Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier: mxAd9bLZSMn7zalTVirfXE0I4ATQO2ePGBZuOO7M770=
Subject key identifier: 9C:5A:8C:55:64:82:87:19:8D:C5:CC:1D:0C:74:3E:33:A3:26:F1:02
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial: 019A03A40DA2AAA20C630BC34152C2A2D204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number: 1127
Signing time: Mon 20 Oct 2025 22:01:14 +0000
Manifest this update: Mon 20 Oct 2025 22:01:14 +0000
Manifest next update: Tue 21 Oct 2025 22:01:14 +0000
Files and hashes: 1: F6TRgo1Qxqb0z2HOICITaJq6vVA.roa (hash: HB4jpWzWtSDjiUJivZqFCyvc7yAlpLdjecgjjSvTmVc=)
2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: +7gDRA6daDpupyZSDBSmOOZxj2JmQjdkC8jgPvU42S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:0d:a2:aa:a2:0c:63:0b:c3:41:52:c2:a2:d2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Validity
Not Before: Oct 20 22:01:14 2025 GMT
Not After : Oct 21 22:01:14 2025 GMT
Subject: CN=9c5a8c55648287198dc5cc1d0c743e33a326f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:66:af:95:79:66:70:0f:f1:49:1c:86:b4:1f:
86:32:87:d9:b8:d8:39:b4:e9:6f:d3:00:94:47:5e:
a1:ea:e4:72:85:95:e7:e2:bf:71:a7:d1:bc:8d:19:
0f:e1:c5:57:2e:50:fe:3d:4c:1c:4d:8c:f7:18:fd:
e6:9c:d5:c9:50:25:75:96:7c:82:52:5d:8e:bc:a6:
51:45:a3:1d:a7:93:39:54:be:ca:1a:71:25:53:bf:
64:86:1a:1a:65:bf:aa:95:51:4d:54:ac:13:5f:ee:
d6:1e:6a:98:37:ca:76:44:ac:c2:87:06:d6:18:fe:
89:07:77:f4:9a:b2:ea:03:f3:8d:dc:56:a3:01:06:
a2:82:fb:39:a6:d7:64:48:cf:5b:e8:da:1e:19:66:
56:ef:ba:bd:2c:9c:e7:5a:a0:62:f1:5f:6b:2f:e2:
42:c1:d9:d7:71:02:84:a1:fe:be:89:35:6b:e1:f2:
40:0d:1e:34:7c:4e:4f:7b:92:94:08:f8:03:19:57:
10:e7:b9:c2:1f:f0:1f:19:47:bc:db:1f:58:cb:b0:
30:50:ab:59:76:ed:48:27:40:74:a9:1e:4c:ea:b1:
db:8e:66:0b:ab:e8:cf:cb:c3:fa:0e:05:38:53:64:
bd:06:bf:f9:ee:be:93:b2:cb:d9:a6:dd:15:cc:8f:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5A:8C:55:64:82:87:19:8D:C5:CC:1D:0C:74:3E:33:A3:26:F1:02
X509v3 Authority Key Identifier:
keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0a:b0:47:f5:7c:95:4a:7e:03:3d:f9:a9:c3:c6:2d:84:41:
09:27:c1:d6:06:8a:61:dc:56:ff:54:ba:96:a8:89:2d:be:b2:
67:9d:ca:e9:91:6e:20:8d:be:67:60:a7:b1:be:b1:b6:8b:21:
15:c6:c9:cd:69:3d:24:a9:71:87:2e:ca:e1:e1:82:e5:67:d3:
be:ad:c5:ca:72:95:9e:83:09:8d:04:24:fd:14:9c:66:a6:ae:
ed:cd:c9:b4:7f:b7:5c:2c:0f:45:85:6c:67:a0:5e:cd:83:d2:
7b:f1:73:9c:e1:93:35:6f:28:d3:a9:df:98:6a:5e:2b:3f:0e:
a1:44:43:dc:d7:4f:50:46:38:ff:45:e7:3a:ae:38:5d:90:87:
c1:cf:3f:ad:ac:ec:98:ec:a5:e4:75:f1:84:6b:2e:cf:79:1b:
6e:68:0a:b4:f5:6d:e1:52:4c:df:77:63:4c:88:ed:e8:6c:34:
80:69:95:5f:33:33:c8:93:3d:fb:83:4e:8f:40:cf:90:38:c5:
0e:b6:13:43:6e:ed:55:f4:c2:a7:e7:e4:6d:ae:dd:12:f9:ad:
9c:b8:f1:dd:ab:df:3a:2c:77:d5:b7:2b:26:15:3a:2d:10:35:
61:bf:e2:97:aa:c8:16:60:d0:83:6c:d8:c2:86:f1:b6:25:65:
b8:69:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:55:29 2025 by rpki-client