
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
File: CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft (raw, json)
Hash identifier: dHHBBGVx5+1iiUTIRQP2IKRi6vTvMhlGdzNQi7URS4M=
Subject key identifier: B0:BC:63:16:35:93:E6:F0:57:46:08:50:5C:1C:04:AB:08:0D:4B:5A
Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
Certificate issuer: /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Certificate serial: 019922C39071AD1FC630BEB02C9B38B9A209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
Manifest number: 0410
Signing time: Sun 07 Sep 2025 06:01:05 +0000
Manifest this update: Sun 07 Sep 2025 06:01:05 +0000
Manifest next update: Mon 08 Sep 2025 06:01:05 +0000
Files and hashes: 1: CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl (hash: TfIsy+cPx2kghIkQ41X/W+bCOGPSHFvJt+L5XNvxx8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:90:71:ad:1f:c6:30:be:b0:2c:9b:38:b9:a2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Validity
Not Before: Sep 7 06:01:05 2025 GMT
Not After : Sep 8 06:01:05 2025 GMT
Subject: CN=b0bc63163593e6f0574608505c1c04ab080d4b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:fa:fa:86:31:da:e9:ae:00:93:8c:ae:cc:
37:73:2e:4b:4f:c1:79:55:2e:6f:97:6e:b8:61:c1:
e4:35:fc:74:e5:b8:e4:a0:99:2f:ac:50:9b:c9:db:
ef:8e:f3:bb:5a:03:0c:0b:28:67:08:37:e2:fe:51:
89:3c:f4:59:3f:af:7b:f5:99:e4:ed:bf:3e:ed:07:
94:97:2f:34:2d:60:13:47:ce:cd:e5:17:4d:13:12:
26:53:be:10:b9:4d:2e:dd:4c:29:76:94:25:48:17:
72:01:09:17:e4:50:c4:24:ad:b6:d1:4c:9f:72:51:
8a:f1:d4:bd:a4:79:bc:d8:35:62:00:9d:3f:09:4f:
06:95:86:ad:cb:b9:4d:af:bf:1f:d1:ad:7f:aa:1c:
14:eb:d9:09:2f:65:cd:d1:7b:b6:38:fd:40:4b:64:
7b:2c:ad:ab:5e:8f:5a:5f:11:b3:3d:34:13:91:23:
41:16:bc:bf:11:a8:f6:27:57:78:07:ea:aa:17:67:
00:01:9f:3a:9e:5f:4c:ec:8a:95:c7:04:7b:c8:ad:
1a:ec:9f:c4:23:2e:c9:06:32:ff:39:ca:60:6e:2e:
76:08:81:d3:24:d9:65:7e:9a:6f:a7:5e:02:b9:c1:
f2:b1:41:d2:26:99:40:21:50:a5:3f:cd:45:1a:85:
92:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BC:63:16:35:93:E6:F0:57:46:08:50:5C:1C:04:AB:08:0D:4B:5A
X509v3 Authority Key Identifier:
keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:96:ef:95:dd:61:0a:40:f4:51:62:81:69:6d:24:29:54:73:
47:c4:f1:8b:7d:6d:9d:23:c1:2a:76:cb:08:6b:c5:84:45:8a:
19:42:1d:f5:df:06:a9:d4:79:0a:7b:47:ce:c6:bf:31:b6:a2:
1d:74:7a:f4:2b:7e:f6:b8:3d:69:bc:e9:c4:47:d3:d0:13:e5:
92:8d:3c:48:22:3f:5d:6b:a7:73:77:95:25:fa:66:d8:81:7a:
79:75:f3:20:9c:4b:c4:10:f6:ca:8b:dc:0a:50:a2:77:80:73:
04:c8:e6:e8:e3:12:80:0d:1b:3b:61:70:7b:15:1e:bf:18:3c:
cb:61:9a:10:18:1d:f2:e3:ef:18:20:ea:27:06:10:1f:72:0d:
92:a3:3c:b6:46:74:c6:10:9f:dc:fc:ab:92:36:f7:d4:b9:b9:
51:e7:24:41:92:5b:75:9a:17:4c:73:ab:00:a6:a6:82:6f:33:
e6:93:34:97:7f:75:58:05:c7:6b:9b:92:a8:9d:f8:cc:d6:9f:
5d:49:09:9c:a5:6e:9a:f6:1e:ab:91:b9:15:58:a6:8d:d1:39:
be:f4:ce:f8:c2:c4:8c:4e:cc:2a:be:43:a4:b6:aa:78:6f:59:
bf:e7:ef:68:58:32:cc:df:3f:5c:00:2d:ba:b9:b7:33:80:35:
e3:c9:0d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:40 2025 by rpki-client