Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
File: CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft (raw, json)
Hash identifier: CsmZ8vPrlp+iBAmpIP50v+uuGR+gAdg48lgFGe4A5QI=
Subject key identifier: 5C:F3:CD:0C:C4:C4:0B:56:B0:0E:C8:55:C7:80:17:A5:1C:32:E8:E8
Authority key identifier: 08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11
Certificate issuer: /CN=082b54b05af5e3e8743e7bf4af41ea622bb09411
Certificate serial: 019A7225BEDD0E42C4E1AB4B287C22D82CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
Manifest number: 7F
Signing time: Tue 11 Nov 2025 09:01:07 +0000
Manifest this update: Tue 11 Nov 2025 09:01:07 +0000
Manifest next update: Wed 12 Nov 2025 09:01:07 +0000
Files and hashes: 1: 54NKMWq0L3IIIGrYlD4JaLMKdWc.roa (hash: nMietHH485C6qExyXaoO0fEvgFmJMC/Kq1HNjgMaTZI=)
2: CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl (hash: EKP45mIKnmTvR/EkXZ90hQj4SDiuh3o55wUMzXKCAIw=)
3: Ds_T7z2eAuOuFCzHRhlzfYXGjb4.roa (hash: cLlWynMElotly4lbt+uGb5ABtvFUqbDO+jkIaaP5eAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:be:dd:0e:42:c4:e1:ab:4b:28:7c:22:d8:2c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b54b05af5e3e8743e7bf4af41ea622bb09411
Validity
Not Before: Nov 11 09:01:07 2025 GMT
Not After : Nov 12 09:01:07 2025 GMT
Subject: CN=5cf3cd0cc4c40b56b00ec855c78017a51c32e8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:d8:d7:69:9a:d3:cf:44:83:1f:16:42:29:
01:00:da:9a:eb:f9:2c:a2:ba:1c:46:a4:17:0f:48:
63:78:2e:dc:29:03:14:60:b8:27:ea:5e:91:6a:a8:
db:00:f9:2c:0b:7a:8b:88:b6:f5:c1:ca:02:b2:df:
51:11:b7:ba:c8:97:a3:d4:ca:31:d3:ef:e0:e3:06:
ab:84:03:32:cb:87:bb:80:61:10:6b:07:89:7b:23:
6b:af:66:2d:0d:d1:00:95:94:8f:f6:59:fc:7d:0c:
65:92:6f:5e:38:a9:ec:cd:99:6f:6a:86:5e:db:b1:
2c:30:22:47:56:89:48:52:cd:79:1b:8a:d8:8f:59:
67:1a:52:4a:e0:24:54:94:5d:f3:fc:fc:33:1c:a6:
fb:5d:e5:5b:48:ce:d1:8d:16:52:46:38:4f:35:1e:
07:d0:40:61:72:1c:20:62:87:a1:fb:41:80:4c:22:
a1:db:6f:ee:d7:f1:d8:34:6a:77:64:4d:0a:51:79:
ff:a1:7a:06:80:83:81:ac:92:15:23:d6:b5:22:64:
05:af:32:6a:74:af:71:60:fd:ca:4a:b4:8f:1a:9e:
cf:0d:56:4d:c6:ae:cb:53:0d:46:d1:74:1a:a6:a6:
3a:9e:07:40:0b:9e:6f:4e:f4:11:c1:82:98:26:e5:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F3:CD:0C:C4:C4:0B:56:B0:0E:C8:55:C7:80:17:A5:1C:32:E8:E8
X509v3 Authority Key Identifier:
keyid:08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:30:96:58:32:bd:08:3e:ec:f1:87:23:8f:95:c3:a2:ac:6c:
3c:c0:79:21:67:f2:c0:6d:71:21:4b:24:22:bd:5a:f8:cd:de:
6a:19:d0:f1:97:b7:e6:bf:6e:5b:ba:f9:39:42:a3:8a:93:5d:
bf:88:a7:41:53:f9:b4:d8:3e:8e:f2:7f:ca:3d:a4:07:9f:1d:
e2:4c:27:28:46:1d:c5:19:2d:01:55:7c:94:91:79:cb:43:13:
36:d7:31:63:a7:b9:a6:a2:46:45:55:1a:66:b1:fc:3e:17:89:
0c:47:09:e5:6a:84:0d:78:57:3b:4b:f5:69:3b:4d:29:7e:65:
a6:3b:24:c3:aa:1c:35:ce:22:6a:7c:e6:1f:0c:61:de:c1:b4:
a1:b6:8c:c2:c9:bb:f4:e0:ee:3d:e3:81:cc:dd:f2:84:7c:e1:
21:b3:43:d4:b5:c3:d6:16:38:a4:30:f9:07:45:6b:6c:33:7b:
52:2e:23:6e:e6:95:84:05:86:21:83:4b:4a:d4:76:f8:31:0b:
4c:13:29:1f:74:a4:d5:c7:54:36:c1:84:89:4d:d1:ae:d9:af:
a4:69:47:2a:a4:5f:70:da:57:fd:9f:63:56:ff:9b:cd:83:65:
5d:61:a6:ac:2d:68:85:f2:ad:5c:c7:75:c2:2a:9c:48:4e:77:
3d:95:c7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:00 2025 by rpki-client