Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier: DIIzUOjg1BCIUBf3VtNvyQE+mzP09p3ZwkxKuCd0f6Y=
Subject key identifier: ED:41:86:FF:69:6B:05:71:42:6A:69:3F:5F:3D:56:FE:AB:6E:FE:13
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial: 019A2176B8D38F68100EE985DBF960F76B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number: 1623
Signing time: Sun 26 Oct 2025 17:00:19 +0000
Manifest this update: Sun 26 Oct 2025 17:00:19 +0000
Manifest next update: Mon 27 Oct 2025 17:00:19 +0000
Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: 98pYWgSerFc/H8IyFeJmv1j4UWJWLDRCO7+8fZ+GzBA=)
2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:76:b8:d3:8f:68:10:0e:e9:85:db:f9:60:f7:6b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
Validity
Not Before: Oct 26 17:00:19 2025 GMT
Not After : Oct 27 17:00:19 2025 GMT
Subject: CN=ed4186ff696b0571426a693f5f3d56feab6efe13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:5b:4c:1b:9a:86:e5:fb:d7:9f:57:9b:78:
79:01:fc:9c:b7:f9:c7:60:10:6d:5a:1c:4e:9b:c5:
4a:40:28:64:c2:8a:ac:e6:cf:ee:98:60:b3:4c:be:
f3:33:41:2c:84:45:95:6a:77:a4:56:f7:52:62:0d:
0d:60:51:d7:1c:51:29:c5:4a:3b:17:c6:54:15:36:
fc:4d:e2:66:2d:bd:2e:d9:fb:82:95:ba:3a:1b:29:
ad:14:44:97:a2:ee:b3:96:5e:d2:df:81:ea:3a:87:
e4:a2:23:ac:5c:37:40:d1:fc:01:2f:5e:0e:84:0b:
f3:3c:c5:50:b2:9f:06:1b:75:d8:52:cc:13:f4:98:
5c:1a:29:0d:38:bf:0c:67:60:89:ca:b9:c4:db:f6:
7a:c4:52:58:e4:cf:a7:5f:f5:5b:2f:75:c0:4e:3e:
db:94:1e:0c:ac:e6:46:bf:f5:e2:4e:9a:a9:db:6e:
d0:4c:85:7b:33:b1:be:cb:0e:0b:a2:03:63:d9:10:
dc:30:bc:da:7c:52:62:1b:fe:f4:60:56:7a:21:ef:
b7:39:84:af:3b:d6:76:e2:58:0b:f5:9b:38:3b:0c:
1a:29:4c:80:e0:bf:fe:92:14:65:36:cf:6e:f3:37:
96:4f:91:ff:66:fd:a4:b6:b3:7c:51:5a:65:49:c6:
af:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:41:86:FF:69:6B:05:71:42:6A:69:3F:5F:3D:56:FE:AB:6E:FE:13
X509v3 Authority Key Identifier:
keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:89:22:9c:0e:84:c8:4e:c5:4e:81:d9:a3:ce:db:3d:1d:4b:
2f:9c:ef:fc:31:68:77:9d:d2:b2:3a:a6:4f:01:a0:1e:39:66:
fe:e2:2a:ea:35:5e:ef:10:eb:8e:e7:1b:00:07:ff:0d:f9:c1:
7b:dc:25:61:46:fe:1b:9f:28:79:3a:52:90:ae:e3:ed:f2:69:
6b:27:27:ef:f0:dd:c4:09:14:a8:7a:8e:8e:20:0d:ce:9f:3f:
bd:c0:1f:54:af:48:cb:2b:bc:5a:6a:ad:32:5a:e5:c7:24:6a:
a5:6b:61:f9:82:05:3e:22:9a:6f:70:2f:39:cc:39:70:ee:8c:
4e:7d:9a:b1:f1:16:af:72:af:77:a1:59:c5:38:3d:b2:0a:1d:
a7:4b:d9:63:bd:14:d8:b3:e4:1e:65:fc:9e:42:db:6f:b3:18:
cb:6c:88:2d:73:c4:ee:ba:f4:bf:43:40:12:80:09:71:e9:2c:
b0:95:ee:e0:30:36:bc:eb:bc:38:18:9d:b7:6e:b8:58:7e:c9:
a5:76:bc:68:82:f9:de:6c:e6:7a:e6:d3:24:6d:a3:eb:c4:26:
8b:3a:89:5b:df:74:e3:1a:cd:84:38:92:47:6a:6d:a4:a8:c8:
59:88:28:94:dd:82:3f:0f:ec:25:b4:fa:30:9d:df:4b:71:d9:
de:02:2f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:40:29 2025 by rpki-client