Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier: W7/n59aDN2BnKvItFGy25X5tx1giJEQ/6JVFB4BIM5A=
Subject key identifier: DC:DC:C3:AC:F6:1D:3C:02:20:91:35:D9:C5:74:26:0C:33:BF:87:71
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial: 019848531E3AB17BEBA76082647D3B8897E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number: 152E
Signing time: Sat 26 Jul 2025 20:01:03 +0000
Manifest this update: Sat 26 Jul 2025 20:01:03 +0000
Manifest next update: Sun 27 Jul 2025 20:01:03 +0000
Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: mF53ZY0HiZACr5lnCZM6DZ3wHR5CSNPOUF7Wsw0VwMI=)
2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:1e:3a:b1:7b:eb:a7:60:82:64:7d:3b:88:97:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
Validity
Not Before: Jul 26 20:01:03 2025 GMT
Not After : Jul 27 20:01:03 2025 GMT
Subject: CN=dcdcc3acf61d3c02209135d9c574260c33bf8771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:ef:9f:81:9c:5f:05:61:6e:a5:88:1d:ba:
43:bd:62:00:b1:dc:08:23:5c:53:2e:d2:72:46:9e:
af:f1:e0:68:7d:d9:69:16:38:c1:f3:e7:41:81:f2:
d3:de:5d:d4:f3:83:28:eb:a7:ae:12:c0:0e:c9:2c:
af:59:bb:78:6c:b8:59:98:ad:06:15:ed:be:08:24:
e8:ed:04:6d:3f:a1:52:97:3d:4d:80:53:de:e1:b1:
a7:ba:6d:af:11:c1:c3:aa:5a:be:d5:96:90:b2:8b:
fb:a1:91:e2:b2:9d:92:bf:03:ae:ec:f0:15:fb:c4:
aa:4c:2a:00:b9:ae:af:e9:f6:ea:27:53:c9:ec:b3:
eb:ca:4a:f2:31:e4:82:80:da:6b:d8:30:23:52:fc:
32:08:e4:47:19:9f:6c:db:cf:67:93:b6:69:d2:b9:
bf:5e:ca:7d:65:0f:68:74:2c:0b:2a:58:0d:3d:8c:
aa:7d:b4:47:4b:d8:84:90:c1:0a:b8:b4:bd:84:67:
05:25:c1:0e:6b:56:05:28:e7:d4:85:cd:f3:a6:61:
cf:a6:f5:b1:6e:fd:a2:bb:f8:66:32:ba:75:6b:cb:
92:ee:87:9b:5f:56:63:a6:b9:df:b0:82:cf:db:c0:
28:72:77:39:86:6b:69:2f:15:6d:0b:ae:5d:e0:07:
84:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DC:C3:AC:F6:1D:3C:02:20:91:35:D9:C5:74:26:0C:33:BF:87:71
X509v3 Authority Key Identifier:
keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8c:a2:76:c2:09:00:46:c8:55:c1:b8:f0:38:d6:dd:d0:5c:
0e:1e:ea:6d:9d:77:a7:34:80:33:9f:92:b0:42:01:8c:11:57:
29:0f:c4:a3:57:5a:92:a7:6e:c8:b0:a2:aa:a1:d7:f0:4e:f3:
de:87:00:d2:95:f1:70:3e:e7:5a:06:ce:8e:03:b1:df:58:26:
b7:04:17:8d:92:81:4d:e8:b5:2a:ea:7e:ad:02:1b:e8:56:8c:
c8:5b:1b:c8:1f:07:ee:49:f5:38:d0:72:77:79:16:81:82:cd:
7f:99:2c:68:90:a2:fd:ff:be:26:40:68:eb:9a:fb:3a:7b:a8:
40:a5:bc:dc:94:ea:25:22:dc:62:34:03:38:ad:36:b3:f8:3e:
df:d1:43:ab:aa:ec:7a:30:72:71:8f:14:3d:9b:28:34:fb:5b:
d9:fc:13:d8:d2:c5:42:dc:4a:6f:58:54:56:35:55:dc:ca:9d:
33:dd:0c:62:e0:cb:c7:2f:ee:69:b0:d8:41:de:ca:e6:ad:43:
3f:d6:a3:28:00:c9:a2:c7:5f:56:3e:7f:ba:21:c3:4a:a1:74:
21:0b:79:df:4c:bf:75:bd:d1:d1:c9:99:33:d1:42:76:90:bc:
a2:6f:13:c6:77:0f:7a:aa:9a:ef:2a:93:45:19:a2:15:1a:31:
d8:5f:a6:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUx46sXvrp2CCZH07iJflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YzU1MjQ5ODg4MTg3NjU1NmYxNmUzMjNmMWNhMzY5YjI1
ZWRiMGMwHhcNMjUwNzI2MjAwMTAzWhcNMjUwNzI3MjAwMTAzWjAzMTEwLwYDVQQD
EyhkY2RjYzNhY2Y2MWQzYzAyMjA5MTM1ZDljNTc0MjYwYzMzYmY4NzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvPvn4GcXwVhbqWIHbpDvWIAsdwI
I1xTLtJyRp6v8eBofdlpFjjB8+dBgfLT3l3U84Mo66euEsAOySyvWbt4bLhZmK0G
Fe2+CCTo7QRtP6FSlz1NgFPe4bGnum2vEcHDqlq+1ZaQsov7oZHisp2SvwOu7PAV
+8SqTCoAua6v6fbqJ1PJ7LPrykryMeSCgNpr2DAjUvwyCORHGZ9s289nk7Zp0rm/
Xsp9ZQ9odCwLKlgNPYyqfbRHS9iEkMEKuLS9hGcFJcEOa1YFKOfUhc3zpmHPpvWx
bv2iu/hmMrp1a8uS7oebX1ZjprnfsILP28Aocnc5hmtpLxVtC65d4AeElQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzcw6z2HTwCIJE12cV0Jgwzv4dxMB8GA1UdIwQY
MBaAFAnFUkmIgYdlVvFuMj8co2myXtsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgt
MTFmMzY1YTczNTJjLzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgtMTFmMzY1YTczNTJj
LzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIyidsIJ
AEbIVcG48DjW3dBcDh7qbZ13pzSAM5+SsEIBjBFXKQ/Eo1dakqduyLCiqqHX8E7z
3ocA0pXxcD7nWgbOjgOx31gmtwQXjZKBTei1Kup+rQIb6FaMyFsbyB8H7kn1ONBy
d3kWgYLNf5ksaJCi/f++JkBo65r7OnuoQKW83JTqJSLcYjQDOK02s/g+39FDq6rs
ejBycY8UPZsoNPtb2fwT2NLFQtxKb1hUVjVV3MqdM90MYuDLxy/uabDYQd7K5q1D
P9ajKADJosdfVj5/uiHDSqF0IQt530y/db3R0cmZM9FCdpC8om8TxncPeqqa7yqT
RRmiFRox2F+mMg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:49:26 2025 by rpki-client