Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
File: cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json)
Hash identifier: 8Hm2Jku05O/6iMvXXwyrdaSPBqBwNdFyOjde4hRTyqw=
Subject key identifier: CC:4D:CC:4E:49:1D:A9:2A:AB:78:CC:27:91:16:FF:11:25:DC:5D:F4
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial: 019923A0985A77757EFFBF108763D3C9FDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
Manifest number: 0E01
Signing time: Sun 07 Sep 2025 10:02:31 +0000
Manifest this update: Sun 07 Sep 2025 10:02:31 +0000
Manifest next update: Mon 08 Sep 2025 10:02:31 +0000
Files and hashes: 1: BNamB5vKS8VYoQEENNZLcbAD0yY.roa (hash: AZc2M6A0pF1sMbjRSCCXbLIDgidX2dUycGenbS2p6qA=)
2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: 8wuuA4/xN2rbUUMqbwGdtYvufwoYrLkKcmcDbiUj+Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:98:5a:77:75:7e:ff:bf:10:87:63:d3:c9:fd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
Validity
Not Before: Sep 7 10:02:31 2025 GMT
Not After : Sep 8 10:02:31 2025 GMT
Subject: CN=cc4dcc4e491da92aab78cc279116ff1125dc5df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:5e:31:1f:58:fc:b3:6c:68:29:41:2a:58:
6c:9f:fe:fa:6f:84:48:64:0d:79:4b:d3:0f:92:29:
d5:b7:3c:6b:85:80:6d:f1:a4:74:e6:03:d3:b2:6a:
68:f9:fd:31:a6:d3:fe:e3:b6:d9:96:68:f0:12:21:
ef:c6:5a:ca:23:c7:24:f0:8f:7d:3c:26:06:3f:1d:
a9:27:4e:d6:17:be:6e:6b:19:ad:99:62:12:38:b0:
f4:5b:53:a8:4d:38:09:38:b9:70:54:db:d4:c0:a6:
00:e5:92:a6:f9:be:1a:41:b9:f5:d1:df:b3:5a:c7:
fa:67:ad:14:d6:3a:d0:1d:3a:1b:ee:7b:3d:67:87:
f4:56:dc:be:f9:aa:04:9c:16:1a:85:a6:89:07:36:
4a:a7:57:20:66:49:ec:6c:34:9f:ec:61:dd:cf:10:
cf:1e:f8:b7:61:d3:83:7a:fe:35:64:0b:41:33:b2:
36:89:7e:6b:de:d0:ba:f6:60:6c:e4:ba:d0:b1:ce:
5c:a1:85:0c:6f:f4:37:01:80:d1:fe:34:7e:ce:86:
cd:48:a2:d9:d7:0a:89:43:2e:69:e1:b6:a5:37:69:
a8:97:bd:04:48:c7:45:a3:e9:ba:fd:ea:14:96:5a:
41:84:0f:3b:e5:00:1f:cc:51:5e:ea:dc:6f:f7:d4:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4D:CC:4E:49:1D:A9:2A:AB:78:CC:27:91:16:FF:11:25:DC:5D:F4
X509v3 Authority Key Identifier:
keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c3:56:96:e9:28:3c:0e:76:eb:3c:6e:04:39:e1:cd:63:dd:
79:4f:b8:b4:ae:50:70:1d:e8:2a:e3:c4:eb:11:15:8a:3f:b6:
ce:5c:47:53:c9:5a:6d:a9:a6:4e:6f:d7:c2:80:0e:43:7f:96:
d7:db:f6:01:97:4d:0a:09:e1:b3:bf:ac:b9:1a:c8:24:e5:a4:
4d:17:18:89:33:d3:ab:7d:c2:18:53:9c:1b:3d:3b:41:d4:c9:
16:10:34:03:fb:34:9b:1b:83:80:b1:7a:5e:e1:81:80:b7:2d:
b1:a1:15:70:7d:1a:46:c1:c3:0b:04:44:67:40:00:65:6c:f2:
34:9c:bb:05:9d:17:38:15:9f:fc:b9:cb:05:c9:1e:b8:bb:a7:
8e:2e:93:af:d3:b5:99:88:98:74:95:29:f2:cd:5e:9b:11:ed:
c9:62:2a:7f:a8:ff:b7:52:ae:2c:e0:f0:c2:95:de:85:b4:cd:
a9:c3:99:f0:8a:a9:ab:c0:e2:5b:ef:2a:13:87:03:a3:c1:b1:
c7:b7:f8:37:a1:98:77:69:fd:e4:5a:ec:24:a9:93:50:84:78:
72:c1:52:46:ca:15:f2:6d:6a:dc:0d:9a:89:52:a7:ad:95:1c:
79:86:af:99:f8:c4:14:d4:f6:2e:2b:e7:f8:34:ae:bc:7b:f7:
20:42:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:18 2025 by rpki-client