Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
File: CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft (raw, json)
Hash identifier: iLI2hBcQd3LJXgQsscoRGVxdqHOCWRSm6URhI1UF3bA=
Subject key identifier: F7:BE:96:D0:58:1C:01:32:D2:6E:E0:8F:0E:F5:B6:8C:62:41:C5:98
Authority key identifier: 08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11
Certificate issuer: /CN=082b54b05af5e3e8743e7bf4af41ea622bb09411
Certificate serial: 0199FBEB0C139A071A968B0E777C4A6B70F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
Manifest number: 3F
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: 54NKMWq0L3IIIGrYlD4JaLMKdWc.roa (hash: nMietHH485C6qExyXaoO0fEvgFmJMC/Kq1HNjgMaTZI=)
2: CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl (hash: hWKvFZ38YVmPr4ClSQ5eV5n2dNhw+OKVCK0gP4BnH/U=)
3: Di1QpgX41h6ctGuvSOLfkm_uyfw.roa (hash: EAPlmPmv8N/hsnjz5qvYOhwhE3evHDf9S6gLR+bmno4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0c:13:9a:07:1a:96:8b:0e:77:7c:4a:6b:70:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b54b05af5e3e8743e7bf4af41ea622bb09411
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=f7be96d0581c0132d26ee08f0ef5b68c6241c598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:17:83:21:43:fb:ca:55:e1:3d:29:28:e8:
85:6d:63:d5:cf:c2:ca:83:30:4a:e7:f9:9e:88:19:
86:0b:15:77:9a:90:af:7e:cd:de:c5:a0:18:b1:5a:
24:48:0b:64:08:e4:54:b4:ae:40:6b:28:8e:8d:89:
57:ac:c0:cb:2b:d4:bb:7e:29:ad:bf:03:c7:cd:3b:
63:f3:b1:4c:b5:1f:26:ff:69:ca:4c:cf:3d:ff:84:
f5:59:19:5a:3a:88:33:e3:78:31:81:ee:35:55:79:
97:45:d1:8c:ba:8c:69:47:57:5b:45:bf:fe:48:68:
56:a9:3a:d8:a4:e5:fd:cc:21:da:d1:98:dd:81:7d:
de:95:4d:c4:8f:5a:bc:d6:40:0c:8f:04:f2:da:c0:
bc:39:54:ca:08:31:30:1a:31:02:bb:c9:84:94:6e:
d4:dd:2d:b0:e7:24:c2:0f:20:47:63:db:54:b0:07:
18:a2:f2:ed:16:74:23:8f:69:ba:39:21:b0:f3:4b:
b7:f5:69:23:60:d7:41:88:79:f5:73:a2:68:05:be:
9c:56:99:a7:a2:13:be:4a:86:e9:f6:fd:e9:8c:3a:
8b:a8:60:1b:a8:57:64:ac:7a:2f:20:63:25:57:08:
dc:52:2c:1e:98:15:26:5e:3b:08:e2:9d:66:44:f9:
30:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BE:96:D0:58:1C:01:32:D2:6E:E0:8F:0E:F5:B6:8C:62:41:C5:98
X509v3 Authority Key Identifier:
keyid:08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:03:32:74:74:d6:08:6d:9a:52:00:52:2a:93:f2:69:c4:c3:
b3:dc:54:cc:2b:c6:3a:e4:4a:80:e6:d6:2f:c7:0e:cc:9c:e3:
02:8a:be:7a:11:99:7b:3a:40:17:fb:73:ab:b6:42:f9:dd:8b:
0d:9a:c9:dc:81:9e:f7:4b:83:ec:98:36:90:5c:4a:e2:fb:19:
30:e5:91:29:f9:69:d3:1a:22:0d:41:09:37:bc:b3:a1:ab:3a:
e5:0a:78:07:07:4d:2f:08:05:c3:49:f3:40:3c:c8:c6:30:0f:
95:7c:0e:c5:1c:59:03:ea:41:3e:30:6e:9f:c7:c4:9a:86:46:
68:e0:a6:e3:0c:1a:d4:04:1b:4a:d9:7d:11:17:10:3d:73:d8:
98:53:55:79:53:04:34:26:70:b8:98:e7:a3:37:dd:e5:3f:50:
e2:4e:ef:7d:5c:b7:2e:b9:4d:27:72:e7:d2:5b:c1:0b:a7:8d:
69:9b:08:1a:00:f9:1b:9e:b0:d5:3f:d9:8b:db:73:be:fe:49:
15:72:e4:9a:6e:96:1a:68:32:d3:3d:7d:e0:98:11:7d:b9:71:
7e:ae:31:5d:e2:d4:fa:33:f0:37:1e:b0:b0:1b:fd:d7:b3:16:
fd:1b:f0:6a:17:93:b2:7d:02:d4:c2:1c:ec:58:e7:5f:a3:b9:
37:44:5a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:18 2025 by rpki-client