Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: DDEhdCCd+L28tFo8zXiM5wMWgZh5spEz28mgELGSAis=
Subject key identifier: 60:91:4E:ED:62:67:99:06:A7:2F:84:F5:06:1C:68:22:AF:91:74:D7
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 0198432C61543D630585B6B244AEFE1179B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 01EE
Signing time: Fri 25 Jul 2025 20:00:38 +0000
Manifest this update: Fri 25 Jul 2025 20:00:38 +0000
Manifest next update: Sat 26 Jul 2025 20:00:38 +0000
Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: 8D0fwQ/j/ndvQ+uKx4KV4h6PUVpj+E9ziSandc8ySFc=)
3: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:2c:61:54:3d:63:05:85:b6:b2:44:ae:fe:11:79:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Jul 25 20:00:38 2025 GMT
Not After : Jul 26 20:00:38 2025 GMT
Subject: CN=60914eed62679906a72f84f5061c6822af9174d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:73:e2:58:88:11:ec:06:a9:41:fc:3b:57:
6d:4f:25:62:4a:53:26:ed:3b:37:49:10:5c:3b:90:
9f:42:47:ed:84:ba:27:54:71:81:1b:26:0e:2c:65:
14:57:eb:17:67:ba:9f:c5:5a:80:55:b6:fb:58:04:
f7:8b:d7:6a:6a:5c:23:84:0d:fa:8e:eb:31:9d:de:
39:7b:c9:1e:88:c5:48:03:76:e5:b7:05:16:cb:90:
e3:aa:af:3d:2c:6e:0f:01:d7:0c:9f:e0:20:c4:db:
07:1e:bd:05:c6:f7:2f:1a:e1:9a:6e:10:8f:5c:2c:
97:64:6c:a9:0f:0e:b0:eb:47:63:69:7e:74:fd:f6:
76:64:d6:e2:c3:53:d7:ba:68:3a:46:57:e3:e6:36:
28:cb:c9:ef:94:2e:75:07:ba:e0:9f:9b:b2:46:f1:
5e:18:33:93:7a:a0:3b:b2:d2:a4:8f:bb:35:7b:5d:
52:f9:dc:e6:9f:69:84:b2:fe:a4:02:f2:b9:12:40:
8f:56:b1:dd:de:04:a4:dd:19:c6:ba:46:78:e6:05:
0b:19:00:9d:d8:17:17:3c:f8:e2:21:f9:e4:a0:b0:
ad:a1:22:b8:bd:e2:b0:2d:bf:0d:53:be:a9:96:f9:
57:c4:8e:d7:7e:dc:d6:54:1e:d8:00:15:85:66:6c:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:91:4E:ED:62:67:99:06:A7:2F:84:F5:06:1C:68:22:AF:91:74:D7
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6c:21:35:89:fb:29:e6:dc:42:c0:3b:1e:ac:dd:27:aa:ad:
50:7e:9e:a3:68:5a:9c:8c:7d:41:7c:9f:c4:34:ba:78:45:3c:
03:45:ab:7d:d4:46:b2:1c:e0:d8:52:d7:8e:18:9b:e3:66:94:
55:e5:a8:71:38:dd:dd:99:27:cb:33:ce:e7:14:7b:1b:33:b6:
b3:69:13:0d:47:7b:74:66:50:b7:7b:04:da:ee:9e:06:8a:e8:
8c:d5:d3:fe:57:bd:e4:eb:69:c6:dc:d4:d8:88:0b:2b:b1:29:
9b:7f:d1:d3:88:65:8a:8e:05:37:94:c5:77:46:25:80:76:29:
ee:d5:12:4b:5b:13:d5:5e:32:ca:2e:8d:7d:ad:ad:c9:d1:bf:
b1:c1:e2:2a:4c:c8:97:ae:28:8c:ac:98:d8:40:3d:bc:2f:9a:
47:8c:31:fa:a3:02:ec:c2:ca:76:25:f7:63:f7:b9:6b:c2:60:
ea:3a:4b:9a:be:3d:37:1b:03:72:18:01:c5:3f:ce:c0:95:2c:
6b:0b:a0:ec:3c:fb:cd:31:e3:b1:6e:77:ca:06:d3:b8:08:47:
82:66:90:3f:f3:b9:59:7c:53:71:94:02:70:03:5d:0b:81:dc:
a5:a1:d7:93:8d:08:f2:6e:8c:96:7e:99:86:4a:a7:f6:eb:bd:
2d:f5:a8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:40:03 2025 by rpki-client