Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: /7Pf2rOExrP+wmhOQfnp/fueu29h/Le3IO3XVUxA7kE=
Subject key identifier: 20:C3:23:C5:7B:6C:64:66:D3:60:E8:EE:84:88:44:CF:E4:49:70:2A
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 0199FF598BAA3A4FFF21450440896790662E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 106E
Signing time: Mon 20 Oct 2025 02:01:22 +0000
Manifest this update: Mon 20 Oct 2025 02:01:22 +0000
Manifest next update: Tue 21 Oct 2025 02:01:22 +0000
Files and hashes: 1: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: nfd6iPvdj2TMXDn+opLAMxU1UX56Auna7rIIHswHgIc=)
2: qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa (hash: OKj4yzwEJbloQV+D0rgvNOZHy8KXLKDzSxRsqanfakg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:8b:aa:3a:4f:ff:21:45:04:40:89:67:90:66:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Oct 20 02:01:22 2025 GMT
Not After : Oct 21 02:01:22 2025 GMT
Subject: CN=20c323c57b6c6466d360e8ee848844cfe449702a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:16:a6:a1:8a:43:57:c0:8c:31:b5:1e:f3:
6a:8d:d9:99:80:24:ec:c9:55:ef:03:30:e2:ca:02:
4a:cc:d7:0a:5e:6a:ac:a1:80:90:7f:b5:15:ec:45:
23:69:14:46:7c:22:c9:1e:d3:cb:13:c1:1c:2f:83:
0a:5c:20:89:06:17:e6:39:84:bf:e8:01:e0:9f:28:
4b:25:ff:16:72:34:bf:14:b8:8f:df:ee:23:c2:50:
3e:32:6c:1b:18:1a:0c:1a:a0:b0:7a:d9:f6:3b:da:
ec:db:55:c8:8e:39:2b:d7:0a:d0:e2:3d:f0:90:7e:
1b:66:09:f4:7d:d7:b9:5b:0c:6f:98:0d:45:61:e6:
5c:5a:12:88:37:91:50:c3:0a:20:ec:ff:95:1d:11:
2b:22:19:af:33:ae:b1:35:4d:b2:30:83:25:6b:58:
25:38:ca:41:18:5a:63:62:aa:cb:f7:ec:24:57:34:
0c:67:17:2a:e0:fd:55:b3:1e:db:4f:95:24:d7:c1:
9b:14:80:4c:e0:a9:47:b7:31:dc:43:8a:f1:30:be:
af:6c:39:36:fa:5e:c3:63:ac:f6:89:e7:2e:91:57:
b7:84:16:95:e4:03:1b:b9:ba:4b:8f:c4:2a:14:68:
38:62:82:2b:96:ba:8e:86:24:2e:e2:62:f9:01:ff:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C3:23:C5:7B:6C:64:66:D3:60:E8:EE:84:88:44:CF:E4:49:70:2A
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7c:70:2d:cd:2a:7a:b1:43:fd:69:d5:a1:ec:79:a2:8a:b0:
32:48:eb:ee:d4:31:25:3c:73:a0:db:62:af:50:bc:3c:34:39:
3e:e7:eb:e2:ce:68:d0:32:55:40:d9:46:47:f3:88:26:00:c8:
8f:89:69:b9:ba:c4:b4:f2:c0:ab:73:a5:ee:ce:e3:9c:b6:1d:
09:b6:ac:68:bd:17:f4:b4:ae:e3:b7:fc:c0:15:76:5c:e2:1b:
7a:29:0a:b3:ec:cb:9d:31:75:78:09:ac:cb:b2:b6:71:39:7c:
6a:d6:a8:d9:7b:ce:4d:92:c6:cd:94:d9:4e:69:98:70:72:f5:
b6:a9:6b:1d:b9:78:57:21:8b:b3:5f:f7:6f:fa:a8:ee:c6:1c:
06:cb:1a:ca:c6:4c:ea:ea:76:0d:59:3a:8a:87:bd:69:d7:4f:
92:3a:08:c2:98:7d:c5:ad:a0:e8:34:ff:82:a2:e5:71:a0:0c:
56:62:48:9a:df:b4:46:e3:f5:a5:a4:db:1e:80:2e:06:d0:09:
fe:27:fc:9c:36:1b:3e:31:7d:46:e9:12:77:66:aa:d3:fc:a4:
0e:7d:58:b6:63:8d:c5:1b:a8:67:65:7a:c2:da:b8:cc:57:bc:
91:97:6a:4d:d3:a5:34:ad:e5:50:7f:fb:85:6f:9d:23:92:7f:
70:c8:1f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:45 2025 by rpki-client