Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: RbURpsk8ZY4OGlo1G0DTWvldap+ZUWE4ISJL23Mis4M=
Subject key identifier: 8A:43:13:B7:E6:49:1D:ED:BA:D6:52:4B:97:D9:32:45:7F:8A:B5:97
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 019A2666CAE8098D2AE5F401A219B08C653F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 1423
Signing time: Mon 27 Oct 2025 16:01:02 +0000
Manifest this update: Mon 27 Oct 2025 16:01:02 +0000
Manifest next update: Tue 28 Oct 2025 16:01:02 +0000
Files and hashes: 1: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: FyVLzabhfXWxx1YNaIuteyaZkRgQ3ZI1m/7aQQkHrGU=)
2: HVKHyWK-3ZYz5KzbpJqwzo297Wc.roa (hash: OXPJlcYgMDd9TeVLc/h7NB1E8LuM//ZUW90WT8mlIsU=)
3: MsZP7jFPKkJqiHU_2G78BAV7afI.roa (hash: MXKAJZ6YryHNNBfafKO5IJGZB2W0L2svHImaEXgu2Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:ca:e8:09:8d:2a:e5:f4:01:a2:19:b0:8c:65:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Oct 27 16:01:02 2025 GMT
Not After : Oct 28 16:01:02 2025 GMT
Subject: CN=8a4313b7e6491dedbad6524b97d932457f8ab597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:36:65:7a:1d:42:c1:5e:56:85:a2:6b:75:
46:4f:3a:1c:70:33:37:bc:22:cf:e3:c5:1c:85:a6:
aa:f1:b6:b5:da:34:4c:c2:09:92:94:7c:b4:24:52:
0e:71:80:37:e2:a2:a7:c8:3e:0c:cd:fd:e4:4f:62:
43:c1:0d:26:c7:d1:ed:5f:85:fb:b5:ce:b1:e9:89:
f8:95:5a:d7:4e:2a:fb:53:1c:bf:ad:db:24:dd:2c:
24:6e:83:27:3c:0b:08:8f:17:60:a8:61:7c:35:5e:
16:19:ad:d9:b5:d3:e2:c4:87:1a:6a:0a:97:d7:b3:
05:ab:7d:fd:d7:66:e2:43:16:02:f1:c4:47:e4:a9:
c1:51:15:02:53:15:10:73:56:57:8e:f0:70:b0:d7:
9a:7e:b4:50:85:c3:9c:ad:48:90:68:1f:30:23:b0:
9c:e2:19:32:05:a0:b4:ee:50:75:62:bc:d5:95:97:
46:f2:61:28:ae:06:bc:30:32:0b:e8:54:77:e2:db:
2d:d4:71:f1:86:e1:57:15:e2:86:d5:fe:d7:e0:8f:
e3:e3:e5:66:c5:b7:ec:13:17:5e:df:74:fc:b9:37:
3c:15:cf:39:53:34:1c:03:b3:f0:28:5a:a7:39:7e:
26:30:0a:21:1d:38:c7:c6:95:b6:73:32:0a:6f:be:
f3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:43:13:B7:E6:49:1D:ED:BA:D6:52:4B:97:D9:32:45:7F:8A:B5:97
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:95:0f:f8:9d:4d:c8:6b:72:a1:22:1e:92:b4:3b:6d:f7:83:
82:e2:ff:a5:8c:a2:27:a3:80:b8:5d:8b:8a:3b:c9:24:22:29:
a8:17:38:18:e3:35:6d:37:6d:d6:8d:94:88:6a:47:96:83:11:
e5:6e:54:c1:c7:82:e9:df:d7:12:7a:a4:dd:6f:12:8e:7c:1f:
57:c7:76:36:94:56:6f:02:0e:08:33:a1:21:3f:a4:01:99:fa:
b1:5f:47:b0:b2:6d:4d:0d:b5:ed:7d:65:86:1c:b6:80:6a:1d:
ed:6b:28:07:aa:ea:47:35:22:e4:b2:f5:a0:cd:25:1c:85:44:
97:23:52:61:b4:ad:e6:06:ae:d6:f5:7e:46:99:b3:ce:e6:51:
72:98:be:5d:f3:31:31:30:64:cd:4e:ae:07:de:38:60:2e:a8:
1f:32:eb:57:7e:2e:bd:4d:34:ee:a1:60:c2:e1:98:3b:f0:98:
19:ab:7f:46:d0:5f:f1:b4:7e:25:52:38:83:cf:c3:07:3d:bf:
60:a2:5f:34:e2:ed:b9:f8:f9:67:26:25:56:45:63:8b:c9:79:
78:87:6f:41:d6:d7:24:2f:02:16:e2:68:51:c1:49:a5:30:ef:
70:be:5d:27:51:15:91:71:de:51:00:a3:d3:0d:b1:8c:5b:2b:
79:57:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:43:56 2025 by rpki-client