Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
File: _COczybqOCV6B9QJT6bXCyaWn7k.mft (raw, json)
Hash identifier: I21Tzqs6OmD3l2RpkLq0IwcssnHZ34E3jq/Xt26r9RY=
Subject key identifier: 59:80:97:15:52:64:51:C4:84:C4:EC:AC:F4:FD:AB:62:0B:89:28:58
Authority key identifier: FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
Certificate issuer: /CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Certificate serial: 0199228C811D0BEADF486F773D24C3FAC55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
Manifest number: 04AA
Signing time: Sun 07 Sep 2025 05:00:57 +0000
Manifest this update: Sun 07 Sep 2025 05:00:57 +0000
Manifest next update: Mon 08 Sep 2025 05:00:57 +0000
Files and hashes: 1: 8b2MYp-hkoi3xWAERwOdBetyEr0.roa (hash: xdjzN/dKBz+p1uPtY9z1q8M+hEUT4eY7/Ecx7N8LfC8=)
2: _COczybqOCV6B9QJT6bXCyaWn7k.crl (hash: 8AkiTqve15AfVRwflX7J/1VYZnIdkQvGZTeGCjc4rro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:81:1d:0b:ea:df:48:6f:77:3d:24:c3:fa:c5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Validity
Not Before: Sep 7 05:00:57 2025 GMT
Not After : Sep 8 05:00:57 2025 GMT
Subject: CN=59809715526451c484c4ecacf4fdab620b892858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:42:a6:ce:98:c2:e7:d9:98:f5:92:63:d0:
16:96:d9:1e:de:a4:58:b0:4a:cf:9e:72:32:81:5d:
d8:02:1c:34:7a:68:17:f2:7c:5f:e3:77:33:da:5f:
7c:7d:8a:77:6d:d1:22:d7:be:cd:fd:42:c3:6a:f7:
ff:b9:50:04:f6:b8:e3:ac:a3:fb:e0:10:08:c4:de:
3d:2f:aa:af:ed:82:fb:c3:e8:36:48:62:fd:e8:1d:
31:3b:10:fc:c2:2c:20:df:28:bf:23:5a:5a:d8:18:
6e:08:a5:b7:f2:0a:3a:48:9f:01:d9:9b:35:3d:da:
b6:2b:0a:3e:d4:8d:30:8a:f7:30:8a:ac:a1:67:82:
97:48:1b:aa:ed:d8:d8:53:72:c4:8f:c9:ab:66:29:
25:6d:bb:19:40:53:ae:db:2b:b3:f2:60:02:06:a3:
89:70:3d:c9:b2:62:20:6f:db:c7:60:00:d1:d6:81:
42:35:5c:6a:bf:1a:f1:80:c1:44:6f:e9:2d:98:84:
f1:d8:49:ca:0b:f2:57:e2:ec:13:6c:7a:e7:6c:be:
51:5c:7d:6d:9e:63:7b:53:5d:7d:76:23:9b:e6:62:
36:0b:5a:41:57:d6:6b:4b:dd:7b:22:3c:1b:24:7d:
e6:aa:ce:49:5f:6a:9d:88:4d:19:2f:ba:c0:2f:78:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:80:97:15:52:64:51:C4:84:C4:EC:AC:F4:FD:AB:62:0B:89:28:58
X509v3 Authority Key Identifier:
keyid:FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9b:d4:a0:15:72:ed:d3:15:06:59:5d:15:80:ed:43:f6:a8:
38:f5:d4:12:af:ba:09:b5:6f:b7:bf:5a:a5:f7:4f:bb:c7:bd:
bd:6f:4b:a1:2f:cd:01:ba:f0:4d:c1:98:8f:e9:31:33:eb:0a:
75:a6:af:2a:71:02:97:59:a2:43:4b:de:36:82:61:1e:63:dc:
a1:1a:08:c6:39:6e:32:11:f7:e1:29:4c:1d:bd:ac:52:14:3c:
1a:2c:7d:52:a0:a7:fd:a7:ef:04:ec:38:16:3b:70:9a:f9:5e:
bc:1d:ff:5a:c9:6b:7e:3a:1a:98:f5:76:3d:b1:4a:90:43:fa:
a2:d5:66:c4:4d:b6:a8:47:e2:58:6d:55:15:c9:80:1c:5c:86:
7f:8c:e8:43:a7:d7:90:c8:de:47:50:2b:0b:c3:ed:25:fa:db:
f2:31:f9:4d:07:37:5e:b7:05:55:1b:ba:e7:00:37:a6:97:0b:
f7:cb:f5:9a:89:3e:6c:ab:98:08:bf:9c:09:37:1a:e7:51:c3:
bb:fc:05:ed:6e:2b:09:ba:fe:60:a1:4d:db:54:46:e8:be:92:
60:61:47:8f:fd:aa:f7:0b:bf:27:d3:00:1d:b8:ed:40:6e:91:
1e:7f:34:9c:df:7b:44:f9:ab:32:33:95:73:6e:ac:5d:e9:2f:
db:d5:7c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:01 2025 by rpki-client