Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: MxLYK4zZ3ni+F0r5D8Oezo2nBEemhWnYCRik6esOq+4=
Subject key identifier: 7D:AF:F3:3A:81:A7:82:F4:82:23:2B:A4:87:90:51:F9:F5:2C:E5:EE
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 019A1B74B39BC076FD546C6A84EEE6B03AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0C72
Signing time: Sat 25 Oct 2025 13:00:24 +0000
Manifest this update: Sat 25 Oct 2025 13:00:24 +0000
Manifest next update: Sun 26 Oct 2025 13:00:24 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: XFAFbcmZGXJ5aKG9yUKZahlFjKF6wW1UWWSJCkGVmck=)
2: Uj6BezAzB94GByjzrVUNlk0ht78.roa (hash: dN/7lNPFzPzip+lXMHPQrtHop8fW612WIaM/9STYSBo=)
3: i6d_wSF6B7XpMiMocY9g5Bflzus.roa (hash: Ie39FF54w1T4xPfnonYM6fmqfVN96lUmKfBb590VzVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:74:b3:9b:c0:76:fd:54:6c:6a:84:ee:e6:b0:3a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Oct 25 13:00:24 2025 GMT
Not After : Oct 26 13:00:24 2025 GMT
Subject: CN=7daff33a81a782f482232ba4879051f9f52ce5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:7d:93:17:a6:c9:d9:d5:17:fb:48:a8:7f:
34:3c:94:2b:2f:c6:13:63:b4:18:e5:b0:ee:40:b7:
31:59:ff:e0:20:12:f2:28:61:94:2c:e1:45:51:a7:
9e:55:0e:7e:68:f0:45:19:f0:c0:01:91:2b:03:67:
bc:0b:37:19:90:9d:27:84:6c:11:f9:83:9e:79:c3:
81:81:65:7f:b5:ba:3c:ec:7c:44:59:0f:55:a5:d7:
0f:c1:50:7d:c3:04:88:86:99:9c:77:cf:d0:f0:13:
48:ff:bb:14:e7:0c:d0:2d:a3:cd:b8:6b:33:2a:86:
9e:2e:23:f7:e6:d3:d9:ff:96:d4:ab:4d:d2:d2:27:
a4:78:a3:6c:b4:f8:15:41:5f:a5:1e:bb:f1:f9:f9:
9d:4f:a0:dc:d3:88:03:a6:f8:d7:30:95:ec:e1:15:
b7:e9:ab:2a:d6:ac:c8:c4:93:a4:b7:54:7b:80:82:
13:ac:3a:16:ea:04:14:1f:13:c8:77:ec:e4:40:01:
00:28:8b:41:53:78:19:46:85:2f:83:79:7e:61:6c:
50:3d:51:43:bb:f7:bb:2e:9e:0f:57:01:20:c1:26:
6a:aa:38:49:40:6a:26:50:87:98:36:51:10:ba:0d:
c5:5b:42:18:fc:14:04:1d:1d:42:67:45:d4:07:73:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AF:F3:3A:81:A7:82:F4:82:23:2B:A4:87:90:51:F9:F5:2C:E5:EE
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cf:0c:52:58:51:68:3b:d8:ce:a7:de:46:1f:db:e0:9e:3d:
0d:ab:c9:f0:3b:96:11:54:bf:a5:0e:22:86:36:f1:d4:e0:41:
2a:70:f4:72:59:ab:de:c1:fe:15:99:cc:d0:e0:07:51:e7:69:
83:b7:45:9c:0c:56:22:e7:d7:86:79:7e:5d:30:88:c6:73:82:
b8:8a:74:63:a0:7f:5e:b9:4f:3a:02:2e:c5:1c:e0:e6:50:ab:
ff:c4:42:e5:39:4a:f2:a1:90:1b:5c:10:85:7c:e5:c2:00:f1:
4f:93:c2:08:d7:cd:29:14:8e:3d:66:f2:95:a2:c7:32:73:7e:
eb:24:e0:df:4c:c6:72:90:70:81:8f:b0:54:4e:9a:8d:b9:63:
20:20:c1:87:3c:d0:16:68:c1:ef:f7:ac:fe:bc:c6:27:a8:98:
2c:3c:85:cf:bc:b2:36:c9:e6:7e:d3:30:da:b5:13:eb:b1:fb:
a9:e6:bd:bd:75:d8:7d:75:6d:62:7b:89:d1:35:49:3c:88:46:
f4:a2:85:69:34:16:b3:55:68:04:e5:c2:cc:50:06:eb:15:3f:
67:fc:e1:92:b0:67:d0:27:f0:b9:74:55:22:5d:59:31:db:10:
01:75:13:a4:e6:80:c7:54:dc:8c:44:7a:00:6a:32:ba:5e:cc:
14:fa:b3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 16:24:33 2025 by rpki-client