Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
File: a4d_CC_1_vSwfPj3wPcTNLyLhII.mft (raw, json)
Hash identifier: QS90XiY+9GyVjpS3UKvUj8q49DaXVLOxa7lNa0otENk=
Subject key identifier: 96:4B:D4:6A:DC:7C:84:82:E5:FC:F5:24:0E:4E:64:4E:D2:E6:E2:B8
Authority key identifier: 6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82
Certificate issuer: /CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
Certificate serial: 0199221E35478855FE16A63D51C4210C650A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
Manifest number: 0CC1
Signing time: Sun 07 Sep 2025 03:00:28 +0000
Manifest this update: Sun 07 Sep 2025 03:00:28 +0000
Manifest next update: Mon 08 Sep 2025 03:00:28 +0000
Files and hashes: 1: WCDr0C7BpS_ig7DZMYGJWIavE9c.roa (hash: ZsfN2PWj+HvImmXbTTvAz0j0hR2wbZeR5zuw9m+NkaI=)
2: a4d_CC_1_vSwfPj3wPcTNLyLhII.crl (hash: 4i1chpdy0AjhCYsdviAyu/5oo3578K+mhK9N0OP6hkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:35:47:88:55:fe:16:a6:3d:51:c4:21:0c:65:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
Validity
Not Before: Sep 7 03:00:28 2025 GMT
Not After : Sep 8 03:00:28 2025 GMT
Subject: CN=964bd46adc7c8482e5fcf5240e4e644ed2e6e2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:e5:f2:3a:fb:e7:35:f4:1c:15:fe:42:3c:
60:5f:cc:33:76:5b:97:92:2a:da:94:45:67:79:40:
c3:18:35:e6:15:0b:65:e6:f3:43:10:0b:9e:c3:ff:
4b:a4:3c:a4:50:9c:92:db:ef:b1:86:25:e6:69:5f:
68:1e:3a:3a:fd:89:45:50:ec:e0:c8:22:84:e6:c1:
ca:8c:53:93:e1:d3:a6:47:59:39:59:15:c7:49:ba:
7d:68:eb:0a:83:d2:f0:73:e9:21:5e:f0:a5:16:76:
a2:91:f3:ca:e0:33:3d:8d:8c:b2:3d:55:c0:29:c7:
d4:09:af:2b:e8:ef:08:5a:8d:0b:9a:27:fa:63:ac:
91:c2:27:dd:5a:a6:a8:04:c7:a6:cb:23:03:cc:0d:
70:87:54:c0:34:8e:8d:74:3f:d7:f1:a8:c7:db:54:
0f:08:1d:87:ea:ec:0b:b3:58:97:db:5a:89:46:ed:
15:f0:b7:63:12:af:d6:aa:5e:bd:e3:1c:97:26:36:
f2:3a:17:92:73:33:09:2e:f9:9e:b6:48:53:cf:ed:
f8:3d:ad:63:ff:fe:d2:74:71:5a:77:07:81:c5:f8:
c9:42:db:e0:19:d1:c9:61:a7:a7:69:f4:7d:d4:f9:
4d:2d:cb:98:d7:45:0f:17:e0:22:3f:91:6a:97:d4:
a2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4B:D4:6A:DC:7C:84:82:E5:FC:F5:24:0E:4E:64:4E:D2:E6:E2:B8
X509v3 Authority Key Identifier:
keyid:6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:79:f9:0d:24:f7:31:b8:36:0d:de:8a:5c:d3:5c:56:95:98:
b3:8d:ee:94:d5:64:9d:66:86:59:0f:4b:c8:77:21:ea:a4:03:
2a:d1:33:26:21:04:e6:57:6e:6d:9d:3a:20:96:5b:27:ed:78:
ad:6a:b9:ad:15:05:fc:79:6a:64:96:e1:45:cf:44:1f:80:16:
b6:4e:70:ab:8b:d1:62:c3:c2:97:e7:a3:19:ef:6a:30:9f:45:
76:d4:cd:16:95:91:b8:2c:08:90:59:1e:76:eb:a6:e3:2f:06:
79:28:23:c7:18:51:5d:f0:08:df:4a:1d:74:08:97:7a:49:af:
5e:cb:32:6c:cb:c8:8b:a8:2a:65:67:75:cf:ab:67:cd:15:15:
f1:62:8a:59:4b:7f:1d:4f:03:d4:99:0d:35:f1:fe:f4:9a:93:
69:26:7a:5d:c7:a6:1e:dd:55:74:3d:6e:98:01:3e:da:21:2c:
45:36:4d:0d:7a:1e:0d:8a:15:f8:0d:6a:42:2d:f8:61:c7:f1:
47:15:4f:cb:e6:70:bc:af:13:39:5a:75:27:54:2d:f1:45:8a:
f5:ef:01:74:76:37:29:69:48:fb:43:46:4e:5b:45:d1:50:01:
d3:95:43:1e:82:63:db:6f:e7:ae:38:91:f9:f6:c3:e6:2b:4a:
f0:2a:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:22 2025 by rpki-client