Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
File: CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft (raw, json)
Hash identifier: 0JlivGiRqLPRDoKczy3iWgEClO7tUunb2posXUEm4uA=
Subject key identifier: 6F:4F:78:D3:21:B5:09:58:F2:B6:95:F6:10:0D:4B:75:2F:96:2F:26
Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
Certificate issuer: /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Certificate serial: 019A70DC1749130D8B4C076A749941757729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
Manifest number: 04BD
Signing time: Tue 11 Nov 2025 03:01:03 +0000
Manifest this update: Tue 11 Nov 2025 03:01:03 +0000
Manifest next update: Wed 12 Nov 2025 03:01:03 +0000
Files and hashes: 1: CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl (hash: VCsR5OK3GMmVw4j+3kUhdQFcAqf5EMeAj63SFdb3r4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:17:49:13:0d:8b:4c:07:6a:74:99:41:75:77:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Validity
Not Before: Nov 11 03:01:03 2025 GMT
Not After : Nov 12 03:01:03 2025 GMT
Subject: CN=6f4f78d321b50958f2b695f6100d4b752f962f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:8a:43:d1:47:da:39:23:55:4c:e9:b6:27:
3b:e1:d7:43:67:88:ce:0f:29:fd:1e:ea:4b:f1:6f:
fe:85:5c:37:fe:32:a4:4a:a5:63:8a:26:98:5e:05:
7d:1a:6c:08:b1:d9:2e:1e:35:01:08:97:51:a7:0a:
23:32:e5:95:73:da:d4:7e:9f:7d:e0:93:5e:cb:79:
f2:c3:db:30:71:48:b7:25:a2:3c:bb:f5:cb:26:fc:
96:75:19:3a:5f:89:a4:cf:76:a0:39:14:e5:15:8c:
a8:14:64:d0:e2:fc:bc:e6:88:cd:c4:07:da:0b:57:
58:cb:8b:df:32:d5:68:23:c0:d0:3d:92:1e:a2:3f:
b0:9b:86:35:64:58:31:0f:7a:96:14:73:ec:d5:6e:
06:be:fa:b2:6b:8a:c5:d4:ed:39:ea:43:d0:60:89:
38:cd:ec:9f:1e:f8:e4:1e:a8:66:73:02:89:aa:44:
ed:59:23:03:da:fd:ab:11:81:6f:db:18:8e:1b:62:
0e:66:84:d0:67:a4:aa:5d:42:24:e1:ec:1c:8e:78:
a2:e1:38:13:f0:b6:63:99:11:39:65:5a:50:5c:60:
d9:e2:f8:4c:a2:be:6b:69:bf:3e:2d:3f:2c:34:11:
02:90:b1:67:d6:e3:c4:c3:7c:44:7e:9c:b7:08:e8:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4F:78:D3:21:B5:09:58:F2:B6:95:F6:10:0D:4B:75:2F:96:2F:26
X509v3 Authority Key Identifier:
keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:31:29:80:9a:f3:b3:22:ab:26:2c:17:55:8a:26:79:26:c5:
73:0f:93:2b:8c:81:b3:ce:8f:32:4d:e7:2a:7f:95:6f:ec:89:
ee:46:e7:92:0a:e3:d5:32:ee:6a:f3:0f:3d:99:62:46:43:4f:
38:c6:f6:0d:b9:38:91:c2:60:7f:fc:4a:21:60:2f:d2:fc:23:
ef:33:3d:18:d8:7c:91:fe:67:97:d5:84:98:d3:eb:f8:0f:6d:
7a:20:7a:e5:7d:72:99:06:b2:2a:5c:56:0b:ce:98:30:cf:40:
c8:71:7a:8d:fb:64:d0:04:b4:b0:35:98:76:d9:8b:c4:09:da:
fd:b4:c4:74:e7:ff:c7:df:e5:ca:58:49:e0:05:24:9e:be:9a:
c3:d2:e3:68:ed:46:06:d3:cc:b8:1c:b4:0d:7c:bc:cb:cd:6b:
cd:f5:29:fd:fb:d5:d6:e3:c2:e0:d1:cc:de:b9:31:66:80:36:
f7:59:20:f5:77:2f:17:18:31:c8:5e:83:15:2a:c6:90:de:a3:
ce:5e:a6:63:f6:33:3d:b6:84:07:30:45:8c:ce:19:d0:91:97:
37:09:b0:ed:53:dd:1a:8a:b8:b8:3e:78:14:4c:2f:8a:15:1e:
0d:b5:0d:03:f2:32:7b:2e:d3:31:5e:41:dc:ef:92:ee:c3:df:
ac:23:55:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:36 2025 by rpki-client