Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
File: CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft (raw, json)
Hash identifier: ZOWdKd7BuDBBrOK9nOWSn8NiyR9dRsK1gsvehLIUbqo=
Subject key identifier: 3B:2C:C7:B5:28:03:6E:FB:51:65:93:CC:14:77:B2:A6:20:1A:A3:82
Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
Certificate issuer: /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Certificate serial: 019A4E18B71FBBCA12500328CCE35EADEE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
Manifest number: 04AB
Signing time: Tue 04 Nov 2025 09:00:33 +0000
Manifest this update: Tue 04 Nov 2025 09:00:33 +0000
Manifest next update: Wed 05 Nov 2025 09:00:33 +0000
Files and hashes: 1: CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl (hash: u38CJ+WFpfAYl7y0PKB+XeDolhtyNGs0H897Es7eu60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b7:1f:bb:ca:12:50:03:28:cc:e3:5e:ad:ee:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Validity
Not Before: Nov 4 09:00:33 2025 GMT
Not After : Nov 5 09:00:33 2025 GMT
Subject: CN=3b2cc7b528036efb516593cc1477b2a6201aa382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:b9:ba:09:b4:fc:4b:b7:c9:ca:35:71:ad:
ba:6a:6c:3d:95:aa:9a:4a:93:a2:a6:fa:5a:8c:38:
0f:19:3a:42:20:b4:d9:0c:ab:1d:e8:68:00:16:6b:
80:1e:06:08:78:b7:5c:32:0d:2b:14:df:a7:e0:5d:
fd:eb:16:2b:54:8c:b7:9e:18:b4:ad:44:9a:66:fc:
52:26:ca:b4:a0:83:ca:44:d9:fa:ae:74:4e:6b:64:
25:7f:e8:c5:70:5d:78:53:cd:25:4a:bc:eb:d2:b2:
5e:a6:01:cf:3d:1d:bf:1c:4a:5f:9c:cb:76:c5:f5:
b5:eb:7e:1a:bd:ce:3d:68:45:c8:83:88:4b:76:70:
8f:89:e0:c8:14:d9:e3:2b:c6:ce:62:35:3e:fe:6d:
87:6b:9f:15:05:16:dd:42:44:a3:79:2d:9d:4f:de:
3f:61:b7:c0:c2:f7:cf:a6:ee:d9:c7:cf:a3:40:fc:
6c:73:0a:e3:bb:9d:c7:f5:02:b3:e9:49:52:f0:1e:
2b:3a:05:92:fe:d7:63:18:5b:65:0c:bb:c5:fc:e5:
a2:9b:91:d5:6e:af:b0:4d:f8:73:9f:10:65:60:8d:
2b:24:7b:04:e5:da:21:8c:85:cf:22:d0:95:0c:92:
eb:5a:11:fa:f1:51:ea:1c:3f:b6:29:79:69:82:24:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2C:C7:B5:28:03:6E:FB:51:65:93:CC:14:77:B2:A6:20:1A:A3:82
X509v3 Authority Key Identifier:
keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8a:cc:04:a3:38:be:c0:c6:a2:3b:13:15:c3:4f:a3:3a:5d:
d3:7d:f6:44:c9:69:8e:a6:f8:af:12:1b:ff:13:18:8b:a5:ff:
e6:14:1c:a5:4e:21:88:0a:06:ba:0a:99:a6:a7:88:a1:d1:f7:
93:76:8a:e5:38:00:94:a0:a9:44:c8:b7:5c:e1:74:d4:ae:a4:
75:39:23:11:5d:90:12:e7:92:f7:cd:ed:26:59:3d:92:07:69:
7f:0b:e7:16:3e:eb:9a:9d:63:81:50:77:7c:92:1d:51:5e:63:
3e:a3:65:1b:37:76:29:3e:07:26:63:09:56:b4:32:d3:9a:06:
c1:95:9c:50:55:03:b2:fa:48:33:8f:d6:cc:26:58:9d:d8:ec:
a9:0e:01:08:8b:b8:b8:f8:6e:17:01:2b:a1:2c:a5:32:16:31:
30:cf:bc:c6:86:26:44:05:bb:8a:fc:6d:e0:d4:35:a4:24:34:
35:d2:83:a2:fa:33:9d:8f:7d:8b:ae:ee:e9:76:dd:a4:90:c1:
28:fc:3f:ca:cc:be:46:ca:8b:76:6c:33:a3:a8:37:86:f0:c5:
e0:7f:1c:94:69:03:53:c6:be:75:f2:bb:21:82:f6:c3:27:d4:
6b:9d:75:2b:be:04:02:b3:73:08:7b:47:3f:b3:2a:d5:52:90:
26:4c:4c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:45 2025 by rpki-client