Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: mc7InVscHdzcwwt3JA8y+I3ImKYAHCzTCZXA0ZWdyQs=
Subject key identifier: 8F:2E:6D:FC:B1:C1:B5:F7:70:F0:8F:5F:1B:78:8A:41:9F:95:A7:DA
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 0199FBEB380CA3A37A90C6219255B2C3A48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 140D
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: lNbBJnTqclhgIXLS+1BL9BxI5QSTdnDo03X+kq4Mu34=)
2: HVKHyWK-3ZYz5KzbpJqwzo297Wc.roa (hash: OXPJlcYgMDd9TeVLc/h7NB1E8LuM//ZUW90WT8mlIsU=)
3: MsZP7jFPKkJqiHU_2G78BAV7afI.roa (hash: MXKAJZ6YryHNNBfafKO5IJGZB2W0L2svHImaEXgu2Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:38:0c:a3:a3:7a:90:c6:21:92:55:b2:c3:a4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=8f2e6dfcb1c1b5f770f08f5f1b788a419f95a7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:41:5f:8b:63:ae:b2:b0:ef:da:23:1f:b6:
cd:ce:bb:c3:ca:28:bc:f0:bb:8c:99:39:80:66:e6:
a8:da:81:94:ce:c3:88:cb:b8:66:44:cf:bb:05:76:
e6:c0:81:3f:07:3b:9c:80:c1:bb:7b:0d:8c:c9:b3:
8f:f0:16:75:07:cb:69:e8:c9:60:43:0c:0e:e0:77:
7f:2d:91:d2:00:c8:fc:ad:cb:89:9b:44:f8:e7:72:
41:12:81:e5:d9:13:6f:02:5f:e5:ef:be:e0:b8:cb:
2b:48:76:b7:e7:28:c6:e5:74:f9:c5:0e:24:02:92:
26:8b:5a:54:46:eb:bd:b5:17:70:d1:4d:35:27:df:
bb:0e:bf:e8:c9:a3:19:bf:35:99:0a:36:95:20:09:
45:97:0b:7f:bb:cd:2a:c6:3d:b2:4d:2a:57:f1:d4:
bf:e9:10:c2:f5:42:9b:cc:03:d4:f6:5e:55:27:c8:
e4:d7:92:af:d6:be:e8:df:aa:bc:eb:cb:bf:af:9a:
32:a3:13:8a:0c:f3:14:47:61:ff:4c:0b:6a:b1:da:
9a:04:bd:03:c6:d4:44:01:97:c3:ca:9e:f0:bc:d0:
e6:57:35:ef:e4:96:3f:ff:86:1d:28:04:d2:0b:de:
9f:eb:b3:f6:05:41:c4:4e:7b:21:a0:70:aa:57:d6:
9f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2E:6D:FC:B1:C1:B5:F7:70:F0:8F:5F:1B:78:8A:41:9F:95:A7:DA
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d2:cf:61:06:f3:09:71:22:20:2f:21:f7:0d:cd:7a:f2:0f:
9f:66:dc:77:14:1b:75:62:03:bf:d3:9d:f6:e8:32:48:bd:d9:
bc:a3:9e:c9:ea:67:df:f6:af:c5:98:d0:96:cd:78:15:9f:c1:
2a:70:ac:6e:8a:3b:de:12:dd:0a:54:af:7d:28:28:99:9a:c9:
f8:65:c1:63:e6:cc:c8:10:e7:9e:a7:17:65:1b:f5:78:92:22:
a8:d1:d2:b1:13:3c:15:b1:55:83:99:4e:86:a2:8f:19:61:40:
6d:a9:c1:2a:1d:25:33:53:f7:5d:26:71:a8:c4:0d:49:a4:88:
98:98:d8:6c:cb:e0:16:8c:f7:8e:62:d4:bd:56:c6:13:69:b4:
e8:58:1a:58:02:9f:b4:29:6c:4d:35:d5:dd:29:cc:18:5d:7e:
c9:f9:03:37:72:f5:5b:ac:3f:19:d3:95:0c:c8:6c:96:04:6b:
eb:f8:b6:bd:59:95:60:37:3a:79:23:16:8b:46:99:32:7e:c5:
02:d1:05:2e:56:b7:5b:28:78:05:e9:30:30:3c:a1:00:d2:fa:
9d:09:2f:8c:bb:d4:56:bc:c2:a7:5b:cd:d6:fa:1a:61:fd:88:
63:c8:0e:8e:4b:6b:9e:40:fc:8a:8c:cf:65:ae:dd:34:45:23:
34:d4:ba:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:17 2025 by rpki-client