Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
File: _COczybqOCV6B9QJT6bXCyaWn7k.mft (raw, json)
Hash identifier: EdbW2/NKI94D9AH0L0kYOubYD5lCTikENPWjR9v8eeU=
Subject key identifier: 30:DD:00:20:B4:C3:0F:87:8B:78:4A:EF:11:CA:EA:D3:A3:C2:55:FE
Authority key identifier: FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
Certificate issuer: /CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Certificate serial: 019A729391EBDFF5364C2C2B8EC5D807CF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
Manifest number: 0558
Signing time: Tue 11 Nov 2025 11:01:04 +0000
Manifest this update: Tue 11 Nov 2025 11:01:04 +0000
Manifest next update: Wed 12 Nov 2025 11:01:04 +0000
Files and hashes: 1: 8b2MYp-hkoi3xWAERwOdBetyEr0.roa (hash: xdjzN/dKBz+p1uPtY9z1q8M+hEUT4eY7/Ecx7N8LfC8=)
2: _COczybqOCV6B9QJT6bXCyaWn7k.crl (hash: LMGs+1FpKznnJG24m5D2Bd2V15ShsDz4gzFzrnpLlqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:91:eb:df:f5:36:4c:2c:2b:8e:c5:d8:07:cf:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Validity
Not Before: Nov 11 11:01:04 2025 GMT
Not After : Nov 12 11:01:04 2025 GMT
Subject: CN=30dd0020b4c30f878b784aef11caead3a3c255fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:16:fb:b6:ba:a5:9f:98:4b:65:52:41:6a:
cf:79:84:21:59:48:23:dc:92:cb:88:cc:8d:1e:7c:
c2:30:4c:97:95:b1:64:6b:60:e7:05:91:13:42:e2:
f8:20:55:84:c4:9c:28:6f:cf:6d:94:55:f6:06:17:
2b:06:a7:74:0e:3d:3e:29:c0:8f:6f:df:7c:a2:49:
ab:0e:72:5b:ad:00:16:45:48:57:ee:36:a4:4a:0f:
d9:a4:5d:a0:f3:2d:2a:f7:8e:33:82:b0:82:cf:2c:
9d:4c:6d:a6:42:5c:9f:a1:43:10:98:0e:68:5f:d7:
1c:9a:d3:fd:1a:5c:35:69:8c:8a:97:22:bb:70:f4:
87:eb:3c:ac:a4:23:ef:74:80:7d:a2:5d:13:c9:d4:
03:09:29:f4:8b:ac:b6:8c:50:16:5e:79:54:fb:a9:
ec:58:f6:eb:91:fd:0b:5c:95:1d:9b:64:f9:71:b3:
6f:5d:40:5d:6b:93:10:ca:96:78:77:c1:f5:aa:cf:
49:51:10:6c:eb:6f:5c:49:3c:86:1d:de:9d:e0:da:
50:13:e1:e5:19:d4:90:ef:48:39:39:e1:a1:09:2f:
92:7a:83:49:df:2c:24:32:53:00:c3:61:c0:84:be:
8b:c3:b8:c8:71:a6:87:b1:a7:0d:c8:5a:af:99:73:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DD:00:20:B4:C3:0F:87:8B:78:4A:EF:11:CA:EA:D3:A3:C2:55:FE
X509v3 Authority Key Identifier:
keyid:FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7f:77:65:8a:d5:0a:dd:e9:a5:ec:fc:5d:00:de:a9:7b:be:
96:04:f7:f2:ef:38:85:6e:01:9e:7c:1a:7a:44:ae:5c:b5:42:
3f:84:71:b0:bf:db:a3:5a:7a:4f:6b:50:cc:1c:72:9c:0e:40:
aa:7a:68:48:7a:8f:d5:29:76:d9:b4:7e:6b:12:1d:23:9b:e3:
38:2f:27:76:29:3e:2b:fe:ce:92:28:0d:e5:4f:d8:15:2b:1e:
82:24:e9:ea:29:a5:82:e1:09:6e:f8:b4:22:d1:91:07:43:4f:
e3:d9:3f:90:f1:dd:41:81:97:82:97:95:06:ec:83:0b:cc:85:
92:bc:58:a0:c5:63:32:11:c5:2b:7e:31:34:69:f4:8f:fe:92:
d3:f1:06:a5:96:1f:b8:88:d8:71:71:84:c6:ca:52:0a:2c:62:
48:74:df:13:c1:ac:49:a6:2d:37:ec:69:60:d8:2a:26:d0:b5:
30:bf:f6:94:1c:c0:df:9c:16:cb:7d:ce:58:32:f7:b2:66:2a:
34:23:11:2f:50:19:83:5c:11:75:a8:34:3e:1f:c0:34:61:b2:
c7:57:1f:1f:2c:d0:39:fa:8e:70:ae:b0:81:b8:77:66:66:64:
d9:34:6c:48:6f:e3:fa:a9:12:56:aa:db:f5:0b:8f:7f:7c:ee:
e1:96:76:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:03 2025 by rpki-client