Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
File: cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json)
Hash identifier: u298dJqGsv8Jd7WNFUO9On5m7YLdWPl354AORaDtwbc=
Subject key identifier: 7E:B6:42:52:64:CE:EF:35:F8:3D:6D:6C:0A:00:67:56:CB:2A:C2:DB
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial: 019A00353EBF1CE67E3A5939CA204E78D0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 06:01:20 +0000
Manifest this update: Mon 20 Oct 2025 06:01:20 +0000
Manifest next update: Tue 21 Oct 2025 06:01:20 +0000
Files and hashes: 1: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: ZFnwijlTMorlf4V2lmda4xYDs9mA6lwsKRHykaKuv6c=)
2: wfSejFWh26iFaDPELsnvR1TSCTM.roa (hash: OW8hsiyWgn6jtKd7S9vMQN1SrD9c05HrY+6z4A8TNNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:3e:bf:1c:e6:7e:3a:59:39:ca:20:4e:78:d0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Validity
Not Before: Oct 20 06:01:20 2025 GMT
Not After : Oct 21 06:01:20 2025 GMT
Subject: CN=7eb6425264ceef35f83d6d6c0a006756cb2ac2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:e6:c4:a5:94:d7:74:1c:b1:09:2f:4f:0f:
58:0d:ef:a1:73:34:29:5e:1b:1d:c2:72:d5:91:8d:
3a:c4:d9:0e:13:1b:96:47:6a:a4:01:de:96:04:1e:
c3:fe:15:f8:e8:58:bd:b0:08:e7:92:30:89:d2:4d:
1d:10:51:3a:e1:34:70:38:9f:79:0a:84:aa:07:60:
31:2e:1a:38:bb:ad:29:3b:82:1e:83:f3:d6:1a:ad:
54:98:a1:20:15:e5:2b:0d:fd:ce:ed:d1:1b:29:6f:
61:d0:28:1a:1e:40:54:e7:e5:44:d1:b7:84:3a:c7:
a1:c8:3a:72:27:a2:66:87:da:c8:94:67:b7:4e:2a:
77:d1:e6:66:10:40:d5:2e:38:0f:57:41:84:4f:57:
e1:eb:4f:76:1d:4f:c7:f6:1d:14:59:c0:b5:4b:3f:
0f:2d:67:12:a9:74:8f:9e:f0:54:b3:09:06:18:11:
8c:69:b3:0b:c7:9a:c1:65:f4:ea:c1:1b:30:59:ea:
00:3f:ee:f7:73:71:8c:42:29:8e:7a:c8:9d:69:8e:
fd:b9:57:70:31:05:44:88:47:5e:e3:f9:bf:42:55:
1c:b0:5c:60:79:7a:cc:09:7e:71:b9:dd:42:1d:59:
66:eb:34:31:13:28:e8:c1:c7:34:68:e6:f2:64:0b:
24:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B6:42:52:64:CE:EF:35:F8:3D:6D:6C:0A:00:67:56:CB:2A:C2:DB
X509v3 Authority Key Identifier:
keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5d:3b:d9:d7:c2:6a:12:c0:76:25:7a:be:9c:b9:0b:e9:82:
aa:a4:1b:8e:91:e2:82:31:d5:21:b7:f9:52:4d:69:f8:eb:95:
8f:ef:11:98:3e:ac:85:94:6a:39:06:ed:3a:5e:2f:6e:e4:b0:
82:fe:b7:0b:95:65:b3:cd:5c:8b:8f:4a:5b:25:32:c6:31:4d:
dd:b2:71:7c:bf:cf:95:51:76:49:3a:78:4f:ca:b4:fe:bb:2e:
b4:35:9e:b4:15:b4:d8:37:c9:91:85:81:a0:24:a9:1a:46:71:
58:b6:f5:3e:e5:d7:f0:16:0a:45:28:e0:2a:05:2f:ff:6b:6e:
46:cc:98:ff:a1:27:11:5c:33:3b:a3:81:f3:34:a1:71:13:7a:
e2:9d:77:4f:23:ad:95:c6:ed:e3:1c:15:ab:c1:ef:2c:a3:fa:
b3:1e:cc:17:d0:66:29:4b:6e:e0:ef:df:33:2d:3e:9a:10:5e:
54:ce:b7:fb:74:e3:1b:71:d7:eb:e5:d5:68:e9:ba:a8:cb:96:
bd:1b:44:55:61:4b:65:dc:88:cc:54:5f:91:80:48:4a:76:84:
40:86:12:b3:22:75:1f:6e:c4:f6:8e:e0:8c:75:e9:b6:09:b6:
86:76:7c:93:be:27:54:11:2d:36:88:28:76:41:a3:80:cb:15:
84:f7:20:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:00:09 2025 by rpki-client