Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier: oDpOisInbNKBcetjt7jhSByetDe3u87TWv1wbtB4Bfg=
Subject key identifier: 60:60:A8:D4:67:1D:B8:EB:0E:B3:1C:F3:D5:23:3F:46:E7:8D:81:2C
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial: 019749681E9EF1A716451D5BCFFF9B188DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number: 14AA
Signing time: Sat 07 Jun 2025 08:00:49 +0000
Manifest this update: Sat 07 Jun 2025 08:00:49 +0000
Manifest next update: Sun 08 Jun 2025 08:00:49 +0000
Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: 39Nsku/pO5eVnWbH8eGJi8XR9SQCth2EVhoSbTF8LGw=)
2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:1e:9e:f1:a7:16:45:1d:5b:cf:ff:9b:18:8d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
Validity
Not Before: Jun 7 08:00:49 2025 GMT
Not After : Jun 8 08:00:49 2025 GMT
Subject: CN=6060a8d4671db8eb0eb31cf3d5233f46e78d812c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:80:86:08:bc:c2:b3:31:e2:67:aa:a4:51:
4f:80:67:2a:12:3a:90:7d:78:15:81:0a:98:24:4e:
19:17:55:ca:69:d6:ef:d0:f7:6c:ee:1d:db:1d:28:
76:23:db:0c:5e:1d:75:8c:9a:7c:c7:ac:38:38:5b:
ef:ae:fe:0a:20:74:fb:16:93:41:87:2f:ac:31:55:
e9:fd:54:96:7a:b2:75:f1:25:51:a8:01:63:cd:5b:
a2:15:e6:41:9d:b4:c4:df:e9:3a:4c:5b:41:d5:63:
3b:cd:fc:6a:54:76:9b:0a:ae:32:e3:5b:66:80:ee:
e3:34:52:2a:a1:d1:40:95:2e:a5:a1:9c:55:c3:35:
c0:a6:a4:4b:f6:9c:46:b6:90:8f:85:20:06:50:15:
71:18:df:1d:a8:17:07:5f:18:86:ed:f0:cf:86:2d:
89:c5:f6:67:c1:93:77:80:9a:37:81:67:ea:34:69:
17:88:42:13:73:b5:1e:2e:6f:b4:d7:e5:37:00:65:
6a:90:61:a1:82:75:fe:5f:3b:da:e7:d0:63:53:ad:
c6:f5:e2:a9:3d:9d:49:8d:60:f0:a2:12:99:f6:28:
7d:2c:f8:1b:80:44:40:8a:80:79:9b:3d:a5:8c:24:
8a:48:1d:52:30:ca:c7:1a:ca:bf:40:45:59:a5:d2:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:60:A8:D4:67:1D:B8:EB:0E:B3:1C:F3:D5:23:3F:46:E7:8D:81:2C
X509v3 Authority Key Identifier:
keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f6:e0:dd:c8:93:05:b5:b9:30:3b:b6:ef:85:0c:52:56:34:
04:b6:38:dc:c4:d2:b3:ab:73:d9:26:61:1d:d4:f9:45:09:1d:
5a:39:c0:fc:1d:9d:b6:9d:f7:55:23:b8:0e:a2:40:c3:84:3e:
2e:6d:c8:a8:75:24:9d:52:07:a5:ae:3b:e2:9a:35:0d:de:67:
df:c5:8b:e5:b1:1f:8a:4e:48:d7:b2:15:66:e3:1d:bb:ae:ef:
05:1f:b4:b8:5d:e1:a5:6e:dc:56:94:07:bc:00:e6:f5:a1:5f:
c4:92:bb:3b:97:72:92:7f:76:5f:dd:de:cb:17:06:5e:02:ef:
eb:ed:f6:bc:68:0b:0e:e7:f4:84:60:43:4a:9c:a6:8e:88:14:
31:08:16:17:2a:6f:ec:85:0b:a0:e0:c8:fb:c1:44:10:79:92:
ce:3d:f0:f4:54:47:9a:d6:80:e8:18:5e:82:5d:43:e8:bb:53:
50:14:18:09:a1:c8:2d:42:a6:1b:24:b9:e4:eb:b8:21:4f:36:
35:7f:a7:90:fe:f6:f7:42:6a:dd:16:05:f3:ab:20:2a:70:84:
c2:bc:8f:07:b2:60:1c:8f:6f:34:43:f3:70:ff:e9:09:b8:3f:
a9:fc:4f:21:fc:2e:41:82:bc:01:56:bc:90:dc:20:5c:3b:30:
2b:a4:4c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:28:09 2025 by rpki-client