Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
File: CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json)
Hash identifier: nxyQtrx9vBfV1fOBIiHiTJQy43uzUVaJnPB6IU3Cywc=
Subject key identifier: E2:EA:87:A8:4D:40:B4:29:92:65:04:9E:03:4E:D4:7D:CB:A0:04:4A
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial: 0198D7A96A02FF161B2DCC8E343F0E520C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 16:01:00 +0000
Manifest this update: Sat 23 Aug 2025 16:01:00 +0000
Manifest next update: Sun 24 Aug 2025 16:01:00 +0000
Files and hashes: 1: 61-G3WXkR-SwbN4v7xZM_7MiENo.roa (hash: dPwb3l0zAU2N1RIH5n+vuaC+VR/dScikzlcMxqnd6Lg=)
2: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: IP3NPOS8rJcwr1UkYx+lxr9LMNrvBhR+epXBihMpWzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:6a:02:ff:16:1b:2d:cc:8e:34:3f:0e:52:0c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Validity
Not Before: Aug 23 16:01:00 2025 GMT
Not After : Aug 24 16:01:00 2025 GMT
Subject: CN=e2ea87a84d40b4299265049e034ed47dcba0044a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c4:e8:81:33:3a:ca:ca:c5:bb:97:1a:2d:cc:
80:f9:ff:2f:f4:1c:40:ce:7e:86:43:c9:b6:52:18:
b1:d7:78:0a:ae:41:c4:23:25:88:eb:70:2d:ea:31:
6d:7d:da:4c:f3:01:04:cd:29:45:b4:30:66:0b:76:
13:78:34:60:91:9e:bc:46:3a:d4:9e:35:4a:fb:dc:
f2:98:72:3b:66:06:68:03:55:e8:14:ab:26:6f:45:
4e:85:22:c2:dc:3d:53:d9:d3:48:50:cb:a4:e1:28:
90:52:88:a5:00:b4:d0:33:69:e0:60:ae:f5:9e:2b:
98:91:62:92:d7:24:9a:dd:c7:38:9d:7d:16:f8:f1:
4e:24:37:17:47:ba:db:5e:79:0c:5b:4e:ed:60:25:
10:2f:da:1b:29:3c:b7:89:d2:ea:64:81:5e:20:1c:
ce:e0:64:bc:21:16:e1:44:89:19:c0:6e:77:50:52:
63:68:7e:ea:7b:bf:e7:0b:43:1f:2c:d6:84:06:f7:
8f:56:e7:a6:f1:03:5c:a1:9a:9b:12:6e:74:83:4e:
a5:a8:77:5f:bf:5a:91:8b:49:8c:e1:89:bd:1b:74:
5e:0c:47:94:b9:aa:e5:22:40:ab:21:5e:6d:d0:f2:
40:aa:98:17:99:47:8e:a5:d5:b3:5e:be:78:63:6e:
4f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EA:87:A8:4D:40:B4:29:92:65:04:9E:03:4E:D4:7D:CB:A0:04:4A
X509v3 Authority Key Identifier:
keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ee:89:17:5e:7a:be:38:00:33:36:e5:c1:f2:62:56:1f:5d:
dd:fa:e1:a4:a3:3b:a8:39:1a:ed:d8:5d:cb:2f:06:ac:b0:cb:
ad:f2:80:8e:27:14:56:99:e6:e6:6a:aa:9d:28:f4:33:28:6d:
ff:84:73:d7:c4:f8:79:d7:b7:2a:8a:e7:f0:0b:cd:20:79:48:
23:c0:a2:62:d8:c4:18:93:41:95:4f:6c:ce:22:5f:4e:dd:f8:
26:dd:5f:99:30:54:fe:33:cd:a8:7e:92:a8:3d:78:28:fd:a6:
b5:42:56:ed:ad:9d:1a:76:e4:7d:a3:bb:4c:02:af:b3:a7:15:
86:4b:aa:ba:87:99:7c:75:79:1c:3f:f8:6b:0c:60:5c:de:16:
27:5f:55:99:86:80:4e:27:b2:ed:71:e6:36:ac:42:70:d8:14:
4e:48:78:a0:b4:8a:fc:cd:f2:0d:8b:29:ee:62:c1:0e:a3:70:
45:28:b7:ba:6d:5c:88:1f:a6:6c:5a:40:42:7f:67:dc:9f:5c:
62:49:a7:79:83:31:b6:af:98:6e:6c:39:39:b9:38:7c:38:d8:
99:fe:98:2f:f3:12:53:11:e7:b9:df:2a:34:e1:2b:8c:e5:e5:
d7:8c:af:3a:b7:90:a0:3c:d4:76:16:53:f6:64:1b:4f:3e:87:
df:66:04:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:15:22 2025 by rpki-client