Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: ItL5fPO+ZkAJaNoyuw2ZfVxwUEJQtWPlq6K+71m80xU=
Subject key identifier: 48:2B:9F:DB:07:87:C3:13:B3:16:50:6A:A4:82:51:E5:75:9A:D8:C3
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 01984B556000EC342C28282A4BA82553CBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 0FBB
Signing time: Sun 27 Jul 2025 10:02:22 +0000
Manifest this update: Sun 27 Jul 2025 10:02:22 +0000
Manifest next update: Mon 28 Jul 2025 10:02:22 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: wCD6BSG6qDujzk5kdU8rHyOmNf/8VfwP+DyoJqs8Xa4=)
2: QFbV3cLIo6fGM98z7n86TaXk26k.roa (hash: OdVi+1rHdt0zdTh+loubxHzRa31DZflpr11+itY/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:60:00:ec:34:2c:28:28:2a:4b:a8:25:53:cb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Jul 27 10:02:22 2025 GMT
Not After : Jul 28 10:02:22 2025 GMT
Subject: CN=482b9fdb0787c313b316506aa48251e5759ad8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:2b:0a:26:26:01:c2:15:35:82:4b:f6:ed:
b3:5d:fb:b3:74:7b:08:e3:7e:55:51:df:c4:a1:a3:
44:4a:52:f3:59:84:1c:8e:46:9f:62:9f:33:be:8a:
4b:c5:99:e1:52:98:07:d8:0e:b6:51:d0:58:1c:47:
3b:33:e4:0e:dc:ce:03:ee:53:f0:82:d9:bc:c2:a6:
22:fb:12:d4:6b:dd:e3:7b:35:38:69:4e:50:40:cc:
fb:a1:69:37:a4:0f:00:be:06:40:3f:f5:37:3a:0c:
e7:a0:72:48:0e:ee:e6:59:55:43:03:3c:60:ba:98:
23:7d:5b:19:0c:e9:bd:22:14:7d:87:fb:f0:35:5d:
6a:2f:fa:42:29:0b:17:c8:64:bf:93:dd:e0:cd:d8:
bf:04:7d:87:d4:31:2d:9b:e8:79:ec:bd:fb:43:07:
21:bb:29:65:d4:b1:a5:93:5a:ec:71:c5:c8:d5:20:
35:6d:9d:88:fd:3e:6a:14:c7:9c:9f:d2:71:d1:af:
eb:ce:03:e9:23:2d:1d:5f:1a:b1:f7:af:f7:20:10:
dd:91:cf:52:b2:23:06:5b:28:f6:d8:8b:14:04:5a:
9b:48:d0:37:42:a7:7e:8a:d8:c6:b3:75:f3:65:fa:
66:98:5e:94:b6:4a:e3:71:66:e6:b4:a9:95:86:57:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2B:9F:DB:07:87:C3:13:B3:16:50:6A:A4:82:51:E5:75:9A:D8:C3
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9c:04:c3:90:1a:f8:cd:35:1a:29:2a:da:b1:d0:e0:60:8d:
c2:cf:95:c1:1a:3b:71:51:58:4f:19:eb:7b:1d:17:31:62:88:
78:1c:1d:ea:2a:ae:cf:54:6f:99:a6:4d:ae:54:18:f0:a0:5c:
6a:d9:ee:f6:a3:8a:5f:2f:2b:ed:89:dd:da:33:41:6e:8b:03:
e8:d4:e2:b5:d9:bd:1a:7c:f0:9d:4a:26:dd:83:62:d4:ea:b8:
25:03:9e:10:64:55:3b:99:8b:63:ef:33:c0:fd:c0:89:37:f9:
9b:37:e6:b6:b6:2d:d6:fa:a7:e4:60:b0:59:66:62:0d:cf:97:
b9:99:d0:4f:f5:b4:a8:2f:40:de:47:68:a4:29:51:13:ec:bb:
f4:10:9a:7e:6e:3b:a8:4b:5d:c1:69:ad:da:55:50:34:4a:cd:
5b:c0:a0:72:9c:70:aa:d8:52:7c:ba:14:12:cd:7b:b1:fe:98:
9a:3d:7d:c4:d5:b2:05:0b:4b:90:88:8a:79:3b:34:ca:4e:67:
8a:bf:82:3e:67:0d:b8:05:50:0e:5d:fb:92:8b:bf:25:64:46:
54:f2:97:ad:29:d9:c2:e8:18:5f:93:16:6e:20:06:9f:c2:94:
92:02:5a:d3:2a:3b:cc:0a:67:c3:d6:8a:71:6f:18:39:fe:cd:
03:ea:43:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:51:34 2025 by rpki-client