Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: 00lrIAr8BG0Oeo1/AN1JKKp5pt/5vlC40OYJMchFGSw=
Subject key identifier: BA:1A:E4:B5:DD:18:8D:F4:BD:C7:35:63:A9:E2:D7:6C:AD:4F:9A:78
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 019A2666F5E24425998172B2B39BF8362C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 10B1
Signing time: Mon 27 Oct 2025 16:01:13 +0000
Manifest this update: Mon 27 Oct 2025 16:01:13 +0000
Manifest next update: Tue 28 Oct 2025 16:01:13 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: o3ZWpc7RXOSrAl17Z3RZgYPxRm2ug4IcceZJcCe5kjE=)
2: QFbV3cLIo6fGM98z7n86TaXk26k.roa (hash: OdVi+1rHdt0zdTh+loubxHzRa31DZflpr11+itY/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:f5:e2:44:25:99:81:72:b2:b3:9b:f8:36:2c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Oct 27 16:01:13 2025 GMT
Not After : Oct 28 16:01:13 2025 GMT
Subject: CN=ba1ae4b5dd188df4bdc73563a9e2d76cad4f9a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:ad:2a:f3:75:04:7d:fd:a5:d5:cc:7d:a5:
82:8b:a1:07:01:ad:5d:82:a7:19:22:5f:51:c0:1c:
2e:06:e5:be:fa:f8:ed:ca:73:51:c2:e3:b8:f6:74:
2b:7b:29:c3:a5:33:87:d4:6b:2c:4c:e2:61:e3:bc:
c7:67:15:6e:b8:28:3a:95:f4:a4:eb:37:75:b7:93:
7b:ca:47:e4:17:e7:d5:44:1a:7a:69:67:a5:1b:36:
64:42:9a:30:21:ef:c0:7b:91:bd:7a:06:be:b6:77:
fa:47:0a:40:dc:88:48:32:48:74:65:f5:8d:9a:fc:
7b:35:0a:2b:17:21:35:15:8f:b5:0f:e1:7b:8d:ad:
fc:4f:e6:94:9b:d8:06:69:3a:40:6f:55:3d:21:0b:
5c:3f:c7:72:36:f2:90:d1:12:22:fb:30:fe:3a:17:
68:48:d6:f5:c2:5c:62:26:43:16:66:06:9b:05:c3:
9d:98:c2:cc:2c:f3:7b:be:f1:63:53:e6:85:5d:c6:
eb:f2:44:a0:51:51:b6:8b:2e:7c:1e:8a:85:6c:e6:
98:7c:bd:02:c3:ae:ab:17:2e:4f:13:27:7e:55:6d:
08:d9:39:f3:48:71:51:04:38:eb:d1:ad:e6:e2:fd:
43:e6:77:4c:db:24:dc:82:b4:30:76:70:6b:9b:70:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1A:E4:B5:DD:18:8D:F4:BD:C7:35:63:A9:E2:D7:6C:AD:4F:9A:78
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1d:a4:0d:1a:1a:f1:49:1a:8e:34:15:1d:71:cd:72:b9:20:
af:9c:d1:fb:de:01:01:8f:c9:41:3b:9d:02:f5:42:a3:d9:d0:
80:ef:33:fc:f5:c1:4c:3e:d3:61:5c:90:51:27:52:6b:a1:16:
e1:d7:b2:21:60:dc:e1:fd:59:19:60:ff:9d:d1:4f:e5:f5:59:
b6:14:de:ee:da:24:66:20:bb:14:69:92:a3:bc:c3:a3:16:30:
8b:55:e2:54:d4:3a:26:d6:c7:28:6d:1a:24:6c:b6:a4:d2:e6:
37:a8:5d:5a:59:c5:91:a6:59:a6:0a:e4:ba:27:84:5b:bc:4b:
ed:61:fe:b0:86:8c:e8:99:50:7b:b3:d2:92:fd:88:96:c6:72:
5f:fe:08:82:95:af:ad:37:71:ad:d5:1f:21:9e:a6:79:76:cd:
85:87:a0:d0:f4:dc:d3:42:8e:da:34:57:23:d9:51:6a:ba:d2:
84:3e:4d:a3:ae:ad:b9:47:aa:6a:b8:cf:cf:75:5a:84:f6:cd:
ee:fc:86:eb:1a:f3:a6:55:d4:4e:11:a7:1f:8b:ec:69:23:da:
c9:8a:53:40:0b:be:bc:ad:19:dd:0f:22:99:c1:c3:7d:1f:69:
80:62:46:5f:22:00:13:2a:97:fb:75:7b:5b:c4:6f:3a:e9:10:
4e:fe:53:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:18:41 2025 by rpki-client