Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: fs8VTPiJQJiC8724/dC6XcWRt7CGHkVoHk4BbhWWmQ4=
Subject key identifier: 07:ED:04:3A:EA:BB:B8:99:36:45:42:AA:25:0D:81:44:A6:B3:E4:9D
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 01965492AD7F0D9EF0DC0CEECA07D66B5F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 0CA4
Signing time: Sun 20 Apr 2025 19:00:20 +0000
Manifest this update: Sun 20 Apr 2025 19:00:20 +0000
Manifest next update: Mon 21 Apr 2025 19:00:20 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: 1Bpy2YSh43wTE2h3qv3WT0WoMnQCzx8gwzYDvz/l01c=)
2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:ad:7f:0d:9e:f0:dc:0c:ee:ca:07:d6:6b:5f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Apr 20 19:00:20 2025 GMT
Not After : Apr 21 19:00:20 2025 GMT
Subject: CN=07ed043aeabbb899364542aa250d8144a6b3e49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:68:35:70:42:52:f2:95:00:ba:d4:8d:48:
59:0f:b2:3b:7d:9a:56:bb:a5:48:c7:1d:5b:07:ef:
34:7f:39:a0:1c:bf:94:4d:ec:31:a1:2a:ad:85:f8:
41:84:37:9c:d1:2f:8c:87:4e:56:8d:97:f4:14:13:
d9:e7:3c:4c:bf:9d:dc:e0:ed:95:9a:2d:b8:a7:08:
96:ed:2a:09:bf:29:a2:c7:13:4a:e6:b5:81:8a:a1:
76:06:18:e8:d8:5b:b7:47:2d:5a:41:32:ed:33:d4:
64:35:83:68:51:12:47:f0:7f:9c:1a:eb:89:3a:1b:
41:26:d5:af:3f:40:b4:4e:59:37:45:57:c0:a8:04:
bd:d2:db:9c:5f:26:7c:e8:c7:48:c7:79:12:2a:76:
a0:42:d5:e6:06:ec:10:3a:24:09:d6:b6:40:8a:20:
dc:1b:83:a8:7b:00:95:5c:cc:fe:56:0d:5d:26:0b:
5a:70:da:be:03:ae:00:33:99:b5:74:11:d4:8c:f4:
22:9e:8c:a9:4d:ab:59:07:cc:2e:eb:88:78:d4:25:
16:91:4a:47:40:55:36:55:a8:4e:08:1a:ba:27:60:
ab:50:f8:72:0b:8b:d5:84:33:d1:22:a0:f5:8d:c8:
fc:46:dd:a7:5d:80:4d:01:e9:3a:9d:38:6f:b1:16:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:ED:04:3A:EA:BB:B8:99:36:45:42:AA:25:0D:81:44:A6:B3:E4:9D
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7f:c6:80:67:57:10:b9:56:b8:95:f2:90:81:fc:bb:60:3c:
1c:e5:a3:e6:3d:60:c8:f0:21:11:6a:c1:50:67:05:b5:94:90:
bb:39:cc:5e:d8:9f:44:f5:a3:8f:57:1b:4c:35:39:57:ac:b4:
03:b7:7e:fa:b6:85:f0:c5:6a:85:41:46:71:bb:e1:ff:56:91:
e8:c6:a2:06:b0:67:e8:cc:96:99:da:61:f2:c5:8e:e6:b1:ca:
bd:6c:da:56:de:1f:c8:9a:cc:e2:e5:ac:74:1d:f5:65:86:80:
93:09:4b:a9:93:8a:a9:e9:78:15:f3:fe:2d:0b:71:ab:80:61:
5b:66:3f:62:79:87:aa:48:71:48:74:5d:ae:4b:ea:be:70:f0:
62:f4:13:69:6f:86:59:a6:3a:3c:05:c7:bf:b2:c9:bb:b2:ba:
5e:91:47:96:ba:f4:1b:e5:26:62:57:d3:78:cc:ad:06:99:12:
ae:5d:be:a7:a2:d4:47:0b:c9:7f:f1:90:14:ee:5f:56:e5:4b:
f6:32:65:4a:7f:5f:4c:34:c4:32:ba:b0:ce:f0:8f:03:9c:52:
b9:0c:5f:e0:ab:6a:57:81:10:91:02:3a:4d:9f:f7:a8:f2:bc:
66:92:5b:85:f0:cc:55:3b:3a:2b:a6:a1:bf:41:52:c5:3d:35:
9d:01:94:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkq1/DZ7w3AzuygfWa19sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2EzMTNjZTM0NGQ3YTFmZGU2NWJjNGE0MzIxOWEwYjM3
NjEyMGMwHhcNMjUwNDIwMTkwMDIwWhcNMjUwNDIxMTkwMDIwWjAzMTEwLwYDVQQD
EygwN2VkMDQzYWVhYmJiODk5MzY0NTQyYWEyNTBkODE0NGE2YjNlNDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprVoNXBCUvKVALrUjUhZD7I7fZpW
u6VIxx1bB+80fzmgHL+UTewxoSqthfhBhDec0S+Mh05WjZf0FBPZ5zxMv53c4O2V
mi24pwiW7SoJvymixxNK5rWBiqF2Bhjo2Fu3Ry1aQTLtM9RkNYNoURJH8H+cGuuJ
OhtBJtWvP0C0Tlk3RVfAqAS90tucXyZ86MdIx3kSKnagQtXmBuwQOiQJ1rZAiiDc
G4OoewCVXMz+Vg1dJgtacNq+A64AM5m1dBHUjPQinoypTatZB8wu64h41CUWkUpH
QFU2VahOCBq6J2CrUPhyC4vVhDPRIqD1jcj8Rt2nXYBNAek6nThvsRajrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAftBDrqu7iZNkVCqiUNgUSms+SdMB8GA1UdIwQY
MBaAFJnKMTzjRNeh/eZbxKQyGaCzdhIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMt
ZTg2MDQ0Mzk0MDdmLzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMtZTg2MDQ0Mzk0MDdm
LzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKH/GgGdX
ELlWuJXykIH8u2A8HOWj5j1gyPAhEWrBUGcFtZSQuznMXtifRPWjj1cbTDU5V6y0
A7d++raF8MVqhUFGcbvh/1aR6MaiBrBn6MyWmdph8sWO5rHKvWzaVt4fyJrM4uWs
dB31ZYaAkwlLqZOKqel4FfP+LQtxq4BhW2Y/YnmHqkhxSHRdrkvqvnDwYvQTaW+G
WaY6PAXHv7LJu7K6XpFHlrr0G+UmYlfTeMytBpkSrl2+p6LURwvJf/GQFO5fVuVL
9jJlSn9fTDTEMrqwzvCPA5xSuQxf4KtqV4EQkQI6TZ/3qPK8ZpJbhfDMVTs6K6ah
v0FSxT01nQGU4Q==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:13 2025 by rpki-client