7e:1f:fd:53:30:52:20:71:c3:d4:
e5:e4:52:ea:12:66:4d:d2:82:69:5c:1b:74:8f:3a:
58:a6:6f:e6:cc:f0:0d:eb:69:8c:a0:59:21:e8:d0:
49:35:fd:f2:7e:ff:49:dc:88:e5:3d:e4:b4:22:dd:
80:f0:57:b1:80:c1:a0:53:83:d9:61:61:c5:91:d0:
9c:55:6d:01:3d:64:31:e9:a2:51:80:61:d9:4f:58:
ee:ad:9f:01:ad:d9:87:95:54:af:37:fc:11:97:01:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1A:E4:E4:CC:DE:A0:20:FC:2A:C8:F0:DA:49:4D:7C:66:74:8F:DC
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3a:d3:81:f3:c2:6e:76:09:b9:51:a9:c3:a5:af:a2:0d:d9:
b1:85:a9:32:3c:7a:a9:6d:23:f9:37:6e:22:49:2c:cd:5c:a5:
7d:cd:ff:8c:72:34:8a:63:c0:e2:ad:2a:7b:7d:c5:8a:7d:fa:
54:a3:d2:50:9b:1e:fd:54:30:9c:ab:77:2c:77:f3:c0:bb:9a:
93:c8:6f:b9:de:86:0c:06:e9:26:2b:8e:0e:85:24:9b:db:b5:
aa:c5:f8:c9:d6:10:fd:13:78:3f:40:75:82:97:14:42:82:b8:
4a:0b:f2:57:ee:0a:1b:87:a0:7b:30:2b:9d:3c:fb:93:d0:29:
e5:74:b1:b9:37:27:72:c9:a0:32:ab:f7:21:da:54:a5:1c:7e:
00:ee:76:26:75:c7:a3:1d:76:e2:51:ec:8d:94:a4:e0:0f:d1:
c4:86:8e:4b:dd:7b:27:73:d1:1e:76:ae:1b:eb:e9:c5:b1:86:
53:b5:08:a1:8c:f2:8f:95:2c:e5:df:38:39:12:ef:b4:69:ed:
6f:90:39:16:76:f5:e3:ed:1a:6e:53:37:6a:ec:8b:2c:0e:b0:
66:b8:d8:40:68:15:ea:46:c2:14:63:f6:0e:30:07:59:9d:c3:
81:a0:f4:2c:34:c9:a5:24:f9:9b:ac:af:48:09:7c:ae:6a:df:
87:32:36:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 15:48:16 2025 by rpki-client