Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: tBHMLc+wofCZLEkAYzuaURWNFMQi9y11QFB1cqXF+So=
Subject key identifier: 53:EC:7F:31:75:C7:CE:E9:A6:40:F7:85:D8:3B:08:3A:0B:AD:FA:D3
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 0198D65FAF73C60B184969AEB70143B2BED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 1003
Signing time: Sat 23 Aug 2025 10:00:51 +0000
Manifest this update: Sat 23 Aug 2025 10:00:51 +0000
Manifest next update: Sun 24 Aug 2025 10:00:51 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: vQH1esOOw80fWL/C6YOVbQF9vxjUYPg/lszlR/p5v2A=)
2: QFbV3cLIo6fGM98z7n86TaXk26k.roa (hash: OdVi+1rHdt0zdTh+loubxHzRa31DZflpr11+itY/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:af:73:c6:0b:18:49:69:ae:b7:01:43:b2:be:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Aug 23 10:00:51 2025 GMT
Not After : Aug 24 10:00:51 2025 GMT
Subject: CN=53ec7f3175c7cee9a640f785d83b083a0badfad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:58:d1:a5:41:e8:bf:97:5d:15:a7:49:5a:
89:0b:ee:cd:ca:61:ce:57:ac:fe:4f:2d:f5:dc:81:
3b:21:41:31:25:2a:69:ed:b9:9f:23:15:fa:72:15:
7e:31:66:43:f0:26:3b:9b:6c:d6:9b:cb:f3:d7:16:
38:bd:14:53:19:64:30:e6:59:61:88:11:e7:87:f9:
d9:f2:0c:4b:77:d8:6e:12:f7:4d:d8:f9:22:d1:bb:
3f:a3:0e:d1:0f:cf:96:74:4e:f7:35:4d:9a:31:72:
ac:b5:11:7c:e1:aa:a7:de:67:ca:52:16:ec:a8:19:
d1:07:77:24:b8:02:ef:b1:ba:f6:61:e8:dd:cd:a3:
da:e0:3e:b6:b1:db:fb:bd:c3:ff:68:60:00:b7:13:
d5:16:cf:ac:97:a2:a5:11:b4:d3:c0:e6:b0:54:f3:
35:7c:90:c7:93:9e:90:8c:1d:e4:5a:75:7d:85:8d:
3d:00:ad:1b:03:6c:b4:28:86:52:9e:60:d3:45:f7:
cc:bd:f3:5e:51:5d:5e:d6:bd:b3:fb:00:b1:03:fa:
87:f4:32:5f:b0:19:37:5c:26:8b:f9:e9:10:e5:5a:
ee:28:7a:b0:bd:7a:0d:86:5d:93:b1:08:47:2c:7f:
f7:ea:25:e0:e5:2c:02:5e:ce:03:45:4f:f4:ec:7d:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EC:7F:31:75:C7:CE:E9:A6:40:F7:85:D8:3B:08:3A:0B:AD:FA:D3
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:37:eb:be:d8:8e:9b:d1:bf:4b:d3:50:da:ee:00:00:87:db:
a7:8b:f7:27:5f:5c:79:33:6c:2a:20:10:5b:1e:dd:55:89:6c:
14:4a:a0:55:43:30:ab:b9:46:a3:dc:70:ad:c6:28:dc:81:1e:
13:4f:f5:1b:8b:01:a6:45:6e:c7:f6:61:bb:0f:e7:68:01:2f:
6e:d3:2e:0d:3e:e5:a2:8a:f5:4d:45:31:03:3e:00:c4:8f:5b:
0f:73:de:48:6c:4e:75:00:09:f1:8c:10:a3:3b:dc:81:11:80:
67:b3:e6:72:79:7c:69:8e:4d:ea:f4:4f:78:07:c1:01:56:89:
b8:30:16:8b:e7:05:f8:de:27:9b:05:72:68:88:94:ce:9b:f7:
37:59:4c:24:71:8b:c4:42:d0:09:5f:b2:a0:47:a4:ef:2e:b3:
46:cb:ca:d0:ad:64:dc:52:da:d4:f8:9e:f4:1e:c2:ae:40:56:
a2:07:0f:c2:2f:1f:69:0c:dc:dc:9a:6d:53:2c:08:eb:21:b9:
35:e1:12:cc:31:f7:77:bd:2f:4c:16:ef:d6:cb:f8:15:a8:fe:
53:e0:85:4a:0a:f1:c0:03:82:e7:d9:9d:93:74:86:17:55:d8:
7c:4a:5c:8d:42:08:0f:9a:6b:87:cb:8d:90:1d:31:0b:d2:d5:
d3:96:e3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:24:54 2025 by rpki-client