Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
File: gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft (raw, json)
Hash identifier: bpS/2kVU73b4SUIvJnm7+wtmUFmWqkFJCsSTf8kUJzY=
Subject key identifier: CC:8C:63:BF:C8:AF:E7:C8:64:BD:1F:13:7F:C8:22:FE:2E:23:D5:02
Authority key identifier: 80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
Certificate issuer: /CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Certificate serial: 0199FBEB4DD195EF6AC7A623C1A14C060628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
Manifest number: 141A
Signing time: Sun 19 Oct 2025 10:02:06 +0000
Manifest this update: Sun 19 Oct 2025 10:02:06 +0000
Manifest next update: Mon 20 Oct 2025 10:02:06 +0000
Files and hashes: 1: gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl (hash: PK9mrTMoUB4VaAPMUmDau/EbdGfYOh/d6cAAeGPldAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4d:d1:95:ef:6a:c7:a6:23:c1:a1:4c:06:06:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Validity
Not Before: Oct 19 10:02:06 2025 GMT
Not After : Oct 20 10:02:06 2025 GMT
Subject: CN=cc8c63bfc8afe7c864bd1f137fc822fe2e23d502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:1d:a8:a4:4a:b6:25:7b:ad:66:9d:0f:91:
83:41:15:7b:e3:b0:7a:e6:ec:b6:ba:28:14:5d:5b:
1b:ae:68:3e:9e:40:58:58:91:f6:21:d3:30:a9:1b:
f8:4f:2f:f0:13:4d:8c:65:21:dc:be:37:a1:1c:72:
68:22:97:0f:31:84:46:83:7f:7b:3a:bf:b9:08:4c:
e1:d7:c9:f9:11:ed:fd:f8:d9:4c:f7:58:9a:97:9c:
fc:0c:c1:87:25:a1:dd:e3:da:6b:e9:60:e4:0f:4f:
84:95:0a:a9:65:77:0d:68:a6:7e:ba:ac:a2:6d:7d:
cf:3e:b1:7e:e9:c3:51:ab:fb:e9:68:33:78:16:98:
ed:8c:92:f1:87:c1:4d:cd:36:a6:73:89:b2:a0:85:
61:43:3e:f3:a2:52:2f:e9:4d:aa:46:49:37:93:76:
a2:1c:2b:5f:16:0c:b4:45:d2:5f:b6:96:d6:16:09:
66:3a:db:d4:c1:0c:48:0c:a9:d1:55:39:f1:ec:a6:
7c:dd:df:e1:45:b2:64:06:11:5a:9a:ce:e2:8f:74:
e0:3e:04:8e:99:a6:f5:56:b1:da:29:3b:98:fa:7b:
98:5f:14:4f:c8:5f:c0:7c:e7:08:52:2b:71:07:1e:
ec:ed:57:ee:ed:41:b7:ed:97:01:bc:93:98:4b:83:
7f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8C:63:BF:C8:AF:E7:C8:64:BD:1F:13:7F:C8:22:FE:2E:23:D5:02
X509v3 Authority Key Identifier:
keyid:80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d7:18:19:a5:6b:58:f3:34:74:0d:33:5e:03:41:73:c2:8f:
3f:3a:b7:ab:51:84:c6:d2:6f:82:f1:49:45:96:30:d2:90:ef:
e5:93:86:5b:8f:f6:3e:96:a2:c7:08:07:16:30:7c:a6:92:1d:
d1:76:46:f9:b1:9d:ab:a0:47:1b:a2:89:6d:1d:9b:03:9e:6c:
5f:42:cf:55:e5:11:1f:3c:6c:c5:53:0a:96:b7:97:38:b7:21:
f4:a8:44:5c:d5:e4:22:a7:e6:eb:70:b5:8b:fc:64:d9:d0:f3:
59:e1:12:27:2c:67:42:08:8a:b1:b5:f6:d3:dc:f1:8a:63:b2:
58:ec:2d:f9:8b:ee:1a:02:19:be:59:dc:26:34:69:9e:da:eb:
fd:5a:bb:3f:82:7b:b8:f2:6f:85:ed:21:e9:d7:0d:ba:57:07:
85:a0:c6:29:63:e2:32:5e:1f:80:3a:e2:85:7f:4d:37:e6:b1:
42:d8:e3:d5:41:93:54:63:37:ac:fe:e4:58:7c:e2:57:16:1c:
39:50:53:20:ae:14:da:a8:d9:d8:f6:1d:ea:81:09:1b:db:37:
dd:02:c9:74:af:12:fd:6e:70:28:71:f7:47:6d:ac:a6:66:8c:
4a:0a:b2:bc:32:30:d3:0d:65:f4:24:59:f5:da:4d:9b:62:73:
50:10:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:43 2025 by rpki-client