Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: gUWDcsaA46kzb/YO7TN7S8LuxzWJQe20YH1ZxCG/vVs=
Subject key identifier: B9:95:E6:9C:16:DF:E2:B4:49:37:E0:4A:EA:FD:78:1A:56:59:D1:12
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 019A096FEC66404DD300BFDDC79FC1CFAFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 16ED
Signing time: Wed 22 Oct 2025 01:02:01 +0000
Manifest this update: Wed 22 Oct 2025 01:02:01 +0000
Manifest next update: Thu 23 Oct 2025 01:02:01 +0000
Files and hashes: 1: 0xDZgWnts24csgnMxUD8LWhBHU4.roa (hash: Y8cjviLWLv7KyuSufCFJinPdimRipqIY80BDPZZpv3c=)
2: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: OHULMPCHP2zwB6GQY/dgARgpJuNs0lvGbIIi0hsMlLc=)
3: U_CJPYiKsC4pTY0SsfSjtBrH8dE.roa (hash: AQXnBaIOWVXqlXh1gif0C/a7bntYjy34IbEEU6kS/30=)
4: a7j4aToRp-Rf0IqyeByNF9Ocsfw.roa (hash: 9QeK1R+lwAXK6vSpE67n1ijYEIdp5QQxcwabJABYuQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:6f:ec:66:40:4d:d3:00:bf:dd:c7:9f:c1:cf:af:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Oct 22 01:02:01 2025 GMT
Not After : Oct 23 01:02:01 2025 GMT
Subject: CN=b995e69c16dfe2b44937e04aeafd781a5659d112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:d6:6b:6b:ff:b4:fc:58:d2:8d:3c:89:e6:
84:f6:6b:87:fb:f3:c4:7f:14:69:1b:81:e1:43:1e:
5f:84:76:fb:64:dd:e9:43:bc:ee:65:8a:98:f3:bc:
cc:4e:cb:9a:c5:bc:dd:73:db:ca:84:7e:13:e9:c2:
81:6a:31:07:3e:fe:b4:c1:b7:9c:d4:8e:13:06:e2:
d2:16:6c:f0:18:d2:38:c9:fa:72:96:5d:1b:2a:f5:
d4:0c:8a:41:03:2a:19:c5:a3:a7:85:d8:b2:41:3e:
b5:a6:9c:b6:ae:3b:a9:38:3f:57:f1:60:9d:8e:52:
db:43:4b:25:29:9d:b5:a7:b9:ed:bd:31:cb:ab:c7:
bf:ea:c0:b6:fd:8a:04:b1:50:76:7d:9f:e1:2a:63:
ff:57:b1:55:f9:e2:85:37:8f:20:a8:6f:0e:79:14:
39:43:e0:90:72:50:33:81:15:21:92:cf:15:ac:76:
9c:02:1d:8a:92:c6:ea:ce:d2:1b:d2:02:9d:a2:8f:
69:b6:57:83:cc:aa:de:dd:d3:08:c8:05:a9:72:0b:
fd:7a:c2:ff:37:29:4d:da:74:af:50:46:1a:57:80:
2c:3e:f0:0c:32:b8:ab:18:99:4b:28:bf:3e:34:03:
19:9f:28:9e:a0:6e:e0:f0:8b:7e:12:ec:7e:30:4f:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:95:E6:9C:16:DF:E2:B4:49:37:E0:4A:EA:FD:78:1A:56:59:D1:12
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6f:b4:57:35:21:f9:76:3d:ac:e3:1c:e8:0b:03:e4:89:eb:
5f:db:21:e2:22:ce:2a:3f:c6:77:19:1b:df:6b:12:8c:b7:aa:
2b:82:0b:5c:74:ab:8e:0c:dd:13:77:78:00:90:a3:b0:bc:00:
7c:2c:46:26:44:12:31:67:e1:83:f8:38:2c:e7:4b:cf:cf:cc:
52:8a:98:c3:05:09:49:13:bb:8b:b7:c1:08:4b:37:ce:d9:1e:
f0:42:85:6f:ba:ff:2c:7a:48:ea:97:35:44:0e:6e:ff:c8:f8:
1a:90:f4:d4:31:1d:d8:7d:62:e3:cc:23:91:c1:e9:fc:ab:9a:
61:d1:e2:7f:c1:a1:0b:06:30:02:7a:62:d2:0b:aa:da:a4:d4:
db:ce:d6:5d:47:e2:99:92:5c:21:21:33:ad:bd:32:cb:a9:68:
1e:bd:de:a9:6d:51:c3:82:e8:57:70:e9:84:c7:98:54:7b:25:
a2:7d:1f:70:e7:b5:48:34:53:bd:60:3a:3b:a6:ad:c1:31:59:
01:cf:50:90:2b:a9:71:93:3b:94:66:48:fd:cb:8e:e2:11:4f:
07:8d:26:56:da:c7:a7:b0:3f:a2:14:9b:b7:81:7a:72:3c:93:
8d:fc:0f:cc:0d:0f:64:cc:e4:d2:ed:ca:7c:f3:ad:9b:b0:05:
02:cd:34:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:43:29 2025 by rpki-client