Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
File: CcUO_hOq31QjsE8N3KizKIOVgj4.mft (raw, json)
Hash identifier: fbiKGGsCOppql66ii/3DH48W0M6ullUkA5jehlur5cg=
Subject key identifier: C1:86:D6:19:43:B2:A0:9D:A7:C9:F2:B8:60:27:79:30:BF:3B:4D:48
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Certificate issuer: /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial: 01984A0A0EAA429B65EBD5C25CFD89234511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 04:00:29 +0000
Manifest this update: Sun 27 Jul 2025 04:00:29 +0000
Manifest next update: Mon 28 Jul 2025 04:00:29 +0000
Files and hashes: 1: 8pbOtoickn4gngDPghS6zzsubu8.roa (hash: 2DV5k3x2c9dOCN9Cru+gCMm0tJjouTk+IFDhMI+k6C0=)
2: CcUO_hOq31QjsE8N3KizKIOVgj4.crl (hash: Wgmj7t2zZfkCyNl5toS47eLh0mG8lIB9jf9raHu4+vM=)
3: bQWTWaPJMURhOwMcF82QvoPW9eA.roa (hash: ZBXbwgCoJr1O/tkU4TQtGdf606M6fVdS5KYW5/tfGVU=)
4: e4h7xssIbvZ0s7Vw9JjG46tDvZ0.roa (hash: isku2v3Qa+kI0md0IS8QEjqPkTCho6QFnoe7uAw4O+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:0e:aa:42:9b:65:eb:d5:c2:5c:fd:89:23:45:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Validity
Not Before: Jul 27 04:00:29 2025 GMT
Not After : Jul 28 04:00:29 2025 GMT
Subject: CN=c186d61943b2a09da7c9f2b860277930bf3b4d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2a:60:57:54:4a:d9:ba:63:c5:8a:95:de:f4:
ed:24:dd:b1:6b:5f:90:07:cd:a5:da:bf:d0:cb:eb:
81:c2:c2:1f:d7:0c:60:13:b9:7e:a5:c4:c9:b5:2d:
0d:50:cf:5a:a6:b2:93:31:8d:1f:80:81:0c:65:99:
d0:b7:55:1f:c5:e3:15:99:ac:1a:7a:c0:e5:88:b3:
37:73:91:d8:80:4d:14:49:dc:73:f8:7b:19:c7:78:
21:02:22:62:d4:7a:fb:e0:62:a7:bf:d7:85:89:db:
a7:56:8d:67:93:a2:af:ce:63:cb:32:2f:26:9d:ab:
50:dc:96:fc:4a:21:49:87:aa:f1:38:e5:db:38:51:
86:98:27:af:4c:d0:c5:9e:3c:7d:8a:0e:2c:5b:7a:
cf:0b:a5:a9:e8:62:9f:46:0a:0e:a3:1f:ac:ce:75:
79:9b:19:7e:1d:53:1c:65:b2:ed:4b:35:a5:d6:82:
8d:ec:1f:ad:22:b9:cd:a8:91:98:81:c4:66:74:4e:
e9:b0:0c:ab:fb:81:6f:42:da:48:e4:85:3a:3d:ee:
32:74:fa:0a:64:a3:a6:97:bb:f5:7e:35:2b:3a:d1:
99:2a:5c:9a:ca:ad:72:5e:1d:46:07:44:11:3e:d3:
fe:9b:f4:d7:e0:db:a5:9a:45:17:05:27:56:98:f7:
97:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:86:D6:19:43:B2:A0:9D:A7:C9:F2:B8:60:27:79:30:BF:3B:4D:48
X509v3 Authority Key Identifier:
keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3a:07:ad:5a:48:15:bb:04:1d:32:06:5d:7e:0d:ea:28:0e:
09:9f:dd:4c:c5:ae:ae:3d:0c:0f:0a:0d:31:26:6d:26:93:0e:
a5:fa:22:a3:1c:0e:96:b5:b0:23:dd:67:00:b6:77:90:ff:65:
4b:85:3d:1e:98:ea:2a:76:33:91:ce:82:31:46:51:46:66:3f:
f6:38:bc:11:3e:7d:30:1e:9f:be:1a:b9:c7:90:38:a0:76:fc:
12:07:1f:df:fd:67:52:47:15:0a:cf:bd:25:0f:60:3b:17:c1:
d2:50:fe:fe:ae:85:15:96:d1:5e:b7:bf:d8:49:d1:9a:f4:41:
78:9e:8d:f1:0c:f2:ee:33:1d:96:93:59:c8:81:47:ed:6a:b1:
52:c6:45:e4:34:b6:22:ec:60:75:34:52:eb:fd:f9:7a:0a:17:
9e:ba:5d:9f:a0:17:95:d2:a5:19:ad:d9:3d:c5:1e:77:84:1b:
2c:f5:ad:7c:fc:9d:f8:46:41:10:24:cf:15:1e:1a:b4:de:b6:
6f:3a:6a:06:5c:18:4b:a3:2c:db:9b:fa:63:97:97:a1:c2:e3:
11:3e:23:7c:b2:dd:d7:84:ab:a7:61:71:b8:02:27:9f:96:be:
3c:19:01:70:08:ee:5a:76:bb:31:63:93:e4:9a:35:3a:19:ae:
30:2a:8c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:12:39 2025 by rpki-client