Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
File: CcUO_hOq31QjsE8N3KizKIOVgj4.mft (raw, json)
Hash identifier: DAJ25/USsrPecSqzAiXqrY0FJCTjDxZwkczD50OSks8=
Subject key identifier: 77:7F:FE:AE:80:1D:69:15:B8:FC:BE:74:A7:10:18:DA:66:AD:C8:AD
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Certificate issuer: /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial: 0199FE7DA5A3668CA7FCB0D70525AE3BBE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 22:01:10 +0000
Manifest this update: Sun 19 Oct 2025 22:01:10 +0000
Manifest next update: Mon 20 Oct 2025 22:01:10 +0000
Files and hashes: 1: 8pbOtoickn4gngDPghS6zzsubu8.roa (hash: 2DV5k3x2c9dOCN9Cru+gCMm0tJjouTk+IFDhMI+k6C0=)
2: CcUO_hOq31QjsE8N3KizKIOVgj4.crl (hash: 5exQ2Fj5lQVQ2MAtT8C3E0edEIs0YHWdkVbS1b8pPk4=)
3: bQWTWaPJMURhOwMcF82QvoPW9eA.roa (hash: ZBXbwgCoJr1O/tkU4TQtGdf606M6fVdS5KYW5/tfGVU=)
4: e4h7xssIbvZ0s7Vw9JjG46tDvZ0.roa (hash: isku2v3Qa+kI0md0IS8QEjqPkTCho6QFnoe7uAw4O+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:a5:a3:66:8c:a7:fc:b0:d7:05:25:ae:3b:be:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Validity
Not Before: Oct 19 22:01:10 2025 GMT
Not After : Oct 20 22:01:10 2025 GMT
Subject: CN=777ffeae801d6915b8fcbe74a71018da66adc8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:cc:07:9d:99:d1:ff:98:30:c8:7d:dd:b6:
33:2b:1f:89:60:83:8b:2d:9f:c3:d0:d8:c0:85:9e:
5c:15:e5:94:67:e0:08:69:f0:0f:95:80:dc:5e:1b:
d0:f0:b9:35:e7:e3:26:82:1a:9e:32:0f:b4:aa:7f:
ce:c2:d3:de:46:89:4d:4b:dc:08:98:85:63:93:b0:
81:a4:34:5a:2c:fe:5f:f4:02:90:10:86:c1:67:14:
20:63:b8:75:f9:96:d9:a8:10:89:dc:12:d4:00:12:
cc:24:6b:56:50:1f:8c:7d:4a:c5:9f:a4:8a:32:bb:
6e:2d:c8:28:72:78:77:b9:81:b9:9e:2d:99:cf:ef:
9a:3e:07:6e:c3:bc:b0:45:ce:1b:70:cc:bc:03:23:
3f:8e:98:b7:fd:86:6b:8b:e7:17:3b:e5:5c:24:a1:
4f:b3:6b:1e:14:88:9f:b9:cf:56:45:7b:b1:c7:b8:
8c:cc:bc:4b:67:2d:af:98:10:2c:1a:90:f0:ae:5d:
c5:76:95:a7:8e:fc:97:61:6f:d0:2c:1e:fa:40:2f:
9c:90:b0:d3:3a:4b:58:47:e3:76:ce:65:1c:ea:c3:
4d:17:87:0d:8b:30:58:40:f9:33:31:29:59:5c:2a:
98:8e:16:91:97:7c:c6:8e:83:2a:05:06:42:bc:38:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7F:FE:AE:80:1D:69:15:B8:FC:BE:74:A7:10:18:DA:66:AD:C8:AD
X509v3 Authority Key Identifier:
keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:36:13:9d:24:86:2a:50:12:0d:bd:12:32:ec:f1:89:c9:93:
f8:1b:50:a1:56:cc:b7:f4:4b:0d:08:d3:e5:5f:5d:93:56:ea:
e6:b6:81:c5:e0:86:f5:97:32:69:9d:f9:cd:4e:0c:c9:55:c5:
b3:6a:78:84:46:12:bf:52:06:06:78:0c:13:1a:5b:ba:40:20:
ab:2b:cc:11:7a:3c:c4:75:bd:3e:ca:e5:23:c9:38:cd:3a:73:
b4:f9:97:37:b5:eb:b4:53:83:79:23:ea:21:b2:a8:5d:95:d7:
36:d0:79:9f:86:03:e5:a1:2a:d8:13:ac:b9:19:a0:f9:b7:3d:
60:b9:ca:17:81:d9:19:cf:2b:57:da:5c:5b:6a:f7:50:6b:ee:
8d:8b:d1:72:b4:97:46:e2:9a:5d:5c:bd:2b:a1:4c:ff:f4:e8:
f8:80:2f:52:6c:5a:ed:28:10:67:27:10:4a:95:79:37:d1:72:
09:29:2f:9c:2d:3b:71:dc:49:15:c9:8b:73:bc:04:f1:23:ce:
ab:90:88:5d:82:4e:47:05:e0:65:3e:f3:b2:05:42:02:7f:88:
b7:31:51:d2:60:31:6e:93:b7:a0:75:8d:5a:f8:fc:ae:ce:0f:
b6:01:14:af:9c:25:fc:48:14:16:2f:13:55:f1:44:1b:63:4d:
79:c1:75:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:10 2025 by rpki-client