
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
File: CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft (raw, json)
Hash identifier: KPU9nA6++YmfHmmyfkk9WY8QzQ5UptoJspaQUSiF6Dw=
Subject key identifier: 41:93:32:6B:FA:AE:90:AD:6C:A7:9B:2F:1E:70:F3:34:B7:20:10:A8
Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
Certificate issuer: /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Certificate serial: 01987CAE4F3A2ED508ACFB3152480A23EA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
Manifest number: 03BA
Signing time: Wed 06 Aug 2025 00:00:55 +0000
Manifest this update: Wed 06 Aug 2025 00:00:55 +0000
Manifest next update: Thu 07 Aug 2025 00:00:55 +0000
Files and hashes: 1: CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl (hash: AcKq2EE2foWrZmGh6M0NxkfjwIcNNuSiokuYDsv3sqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:4f:3a:2e:d5:08:ac:fb:31:52:48:0a:23:ea:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Validity
Not Before: Aug 6 00:00:55 2025 GMT
Not After : Aug 7 00:00:55 2025 GMT
Subject: CN=4193326bfaae90ad6ca79b2f1e70f334b72010a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:51:ab:b5:cc:3d:71:3c:9c:30:b1:a3:c7:
d7:c2:da:0f:fe:60:dd:6b:57:c6:0f:4d:ca:85:ab:
84:1e:8c:a6:28:48:80:03:b1:b9:ec:8b:d8:5b:48:
5c:d0:15:d0:8f:f3:3e:b1:b8:ca:ee:c4:f2:a4:29:
72:de:f8:4e:a3:74:ad:fe:62:c9:47:59:5a:ed:51:
e8:22:91:2c:e1:9c:a4:82:f8:38:09:1b:b1:83:73:
6c:4c:6d:8a:77:2c:aa:00:91:bf:c9:e9:31:d6:92:
88:bf:a6:7c:be:80:cf:f9:74:51:90:61:22:e9:2c:
ee:73:60:4c:6a:be:78:4a:cc:73:52:f9:ab:c1:34:
2c:1b:f3:08:a2:97:3e:8e:34:31:9e:aa:34:db:08:
2f:88:df:ce:5f:60:0c:5b:2a:d7:5e:3a:67:8b:13:
84:21:86:09:52:84:13:bd:2f:38:5a:bb:59:72:e6:
0a:24:63:48:f5:9d:97:f7:eb:2c:8e:10:e5:52:85:
f7:9f:78:5f:c7:6c:fd:7e:c8:79:33:b2:51:0b:1a:
a9:ee:8c:a8:da:ca:7f:03:d1:b3:cd:77:26:f0:ee:
e2:86:21:b1:fb:58:5d:74:31:41:31:7e:8d:d2:5c:
2b:09:9a:90:5b:7d:4e:da:b6:57:9d:1b:96:88:1b:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:93:32:6B:FA:AE:90:AD:6C:A7:9B:2F:1E:70:F3:34:B7:20:10:A8
X509v3 Authority Key Identifier:
keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:43:4d:8d:40:46:0e:96:36:2b:95:6a:5e:c4:88:c7:08:a9:
f1:62:b3:bd:f7:5e:35:e0:54:80:61:b6:46:c8:ad:43:cb:eb:
a1:61:4d:a3:96:7a:01:d8:11:24:c6:7c:cb:6b:11:66:c5:64:
2d:2d:8b:a2:32:51:5f:3d:f3:4f:b6:fa:66:9d:97:db:56:48:
99:19:d3:24:5d:6c:56:be:97:fc:e3:dd:eb:b7:66:89:90:98:
27:3c:3c:73:36:d3:f5:56:7f:52:f0:c8:bd:bb:af:69:39:64:
95:ed:c3:b1:ed:bd:af:a1:ae:28:af:4e:7c:75:ac:d3:97:e9:
e9:f7:1a:56:cb:3f:33:b7:ef:d2:08:d1:4f:b9:76:16:ed:87:
32:46:82:9f:22:76:a6:30:4c:ed:17:36:68:19:6e:5b:58:d1:
e4:7d:22:ff:a7:35:14:5b:23:8e:00:a0:75:b9:2d:a7:04:f4:
a7:a3:0d:d9:14:1a:0f:e2:b4:a3:50:5f:9c:ff:a9:96:99:79:
7d:b0:fc:7d:cf:83:3c:ff:bb:1a:ab:a0:98:1e:f6:dc:26:35:
5f:2d:77:d7:79:71:1e:13:70:59:0e:3e:2b:52:f9:69:8f:5e:
17:d9:db:e2:8c:84:9d:a6:c9:85:0a:ae:13:52:79:f4:b0:70:
c6:34:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:14:54 2025 by rpki-client