Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
File: CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json)
Hash identifier: OV5SXiM0yk5M8pXGFgSp8NwN1AXtzgy964I9wlHiKOU=
Subject key identifier: 2C:80:50:98:D1:F4:75:96:15:5E:F9:B7:2A:31:FA:2E:57:37:C0:01
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial: 0199FB45A339F86E0D834C2B3E574559EB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 07:01:08 +0000
Manifest this update: Sun 19 Oct 2025 07:01:08 +0000
Manifest next update: Mon 20 Oct 2025 07:01:08 +0000
Files and hashes: 1: 61-G3WXkR-SwbN4v7xZM_7MiENo.roa (hash: dPwb3l0zAU2N1RIH5n+vuaC+VR/dScikzlcMxqnd6Lg=)
2: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: kZ9aT92GRIACdyr26JPXfdqOYsbdxTLPCmqqELJMyZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a3:39:f8:6e:0d:83:4c:2b:3e:57:45:59:eb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Validity
Not Before: Oct 19 07:01:08 2025 GMT
Not After : Oct 20 07:01:08 2025 GMT
Subject: CN=2c805098d1f47596155ef9b72a31fa2e5737c001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:fb:29:d9:92:8f:4e:fb:f9:ef:db:49:63:
81:3c:2f:ee:fd:7b:86:a7:c7:a4:2f:15:ce:56:c8:
f2:0e:ea:61:5b:fc:b9:bc:5d:9b:bd:21:67:34:07:
7d:9d:5a:29:c2:aa:65:94:9d:7f:93:ff:1f:f2:91:
3b:95:c9:d0:85:41:03:65:5a:93:b6:b1:c2:c4:fc:
3e:99:a2:57:cb:b7:42:96:88:59:31:a9:f4:7e:b3:
2c:58:02:7b:b0:f4:bc:db:cd:67:95:06:e5:33:bc:
72:0a:59:e4:37:8b:83:ff:1d:58:27:39:3e:b5:36:
31:a0:7e:dc:19:e6:40:06:e9:76:d7:f6:6b:72:4e:
18:74:e6:ca:21:38:14:4e:db:2b:4f:ad:71:9e:e4:
dc:7e:7f:14:27:4f:45:f5:95:3e:bc:c0:a8:4a:4b:
f2:69:59:a8:72:c5:4d:0d:b0:db:48:34:57:12:d5:
f8:8d:4c:e8:49:b6:a6:93:64:f2:3b:96:d4:5d:bd:
1f:b7:aa:d1:c8:62:ba:7e:4c:9d:29:1b:35:b5:60:
0d:70:ba:50:7b:46:fe:31:43:54:c4:36:58:41:58:
03:96:73:a3:d3:23:04:bd:5a:be:9b:cc:6c:56:73:
47:50:c4:31:77:66:b7:65:97:c2:b1:3a:e0:ad:b3:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:80:50:98:D1:F4:75:96:15:5E:F9:B7:2A:31:FA:2E:57:37:C0:01
X509v3 Authority Key Identifier:
keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:13:a0:9d:21:0f:e0:62:4b:cd:43:ad:ca:42:e2:42:1e:bb:
ac:b1:20:63:d9:e4:8d:0c:4c:07:b6:d3:d9:a1:de:c9:c0:8d:
4c:d9:16:f5:37:5b:a7:2a:df:dc:09:55:b6:13:ef:47:f6:8b:
a6:44:7d:84:89:8b:47:99:84:38:03:8c:b5:96:99:7e:22:b3:
ef:21:d9:a3:d4:f3:74:e4:30:57:c0:85:7c:06:76:3f:3f:bf:
8d:c5:09:61:5c:65:78:fd:b4:50:11:3b:ac:0e:e6:14:d8:19:
7a:61:e8:7b:7a:79:f6:82:05:27:74:91:cd:f7:33:33:ce:9d:
ee:5b:09:dc:83:e6:48:f6:0f:22:3e:ba:7f:4a:9d:1c:82:7a:
b3:14:6c:69:29:3b:98:d0:b7:9b:9e:cf:62:c2:e5:64:c1:35:
9d:e0:66:99:16:16:50:e8:43:d0:73:82:ef:da:35:b1:fd:c7:
7e:85:79:19:b9:e8:22:ce:61:be:10:76:8d:de:2b:5e:18:87:
6c:a1:72:94:fd:37:74:5a:bc:3f:5e:f3:5e:0a:5e:9c:f2:7f:
33:39:bb:43:f7:09:fb:91:eb:c4:5f:c1:5d:5d:01:43:3d:cc:
ce:08:ca:44:de:e6:5c:d4:52:fc:d3:49:f1:7f:f0:d6:58:d7:
f5:6a:70:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:09 2025 by rpki-client