Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
File: CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json)
Hash identifier: vOBOrj1xHLAvzFxspimCgdWIqkna6gey4L6PZK/78AM=
Subject key identifier: 1E:C6:70:B8:42:F8:5F:28:00:3B:5F:47:00:62:E8:C9:2D:B6:60:21
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial: 019A21E4E818627B98C07402BD194100C112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
Manifest number: 1686
Signing time: Sun 26 Oct 2025 19:00:40 +0000
Manifest this update: Sun 26 Oct 2025 19:00:40 +0000
Manifest next update: Mon 27 Oct 2025 19:00:40 +0000
Files and hashes: 1: 61-G3WXkR-SwbN4v7xZM_7MiENo.roa (hash: dPwb3l0zAU2N1RIH5n+vuaC+VR/dScikzlcMxqnd6Lg=)
2: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: NoVtsjcY86M268s2CwI/Wd005M+RMBvFWWoWEG+/jes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:e8:18:62:7b:98:c0:74:02:bd:19:41:00:c1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Validity
Not Before: Oct 26 19:00:40 2025 GMT
Not After : Oct 27 19:00:40 2025 GMT
Subject: CN=1ec670b842f85f28003b5f470062e8c92db66021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:61:1d:4b:d7:5d:2e:9d:25:e7:2b:f0:46:
f4:bf:be:81:38:75:bf:16:6f:1d:93:91:9c:65:a5:
15:1d:2b:fb:65:6c:a5:55:04:24:e5:bd:c6:e7:16:
69:51:f7:ba:e8:d8:68:28:fe:20:be:6c:86:3f:06:
90:1b:ef:ab:83:c7:bb:85:b6:ec:fa:e3:85:e5:2b:
ba:b1:3d:0b:08:08:19:a5:fc:58:1f:ef:b8:33:8b:
4c:88:4e:b4:a6:0a:69:da:7a:e9:da:22:3a:26:bd:
5c:af:94:ba:58:23:51:77:e7:08:5d:85:92:84:09:
42:94:5d:94:f0:0f:69:60:d8:3f:20:b7:5c:2e:08:
39:b1:54:2b:e0:d4:68:02:c9:12:b3:13:6e:19:96:
57:5f:3a:cc:d2:f8:77:0c:c7:f3:53:d3:5a:67:53:
36:f0:a1:35:10:61:83:cf:3c:32:28:06:1d:36:f9:
57:6a:51:d0:14:ae:2d:b2:93:d0:14:3a:32:e9:26:
5e:a0:72:9d:24:bd:15:64:e0:bf:20:49:77:bb:fd:
60:27:60:05:99:d2:8a:39:88:92:43:26:d8:e5:af:
ae:86:57:52:1f:7f:09:4c:9a:b6:cc:59:29:34:ba:
1e:95:c6:a1:0a:c5:7f:50:c8:5f:77:bb:6e:81:7c:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C6:70:B8:42:F8:5F:28:00:3B:5F:47:00:62:E8:C9:2D:B6:60:21
X509v3 Authority Key Identifier:
keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e3:8b:79:2a:c3:e1:dd:6f:0d:80:2b:ec:68:f5:48:fc:03:
98:b7:e5:93:2d:f7:d4:f4:e6:58:01:d7:5a:3c:e1:ac:87:1e:
17:42:77:f2:c9:fb:c3:ce:de:1f:75:d0:16:c0:77:6a:10:73:
5d:c5:d0:58:d9:41:66:f1:a2:23:cb:3e:5e:25:56:c2:c9:1b:
3e:12:31:87:0c:3b:9e:c0:f1:1c:bf:00:7a:22:ee:75:10:27:
41:06:e1:cc:cc:09:7f:f5:9c:57:b2:74:02:54:4b:fd:fc:a5:
f3:94:56:ea:a5:35:45:78:78:ff:fc:f4:82:8f:60:27:8f:d7:
93:a7:16:0b:94:d6:9d:09:6c:c5:3d:a1:1e:a3:57:35:4a:a3:
85:04:ab:6b:20:c5:db:ab:6c:42:8d:07:38:76:a5:0f:32:82:
10:d5:59:56:39:58:54:fb:73:1e:4f:dc:1e:f7:76:17:29:4d:
bc:3f:a6:2a:a5:9f:12:c5:1e:92:bd:87:e2:c5:8b:f1:4b:91:
2b:a3:86:8b:ea:a6:8d:b3:94:75:8a:a3:5b:5e:0d:5d:bf:98:
14:ff:2f:df:1e:e9:3d:55:36:b3:32:5b:78:ce:80:78:19:bc:
f3:83:46:97:4d:05:29:cb:af:11:5f:a6:0d:b5:4f:ef:7d:44:
57:a9:55:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoh5OgYYnuYwHQCvRlBAMESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YzcxNDYwZWE0MWQzZTY1NjVjNGI0MTBiMjZjOWU3OGNl
MTZmOWYwHhcNMjUxMDI2MTkwMDQwWhcNMjUxMDI3MTkwMDQwWjAzMTEwLwYDVQQD
EygxZWM2NzBiODQyZjg1ZjI4MDAzYjVmNDcwMDYyZThjOTJkYjY2MDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXhhHUvXXS6dJecr8Eb0v76BOHW/
Fm8dk5GcZaUVHSv7ZWylVQQk5b3G5xZpUfe66NhoKP4gvmyGPwaQG++rg8e7hbbs
+uOF5Su6sT0LCAgZpfxYH++4M4tMiE60pgpp2nrp2iI6Jr1cr5S6WCNRd+cIXYWS
hAlClF2U8A9pYNg/ILdcLgg5sVQr4NRoAskSsxNuGZZXXzrM0vh3DMfzU9NaZ1M2
8KE1EGGDzzwyKAYdNvlXalHQFK4tspPQFDoy6SZeoHKdJL0VZOC/IEl3u/1gJ2AF
mdKKOYiSQybY5a+uhldSH38JTJq2zFkpNLoelcahCsV/UMhfd7tugXzIGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7GcLhC+F8oADtfRwBi6MkttmAhMB8GA1UdIwQY
MBaAFAnHFGDqQdPmVlxLQQsmyeeM4W+fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xMTU3MDMtOTIwYi00YzUxLWIzNDAt
ODZjZjA2YWNiZjQxLzEvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8xMTU3MDMtOTIwYi00YzUxLWIzNDAtODZjZjA2YWNiZjQx
LzEvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+OLeSrD
4d1vDYAr7Gj1SPwDmLflky331PTmWAHXWjzhrIceF0J38sn7w87eH3XQFsB3ahBz
XcXQWNlBZvGiI8s+XiVWwskbPhIxhww7nsDxHL8AeiLudRAnQQbhzMwJf/WcV7J0
AlRL/fyl85RW6qU1RXh4//z0go9gJ4/Xk6cWC5TWnQlsxT2hHqNXNUqjhQSrayDF
26tsQo0HOHalDzKCENVZVjlYVPtzHk/cHvd2FylNvD+mKqWfEsUekr2H4sWL8UuR
K6OGi+qmjbOUdYqjW14NXb+YFP8v3x7pPVU2szJbeM6AeBm884NGl00FKcuvEV+m
DbVP731EV6lVlQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:43:05 2025 by rpki-client