Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
File: CO0aVoa6aCicbP5MfDbgN63hHso.mft (raw, json)
Hash identifier: 3Hf11z3up02layq8qrlIoo6cV/WNhwkcPVIUAA8HaI8=
Subject key identifier: D0:DA:9F:2A:0B:A9:AF:BA:8E:6A:FC:17:3F:39:4C:D0:7F:18:C4:16
Authority key identifier: 08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA
Certificate issuer: /CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca
Certificate serial: 019A714A08702E264B22180E2F22C2EEB576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
Manifest number: 029E
Signing time: Tue 11 Nov 2025 05:01:08 +0000
Manifest this update: Tue 11 Nov 2025 05:01:08 +0000
Manifest next update: Wed 12 Nov 2025 05:01:08 +0000
Files and hashes: 1: CO0aVoa6aCicbP5MfDbgN63hHso.crl (hash: +yT+gX7/hgqDZDGk93jQXoX2TV8eiKAk/XylihTEdDs=)
2: XIYNgLktIjso42Y1xvc7ZQ9ush8.roa (hash: 2xDZhva1yvr4fqGcAJL4jzSvNBum97k23PuodDDKzAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:08:70:2e:26:4b:22:18:0e:2f:22:c2:ee:b5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca
Validity
Not Before: Nov 11 05:01:08 2025 GMT
Not After : Nov 12 05:01:08 2025 GMT
Subject: CN=d0da9f2a0ba9afba8e6afc173f394cd07f18c416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:d0:eb:c0:5d:77:f0:3d:4b:70:41:e3:57:
c4:00:f9:f2:a2:e1:28:56:17:a2:e1:2c:de:49:7f:
5d:f9:15:8d:8f:dd:6b:af:90:ad:89:60:22:f5:7e:
7b:c6:96:d3:a1:28:3d:7d:57:17:b0:a9:b2:16:29:
b4:06:58:3c:41:ff:f9:40:33:6d:68:41:ca:05:7e:
3a:3b:b1:a1:61:ad:82:48:6a:a8:5c:11:86:ed:d2:
e9:f2:c3:64:53:41:45:74:0f:ae:33:a4:bd:89:4d:
92:2f:a8:a2:f2:5b:39:91:52:30:54:7a:a9:77:52:
9d:48:05:72:f5:a1:96:81:36:6e:7c:9b:52:ee:0e:
85:46:b4:b7:d4:3a:ea:75:e8:9a:14:6c:9c:59:e5:
da:8d:a7:87:eb:2a:76:b6:29:2b:7f:17:09:33:0f:
3a:4e:2a:46:3c:06:86:c5:af:10:45:db:b2:99:7f:
0c:90:04:12:58:2b:7a:cd:54:c6:00:1a:6b:04:e8:
dd:cc:97:fc:83:cf:fb:c3:40:55:18:a7:1c:23:d6:
b9:92:e4:be:26:3f:35:92:4e:ec:00:fe:25:62:e9:
98:d7:0c:46:6c:77:58:9f:b4:9e:6d:7b:da:16:92:
66:a8:48:92:3a:96:a0:a3:61:96:83:8b:01:05:42:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DA:9F:2A:0B:A9:AF:BA:8E:6A:FC:17:3F:39:4C:D0:7F:18:C4:16
X509v3 Authority Key Identifier:
keyid:08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:05:29:d2:a2:b0:c4:58:01:25:45:48:63:ca:20:a6:6a:f3:
fb:e5:e8:0d:6e:34:8f:99:77:cb:1c:b4:25:35:55:af:4f:96:
8e:f6:a0:77:33:28:27:96:ce:c1:0b:30:9d:ee:06:95:1c:2d:
8e:fd:4a:bf:e1:ee:2c:b7:f5:2b:32:fc:cc:00:13:90:eb:73:
f6:88:47:74:d7:8d:a6:c2:09:50:9e:a8:d9:fd:dd:8d:f7:a2:
89:90:c8:a1:35:62:ca:91:81:34:d8:e7:e2:89:e5:55:7d:22:
07:5a:ad:ab:50:37:b7:a4:18:85:f0:ac:b5:25:8e:c6:e7:31:
b8:d8:72:44:e0:c2:8f:c8:f0:64:df:76:2f:fb:99:f0:0c:a1:
fd:fe:8e:78:7e:2a:b9:73:b5:a4:01:7d:37:fc:20:66:38:ae:
61:0d:f3:82:44:7f:da:ad:4f:88:b1:a7:a3:42:cc:c7:f8:14:
9d:33:a0:d6:e4:66:5c:2f:ce:10:65:6c:29:38:68:a9:3b:e1:
01:e6:e6:a1:9f:a9:f6:75:41:d5:ef:4f:5a:a7:43:50:78:55:
58:96:d5:a8:89:e0:d3:ca:07:3b:c5:b1:ef:03:47:db:eb:fb:
9a:19:66:51:93:1f:83:1a:c1:e7:f9:8c:81:f0:fc:3a:27:ff:
a2:6b:5a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:05 2025 by rpki-client