Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier: eLsmL0hfZXZb4rmK6JyiMV44Irj8K9NLFf8XZiCruWQ=
Subject key identifier: 10:7B:F3:14:D5:2E:00:4F:55:E3:71:92:FA:29:EB:D3:98:F5:C0:8C
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial: 019A029054B40A443C6172D5FB08AA59938B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number: 1613
Signing time: Mon 20 Oct 2025 17:00:04 +0000
Manifest this update: Mon 20 Oct 2025 17:00:04 +0000
Manifest next update: Tue 21 Oct 2025 17:00:04 +0000
Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: wxJ8FUqjuljbJ3xbRcXMnuzvkxaEVz71m8Jvt4MxkFU=)
2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:54:b4:0a:44:3c:61:72:d5:fb:08:aa:59:93:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
Validity
Not Before: Oct 20 17:00:04 2025 GMT
Not After : Oct 21 17:00:04 2025 GMT
Subject: CN=107bf314d52e004f55e37192fa29ebd398f5c08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:a6:ba:f2:4e:87:95:b7:3c:19:2d:ca:01:
86:e3:3a:df:c9:7b:cb:a9:a3:b2:89:96:9f:bf:30:
17:21:11:fc:c8:ef:78:75:5b:70:63:f4:c8:8c:c4:
c9:9d:91:28:ef:05:7c:f4:42:aa:4b:4b:a7:3e:90:
87:fa:03:07:55:fa:e8:44:50:f9:ac:20:5b:c1:04:
93:49:b1:a0:ca:41:8d:3d:ff:60:6b:3b:0c:c9:89:
02:d6:87:74:0a:06:1b:aa:91:ae:06:d5:76:9c:91:
52:d1:23:1f:da:cf:be:d6:17:4a:72:8d:d7:27:c8:
fd:fe:f1:34:6a:62:1a:22:27:88:bf:8d:21:57:61:
62:7a:3b:8f:88:83:13:b0:5c:b2:0b:d5:f7:03:59:
ea:62:a1:de:45:ec:cd:46:37:9b:02:0e:90:24:43:
de:ff:a3:48:ac:1a:5c:3e:ce:9f:cb:f3:51:96:85:
63:27:cc:13:69:8d:47:11:c9:a1:e8:24:a8:a7:05:
f0:79:f4:a6:cb:55:c2:60:93:6b:8d:72:0d:bf:05:
9e:19:49:9f:cc:36:7b:59:a6:ac:06:8d:60:49:a6:
aa:b6:9e:0c:85:08:b1:fb:7e:96:e6:c4:61:73:2b:
07:17:67:8a:fe:c4:f7:06:b4:58:91:4e:82:5f:e2:
ff:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7B:F3:14:D5:2E:00:4F:55:E3:71:92:FA:29:EB:D3:98:F5:C0:8C
X509v3 Authority Key Identifier:
keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3b:16:d5:58:7e:c3:81:39:8f:aa:1e:5d:37:ef:1b:8e:93:
ac:5c:40:e5:6b:b5:80:0c:12:ee:e3:1d:ab:eb:f1:ac:b4:2b:
59:02:16:5e:79:1c:14:9d:b1:3d:51:91:19:79:4f:8b:7c:74:
0d:b2:a4:51:cb:e4:7b:9a:35:65:ad:7e:51:dd:a0:a6:c4:1e:
56:26:e9:00:13:bb:8d:b7:db:77:c9:22:d0:6b:28:ba:fd:eb:
48:b7:d1:c3:52:40:38:59:56:e7:85:a0:60:34:c9:f8:ed:60:
b1:14:ef:ba:de:4e:8b:ea:03:64:aa:09:26:e5:14:02:b3:c0:
f8:a5:58:8e:f4:e2:95:45:cd:6c:6c:59:89:b3:d1:0f:78:55:
30:3a:75:84:f6:c6:3d:b0:16:c2:71:2c:75:02:b9:9d:cd:cb:
cc:f8:72:06:8b:78:35:c3:6f:38:f7:60:8c:b9:17:f1:b6:b2:
d9:46:e4:ec:7a:ac:92:30:82:8b:14:ab:eb:bd:17:dd:08:bb:
ad:8f:b6:83:0d:7d:6d:aa:fa:27:fb:de:82:0a:c8:98:14:93:
51:0e:f1:69:d8:91:70:c5:05:ec:1e:76:dc:1a:9a:2d:b4:b7:
f1:08:46:14:58:07:d0:e8:88:cb:0b:b5:d2:bf:e6:8f:a8:57:
2d:95:f5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:34:08 2025 by rpki-client