Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: T7QbSfF2JZJu9v8nXUNpAQEDrfWcZYo7s/AF3O9gpUk=
Subject key identifier: E2:3E:E5:02:35:7E:4B:A5:27:C8:F4:C2:67:C0:0B:B6:14:8A:87:C6
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 019A71EECEEC26AC0E293AD8C617C4A733D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 0892
Signing time: Tue 11 Nov 2025 08:01:07 +0000
Manifest this update: Tue 11 Nov 2025 08:01:07 +0000
Manifest next update: Wed 12 Nov 2025 08:01:07 +0000
Files and hashes: 1: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: efJIU8SDTJ8GOMjhna3+zM1k0sU7l1094Hl7S+Oi+pA=)
2: vUAfXYF9TFNLnOrzGOBoj2EvRGM.roa (hash: qsEDepbRFwFuvWf4t9/SaCwgVj17b+21naMELXmYJ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ce:ec:26:ac:0e:29:3a:d8:c6:17:c4:a7:33:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Nov 11 08:01:07 2025 GMT
Not After : Nov 12 08:01:07 2025 GMT
Subject: CN=e23ee502357e4ba527c8f4c267c00bb6148a87c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:f6:1b:de:5f:81:80:cc:94:4f:fe:87:9e:
07:3f:b1:76:01:a2:30:c8:88:ad:3d:be:55:e5:fa:
1a:7d:14:ad:4a:0b:e5:2a:4c:b3:fa:d9:ba:3e:37:
00:a9:92:e6:36:52:94:3f:94:d5:25:a0:cf:36:53:
a8:b3:08:74:03:40:64:73:be:f3:81:89:ef:fc:6e:
45:7e:73:9c:66:bc:e4:97:ea:e1:3e:70:ed:d3:df:
94:62:0d:e2:35:fd:4b:cc:4e:0d:9b:7c:7b:8f:43:
a8:a0:c2:f3:33:c5:41:4c:da:fa:5e:0e:cb:73:d8:
8e:e9:fc:42:34:0f:56:58:bd:ce:1f:89:f3:c2:5c:
74:2e:63:9b:40:c1:0b:14:70:e3:0c:d6:0b:21:c2:
81:85:0b:1c:9d:b9:84:95:af:4f:37:e0:9d:f0:58:
fb:c5:17:c7:f3:2a:5d:4c:8d:0c:f4:f0:c6:ff:b9:
ac:1a:65:b1:54:ca:32:6e:eb:d1:5d:1b:f7:fb:91:
0f:17:8f:94:df:fc:1c:7c:e4:bd:7b:96:11:78:be:
c7:a8:64:2a:91:82:39:d2:98:19:81:94:9b:3f:ff:
79:c1:0d:09:9f:33:03:17:80:a2:2a:c1:41:e2:40:
64:70:aa:5a:6d:d1:39:14:83:98:88:38:6d:37:44:
63:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3E:E5:02:35:7E:4B:A5:27:C8:F4:C2:67:C0:0B:B6:14:8A:87:C6
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:04:3f:0d:47:67:78:fc:05:71:42:47:ec:ae:dd:88:b9:9e:
b8:9f:40:4d:5b:06:20:24:a7:75:08:c4:a2:53:43:1c:cc:70:
cb:34:1b:8c:29:3e:06:91:9e:f2:a7:5e:64:e6:59:45:25:d1:
c7:a4:3c:0f:5d:85:f9:ed:89:3c:4f:22:b3:79:86:2f:ce:3a:
4a:69:4b:ef:e9:47:3c:01:c8:8d:70:f4:f6:14:62:89:34:06:
98:83:01:2e:2f:ac:15:d8:a9:e0:0f:70:b2:08:42:a1:a1:9a:
ae:73:48:bf:ae:71:04:9c:bd:3c:d8:86:ac:8a:18:ee:77:4c:
01:a8:66:de:04:a3:bb:d2:6c:cb:ba:5a:bd:8a:e0:95:49:bf:
5e:88:ff:0c:01:af:00:d1:81:09:c6:a1:fa:d9:a7:41:3f:74:
7b:7e:2e:43:9c:45:d3:74:9d:fe:50:d9:be:20:e2:b9:f5:5f:
db:d2:f5:41:20:58:2b:98:27:82:6d:10:37:82:cf:04:9a:b4:
b2:6e:d4:c5:2a:f7:1b:c2:a7:fc:dd:24:86:ef:6c:e4:2d:5d:
71:99:a5:93:22:30:cd:2d:08:e7:1f:97:8b:38:45:a6:49:8f:
c2:3b:3f:f9:a7:da:c3:e3:51:d9:73:8c:fc:6e:7a:54:b5:3e:
ee:00:4a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:25 2025 by rpki-client