Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: pwqr1+NlXrrdAYVfo+u9pbMR+lVIJB5h7N9Iagtstt4=
Subject key identifier: 11:DA:8B:C8:0B:97:7C:D6:0B:52:7E:B1:71:10:0C:47:4E:91:E2:3A
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 01983FBD29A98E19A28ABBE45C22D1A803EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 1600
Signing time: Fri 25 Jul 2025 04:00:18 +0000
Manifest this update: Fri 25 Jul 2025 04:00:18 +0000
Manifest next update: Sat 26 Jul 2025 04:00:18 +0000
Files and hashes: 1: 0xDZgWnts24csgnMxUD8LWhBHU4.roa (hash: Y8cjviLWLv7KyuSufCFJinPdimRipqIY80BDPZZpv3c=)
2: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: PsoNo8IstilbI7O5u1sFFTe/u6h2TfmLNS9LX/ESk0I=)
3: U_CJPYiKsC4pTY0SsfSjtBrH8dE.roa (hash: AQXnBaIOWVXqlXh1gif0C/a7bntYjy34IbEEU6kS/30=)
4: a7j4aToRp-Rf0IqyeByNF9Ocsfw.roa (hash: 9QeK1R+lwAXK6vSpE67n1ijYEIdp5QQxcwabJABYuQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:29:a9:8e:19:a2:8a:bb:e4:5c:22:d1:a8:03:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Jul 25 04:00:18 2025 GMT
Not After : Jul 26 04:00:18 2025 GMT
Subject: CN=11da8bc80b977cd60b527eb171100c474e91e23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:0f:f2:81:54:4d:0e:12:bb:96:42:ff:2d:
3b:1e:bb:50:ae:42:26:92:8a:32:26:e8:ad:41:dd:
b1:1e:81:85:a8:24:59:61:ab:3e:5b:b8:a4:3c:72:
a9:d3:e3:33:a6:c0:f6:a5:cd:74:f3:e0:07:80:2d:
ec:52:b0:aa:07:e4:cd:47:75:e8:b4:bc:41:12:1b:
d3:7e:92:db:a3:31:eb:33:f9:4b:21:f6:91:0c:0f:
bd:74:e2:81:30:26:1c:7f:08:46:82:b9:8b:1c:d9:
06:42:8f:8a:13:16:34:cc:04:b6:78:7f:fb:c1:a9:
7b:33:0f:f1:38:8c:0c:71:a2:dc:db:95:b9:1c:91:
a2:ec:06:40:c7:71:a9:5e:0f:df:de:0a:55:e2:a3:
83:21:bb:af:98:cc:5f:45:31:fc:e0:38:cf:ee:37:
38:fd:f4:23:f0:3b:0d:a2:59:d5:11:18:72:bf:2d:
89:41:4f:7f:80:80:f1:54:51:6a:18:34:b0:4c:7e:
cd:07:6e:ed:15:f9:5b:af:81:ef:87:0c:58:81:e5:
dd:c6:8e:9c:04:64:43:37:36:b0:b8:f2:c0:4e:32:
0e:ac:77:0b:08:46:06:2d:70:a4:bc:de:44:02:96:
ad:bd:5a:a2:47:b8:e3:be:2d:34:59:5d:9f:cb:de:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DA:8B:C8:0B:97:7C:D6:0B:52:7E:B1:71:10:0C:47:4E:91:E2:3A
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6f:05:db:db:4d:92:91:29:12:5f:83:6c:4b:87:ee:b7:e2:
28:e3:c2:53:a7:de:ac:58:08:91:9a:4f:da:b5:e7:7a:a3:23:
f6:23:64:ac:36:86:97:3d:65:bc:68:7b:77:97:d7:3c:7e:94:
4f:d3:a0:51:09:df:2c:9e:bf:6f:13:d6:72:91:a6:48:33:57:
b2:a6:d8:e0:36:76:83:07:77:4b:38:36:cc:8f:cc:98:f4:c8:
7f:ce:7e:72:d4:6b:5c:2f:25:45:28:20:31:46:58:a1:8b:03:
a5:c4:ea:ce:0b:ab:06:30:33:12:c4:f5:48:50:c1:e7:8c:92:
28:9f:de:83:20:dd:a8:86:d4:2e:ab:b0:72:05:3d:83:d7:f7:
70:02:2b:3b:a8:27:6d:01:ae:4a:7f:df:6e:37:6a:d1:c8:87:
05:6b:0a:b1:de:08:ed:bd:8d:7b:be:70:c9:8e:f7:57:6c:7a:
66:99:86:7e:e0:4e:5b:ba:44:64:98:32:6b:a3:b9:8d:57:d0:
91:7a:75:7e:10:cc:ec:57:39:bb:7c:7a:a8:06:22:8e:e2:02:
d7:6e:94:cf:13:a1:a1:23:b7:76:7a:37:3e:df:dd:48:a6:9c:
a0:d1:e9:77:55:38:2a:dd:ce:ee:6d:d5:41:d0:79:8c:07:43:
e0:96:c0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:08:02 2025 by rpki-client