Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: 3mhQIcApHIpViOp4bjPEbXCTEHzCXL8jcWsl/ISHjEA=
Subject key identifier: 90:4F:08:8F:15:31:72:D5:01:B8:2D:C7:F1:30:C3:33:3B:28:9B:A8
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 0199FC21C43AF11CA09FC360BFCE2081239F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 0855
Signing time: Sun 19 Oct 2025 11:01:35 +0000
Manifest this update: Sun 19 Oct 2025 11:01:35 +0000
Manifest next update: Mon 20 Oct 2025 11:01:35 +0000
Files and hashes: 1: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: U5wvPvqJZRNu1mcmdKavAmyk54gflmPPlLbWQihK8Ww=)
2: vUAfXYF9TFNLnOrzGOBoj2EvRGM.roa (hash: qsEDepbRFwFuvWf4t9/SaCwgVj17b+21naMELXmYJ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c4:3a:f1:1c:a0:9f:c3:60:bf:ce:20:81:23:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Oct 19 11:01:35 2025 GMT
Not After : Oct 20 11:01:35 2025 GMT
Subject: CN=904f088f153172d501b82dc7f130c3333b289ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:10:03:3a:93:37:6c:a7:ca:78:62:a1:3e:39:
ec:72:58:db:23:97:8b:78:bb:fe:59:b3:2b:08:2f:
94:32:ef:dd:4a:ad:fe:c5:70:59:b0:1a:9c:d4:c9:
93:46:da:ca:f4:42:8f:53:2c:e6:27:0b:09:9a:f2:
ef:41:71:b0:1f:70:f1:e1:6c:da:cf:ed:bc:24:c0:
48:7e:9a:11:7c:df:91:cb:9c:6e:a6:30:36:a9:14:
5d:b6:6e:98:45:6c:25:36:4d:c3:6f:43:01:5a:0b:
32:25:5b:f4:bf:92:e1:27:10:13:17:f5:f7:45:50:
f6:8a:09:b4:6c:db:37:74:4e:22:12:19:b3:84:ac:
63:1b:03:e4:15:1c:f1:a2:a1:4d:a6:0c:4a:32:89:
06:d6:e8:68:4b:f1:7c:84:7b:8a:4e:60:21:4d:bd:
d4:09:70:17:67:bd:3a:b8:69:d7:3f:dd:7f:bb:06:
8e:cd:9b:ff:0b:f3:8e:1a:a2:1b:5d:45:74:75:a1:
04:27:00:81:a0:5d:25:13:a8:2f:c3:01:7f:94:9a:
a2:ff:10:ea:62:02:5a:c2:0d:20:9d:65:f4:8d:23:
17:df:b8:02:ac:5a:3d:d0:6b:9d:4d:e6:a1:7d:d3:
07:79:73:6b:05:7a:74:22:04:54:c5:57:e4:67:8f:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4F:08:8F:15:31:72:D5:01:B8:2D:C7:F1:30:C3:33:3B:28:9B:A8
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:41:99:88:d2:9a:36:5e:ec:cf:3a:99:97:4d:96:ff:93:87:
02:6c:21:b4:9c:66:ce:1c:7f:f0:11:34:24:c9:0b:5f:c3:d4:
fd:39:7e:7f:00:86:72:21:81:7c:69:f1:5e:f7:99:28:08:9c:
71:44:d3:e6:73:6b:2c:90:f9:95:3a:dd:23:f9:fe:ce:73:48:
0f:53:53:2e:5a:a1:c7:b6:89:d8:64:03:60:f7:a1:d1:a5:7e:
9f:b7:f1:0d:b2:9d:ac:0a:50:02:3a:ee:ed:7d:35:05:fb:bf:
60:4a:51:5b:84:cd:89:e5:bc:1f:7a:24:01:f0:e6:f5:31:c2:
97:79:01:f5:31:fb:de:2e:94:3d:bd:19:b9:a0:60:73:de:07:
e8:c8:ba:6f:37:9f:25:15:1b:de:38:a6:84:e5:87:5a:26:e8:
8a:0c:38:b6:ba:5a:f4:fe:1b:f0:2d:ae:71:a9:78:c2:d2:22:
e5:e8:e0:90:26:4f:1f:c5:b0:b9:94:91:67:f9:52:e3:b3:20:
83:04:59:8f:3c:c5:78:79:50:f8:e0:8e:20:97:80:21:41:4a:
74:d4:ba:9b:c2:1f:8f:8d:51:cb:66:12:c7:c2:e6:30:9c:b9:
fb:60:03:d4:d5:b0:48:8a:17:6f:7e:ae:4b:13:a5:b0:56:12:
58:34:d0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:03 2025 by rpki-client