Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: VrfW28pNzoSquLpHhR+m8E2+vysytfUMkaDhO+O9vtk=
Subject key identifier: E8:F7:6F:C5:52:64:DA:18:EA:2C:20:12:FF:98:88:6F:16:E0:B2:71
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 019A01B65A4C72D48699DE577BAFFF79D432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 13:01:59 +0000
Manifest this update: Mon 20 Oct 2025 13:01:59 +0000
Manifest next update: Tue 21 Oct 2025 13:01:59 +0000
Files and hashes: 1: 0xDZgWnts24csgnMxUD8LWhBHU4.roa (hash: Y8cjviLWLv7KyuSufCFJinPdimRipqIY80BDPZZpv3c=)
2: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: v9wuNEfchc9A9DjZYDckt9fXgEsHK1Op1BUDEL71kL4=)
3: U_CJPYiKsC4pTY0SsfSjtBrH8dE.roa (hash: AQXnBaIOWVXqlXh1gif0C/a7bntYjy34IbEEU6kS/30=)
4: a7j4aToRp-Rf0IqyeByNF9Ocsfw.roa (hash: 9QeK1R+lwAXK6vSpE67n1ijYEIdp5QQxcwabJABYuQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:5a:4c:72:d4:86:99:de:57:7b:af:ff:79:d4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Oct 20 13:01:59 2025 GMT
Not After : Oct 21 13:01:59 2025 GMT
Subject: CN=e8f76fc55264da18ea2c2012ff98886f16e0b271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:cb:b5:5f:ba:86:80:be:21:6c:da:a3:a3:
34:36:79:f5:d2:14:5e:c1:ef:7d:08:fe:64:d3:16:
4a:5b:9f:2f:b6:2b:10:f5:d0:87:04:89:03:4a:35:
97:e4:e8:75:00:57:05:70:72:f4:99:68:e1:44:e0:
97:d0:66:f7:b3:36:37:7f:6d:d6:c4:de:53:e0:c2:
cc:d1:a3:6d:06:ba:08:d2:01:3a:7a:2e:be:a5:f2:
38:7a:0d:9d:ad:cd:1a:50:ad:34:7b:80:2e:9f:80:
8b:b4:a1:35:94:a9:da:2d:68:1a:a8:99:55:cd:39:
9c:df:fc:ba:1d:dd:e8:4d:2e:82:76:93:1f:ec:09:
0d:c1:0f:2f:05:2a:2b:95:9f:b5:ee:00:7a:cd:1b:
f2:a2:69:ef:b6:5a:a8:54:17:35:8e:17:05:f9:78:
3d:cf:4e:d6:c7:fc:8f:00:0b:22:00:57:a6:50:37:
44:97:aa:ba:c7:d2:03:56:57:ab:a7:03:2c:e3:61:
b2:ae:18:2c:4d:91:ec:8f:f1:e6:67:0e:d2:57:e7:
ca:95:59:92:9f:0d:7b:b7:82:a1:b4:29:12:f8:89:
b0:db:8e:cf:59:15:e0:f2:2b:dc:a4:a0:3f:0b:ff:
1d:d9:b3:a7:58:d2:c3:27:5a:00:a8:d8:ad:83:6d:
85:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F7:6F:C5:52:64:DA:18:EA:2C:20:12:FF:98:88:6F:16:E0:B2:71
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:84:4d:9d:76:7f:7d:e0:7b:e1:fd:a0:69:4a:16:59:70:ab:
3e:b4:03:e8:be:a1:50:0a:64:4d:93:0c:45:3e:18:3d:a9:a1:
75:81:ee:08:f1:3f:59:4b:28:b7:de:3b:9b:8f:44:d5:3e:b6:
b4:18:4f:23:15:8c:b1:93:07:d2:b1:86:a6:b4:e5:48:d4:be:
77:89:17:00:f2:41:4c:64:c2:58:32:8a:33:f0:d8:da:37:4c:
39:fb:55:02:8b:77:80:28:43:76:e5:3c:a3:fe:36:d6:bd:70:
fa:b5:9d:26:d7:f5:e2:3d:05:c7:a9:7b:c9:89:a5:fd:79:ee:
d9:d4:5a:0b:5b:a4:27:ce:c8:b8:c9:4a:a9:e3:cd:aa:1d:c9:
01:ef:8a:34:0e:2a:c3:c7:96:49:87:c7:c7:a8:10:76:73:78:
26:7a:05:e3:a1:55:b9:f9:40:88:7b:96:16:cd:ff:98:82:99:
b5:33:94:62:28:12:b8:f1:6f:d6:c3:8b:f7:05:45:64:bb:70:
d5:2f:0a:f8:a6:3e:5d:fd:17:98:a6:50:72:34:ef:f6:da:6b:
d2:2b:51:42:ac:fc:bd:fe:ef:6a:26:03:21:d2:3e:ad:80:fc:
b4:c3:2d:c7:3c:21:5a:22:0c:a3:f7:51:1b:12:d2:d5:7f:4d:
46:21:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:14 2025 by rpki-client