Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: uVy0LD3BVtsGI1fXO37Qa/893Z3PDV5IFQIVNxuzg7U=
Subject key identifier: 68:E5:89:6B:FB:FF:6C:49:C9:CA:79:A2:E5:C7:DE:21:5B:68:2D:4C
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 019936EE6992DD4B7E11592C11A661752EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 119C
Signing time: Thu 11 Sep 2025 04:00:18 +0000
Manifest this update: Thu 11 Sep 2025 04:00:18 +0000
Manifest next update: Fri 12 Sep 2025 04:00:18 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: VbOnb93iMZvHQdMVefyTDUfDF8m8uVCgzLT8O1NSeO0=)
2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:69:92:dd:4b:7e:11:59:2c:11:a6:61:75:2e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Sep 11 04:00:18 2025 GMT
Not After : Sep 12 04:00:18 2025 GMT
Subject: CN=68e5896bfbff6c49c9ca79a2e5c7de215b682d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c2:3d:eb:53:db:24:10:1c:90:a2:e6:c2:bc:
10:99:4f:09:b8:67:86:40:65:17:99:5c:64:75:45:
74:5b:0d:64:3e:4a:5a:2a:e3:d4:38:45:c1:80:f5:
43:d2:1d:1d:ed:c3:e8:c8:59:11:25:4a:ef:fe:ef:
43:53:e3:eb:d6:0a:53:f7:b2:1b:91:34:37:57:0b:
61:cf:d3:15:be:44:3d:2b:bf:a9:7f:db:3f:eb:41:
f8:ee:b5:74:57:92:08:7b:8e:b7:08:b4:71:83:af:
1c:48:9b:f5:5d:28:15:2f:20:ba:a1:96:4a:35:ba:
74:9e:b3:32:c4:52:74:40:5f:f9:2b:98:59:de:6f:
8a:e1:39:35:61:9e:bf:e8:14:17:cb:13:66:a3:19:
7c:f0:5b:f2:f1:14:e7:8e:93:f6:07:bf:33:c3:bb:
ee:10:5e:e6:ea:a2:5b:61:9f:45:eb:4e:a9:af:73:
cc:18:90:13:d0:34:8a:93:f3:97:b3:6d:2d:43:24:
1a:d4:5e:52:eb:e7:a6:c0:fc:27:31:bb:15:d3:e1:
32:8a:e3:7e:54:8d:1c:23:f9:e8:19:d9:7e:be:2d:
b3:20:64:b4:91:7b:5d:ee:a1:6b:27:50:cd:66:fb:
3c:1f:9a:2c:f5:00:d5:b6:6e:7a:86:ce:97:36:67:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E5:89:6B:FB:FF:6C:49:C9:CA:79:A2:E5:C7:DE:21:5B:68:2D:4C
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5b:78:fc:e0:29:ad:6d:e1:3d:15:3c:62:fc:e6:20:62:9f:
7a:87:ff:b0:45:f6:4f:34:c7:e2:59:b6:70:a7:9b:3a:c1:38:
b4:29:9f:58:e0:e8:b8:32:44:13:ea:9d:e4:76:43:77:70:74:
e5:5c:ec:49:91:e3:b9:19:e1:7e:49:b7:7a:d9:ab:2f:ab:6d:
49:b4:fc:87:87:ba:71:cf:9f:7e:bb:52:03:70:3f:34:55:cf:
9f:e7:7c:fa:99:40:c7:5b:60:db:f2:ae:c6:75:c3:76:7f:3d:
a7:ec:8c:92:c5:d6:9b:2b:4b:df:84:d7:49:59:d9:39:00:7b:
64:20:67:8d:bb:7b:1c:a6:b5:e4:a2:53:c0:28:f5:84:01:ef:
5c:31:b1:d7:7b:97:64:41:b7:f5:95:17:56:db:9e:56:18:f5:
1c:3d:57:0c:f4:b7:0f:fb:2d:90:c3:66:39:8e:a3:63:56:81:
f3:52:eb:ab:7f:bc:92:b3:52:59:e4:ee:79:0d:d6:4f:de:dc:
3c:90:2d:bd:4e:cd:0c:c1:cd:d2:d2:29:63:0c:b0:d6:92:46:
d4:a6:27:d0:9b:09:e3:fb:92:ca:da:14:99:32:52:c9:9b:e3:
5b:5a:29:97:18:25:c5:de:f9:23:8a:f1:dd:72:a6:4a:2c:89:
16:8c:e3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:49:58 2025 by rpki-client