Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier: +b3tSGwIrhthd4C2DxvLwJuag+U+bxjOQ6EStt822DQ=
Subject key identifier: 8B:79:CA:3C:32:59:36:C6:81:A2:C9:E2:A8:E9:64:85:B5:AA:51:04
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial: 0198C6ED9D49EC2D20536493620E0E7662A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number: 1083
Signing time: Wed 20 Aug 2025 10:01:57 +0000
Manifest this update: Wed 20 Aug 2025 10:01:57 +0000
Manifest next update: Thu 21 Aug 2025 10:01:57 +0000
Files and hashes: 1: F6TRgo1Qxqb0z2HOICITaJq6vVA.roa (hash: HB4jpWzWtSDjiUJivZqFCyvc7yAlpLdjecgjjSvTmVc=)
2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: 906vmdmsy+xaeygodIZkkVBURozRThQPuonj8xVp8UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ed:9d:49:ec:2d:20:53:64:93:62:0e:0e:76:62:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Validity
Not Before: Aug 20 10:01:57 2025 GMT
Not After : Aug 21 10:01:57 2025 GMT
Subject: CN=8b79ca3c325936c681a2c9e2a8e96485b5aa5104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:f4:f4:6c:f9:da:3b:c8:94:d0:ee:de:a8:
66:b2:0b:39:4c:a6:7b:36:2a:ad:51:4f:b3:52:4d:
c0:0a:ff:97:1e:8c:0d:9a:e3:24:87:fc:e2:43:78:
1a:df:ff:52:ef:49:31:68:61:a6:f4:e3:56:93:e0:
23:34:00:a0:7c:56:63:18:83:84:0e:68:75:0f:da:
e0:96:ce:4e:0f:2b:94:69:0c:66:33:ad:88:78:a1:
80:d2:45:d0:94:71:16:37:2c:9a:7d:d5:d7:43:09:
e9:6b:b0:41:95:b2:91:78:0e:1e:db:3d:f1:31:94:
20:a3:d3:62:f4:dd:18:17:a3:ad:b2:81:85:2b:c6:
e1:69:1e:b1:54:53:58:40:ae:08:60:f6:09:d4:79:
f5:81:05:9c:1c:1c:9e:c8:66:8c:01:c1:7a:54:da:
76:3e:0a:50:47:cf:ea:41:bc:fa:d8:9c:7f:1c:c4:
34:d3:70:67:0d:83:e0:2c:e6:cc:ae:e2:c7:2c:93:
25:2d:6a:91:e8:16:72:5d:f0:f3:86:e7:12:c2:56:
fe:a2:27:a9:67:a4:9c:da:3c:36:eb:71:2b:f9:01:
f7:a3:9e:a1:c9:f9:c3:c9:64:78:a3:76:5b:42:6a:
f5:ca:97:48:9f:30:58:4a:88:40:52:27:8d:03:73:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:79:CA:3C:32:59:36:C6:81:A2:C9:E2:A8:E9:64:85:B5:AA:51:04
X509v3 Authority Key Identifier:
keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:30:fa:6e:6c:65:9f:51:ed:97:82:8a:06:c6:78:d7:3e:c2:
03:5f:51:28:c9:b3:6c:7c:8e:e0:99:cd:7e:95:d4:c9:95:9b:
a7:26:a5:b4:72:3f:b6:09:06:a7:f5:bd:0b:1c:d4:28:e9:50:
4a:56:d1:c2:47:49:8c:43:a8:a3:32:4c:99:3c:ac:e7:fe:3b:
3b:06:af:05:7d:b8:bb:98:e1:44:b2:40:5b:af:9e:78:37:d3:
4d:32:6c:98:75:73:1b:36:7d:c7:4e:85:e6:1f:38:d3:c4:35:
98:4e:60:87:e2:02:cd:57:66:4d:d0:3b:64:e7:f4:d3:84:b6:
59:ac:3e:71:43:41:33:0d:27:28:68:8e:51:9c:2d:b2:3e:ff:
c4:88:68:8a:cf:12:85:e2:91:0f:33:49:bf:c1:39:7e:83:73:
07:75:6b:48:b6:38:fc:c4:1f:e8:c1:02:a4:0b:37:14:b2:72:
c8:e7:36:27:a2:9b:43:cb:30:02:42:7a:d2:10:20:1a:0a:ec:
93:75:fa:85:d6:f6:6e:db:f9:a6:ab:8c:51:d2:a4:72:6f:48:
9c:4c:6a:6c:b8:e9:88:4c:33:19:78:b1:d0:40:a2:46:a4:fb:
5d:e3:59:a3:00:69:c9:71:39:91:9c:1f:1d:f2:36:d5:f3:eb:
13:47:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:11:00 2025 by rpki-client