Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
File: CcUO_hOq31QjsE8N3KizKIOVgj4.mft (raw, json)
Hash identifier: WL5r3lBcN28LMzfNR7CXMRwPJqGgyQ08KgidU49dv9o=
Subject key identifier: 19:33:7A:94:19:54:22:D2:E8:C9:8A:7F:F6:00:8C:F2:87:C8:C2:15
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Certificate issuer: /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial: 019A4F98FE492A7D3969BBE6D9022413F4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 16:00:17 +0000
Manifest this update: Tue 04 Nov 2025 16:00:17 +0000
Manifest next update: Wed 05 Nov 2025 16:00:17 +0000
Files and hashes: 1: 8pbOtoickn4gngDPghS6zzsubu8.roa (hash: 2DV5k3x2c9dOCN9Cru+gCMm0tJjouTk+IFDhMI+k6C0=)
2: CcUO_hOq31QjsE8N3KizKIOVgj4.crl (hash: FaZjY5K/cQ95lIpH2MD2QS73F0qKcSjLJ8z3zsGp9po=)
3: bQWTWaPJMURhOwMcF82QvoPW9eA.roa (hash: ZBXbwgCoJr1O/tkU4TQtGdf606M6fVdS5KYW5/tfGVU=)
4: e4h7xssIbvZ0s7Vw9JjG46tDvZ0.roa (hash: isku2v3Qa+kI0md0IS8QEjqPkTCho6QFnoe7uAw4O+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:fe:49:2a:7d:39:69:bb:e6:d9:02:24:13:f4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Validity
Not Before: Nov 4 16:00:17 2025 GMT
Not After : Nov 5 16:00:17 2025 GMT
Subject: CN=19337a94195422d2e8c98a7ff6008cf287c8c215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:d7:3d:e7:70:2f:89:8a:26:b5:11:0f:c0:
f3:62:10:4c:b8:fa:ee:4e:29:63:cb:e7:39:75:1c:
fa:fa:ea:68:15:f4:3b:6e:38:09:9e:4b:0c:4d:55:
dc:4f:02:ef:8d:b5:9c:d1:ea:97:7e:bf:b0:93:5e:
e1:e6:a5:ff:3a:90:d0:84:78:43:42:27:85:1d:3e:
e9:fc:eb:e7:16:9c:1d:32:70:5b:b9:6f:b8:14:9f:
3e:0b:44:01:14:8f:11:b0:27:c2:ac:b4:d4:85:3a:
80:ad:16:36:53:0f:12:a6:89:12:22:e6:71:79:7d:
36:4f:43:27:a4:20:31:d4:49:71:a3:dc:b4:21:dc:
42:22:91:e6:90:d5:e8:95:d3:29:54:e3:dc:ac:aa:
c5:64:53:0e:cf:6f:3f:a8:25:65:3f:e6:c5:72:21:
06:61:33:e8:92:7b:bf:1d:2b:f0:1b:8b:4f:2a:dd:
f1:82:ed:9c:06:74:4f:8f:00:01:4b:ed:07:56:7f:
f3:47:6c:f8:39:56:0f:e9:83:82:d3:cd:20:a0:8d:
4b:a5:16:c5:1a:91:d0:a9:12:61:70:20:de:08:7a:
29:8d:b1:41:ea:2c:a8:3d:7e:cb:88:c1:6b:35:a3:
e3:f5:a1:87:7f:47:6c:6e:3a:20:f6:27:df:f0:7e:
f4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:33:7A:94:19:54:22:D2:E8:C9:8A:7F:F6:00:8C:F2:87:C8:C2:15
X509v3 Authority Key Identifier:
keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d6:03:01:0a:0f:f1:1f:d4:ed:2b:6c:a2:89:49:67:c9:4f:
36:9f:aa:e9:18:fc:ff:21:03:25:6d:82:8f:a3:9b:3b:0e:f6:
6c:bc:12:06:00:b0:09:32:6a:7d:d0:97:e7:39:ef:b3:fe:83:
f4:bf:48:c6:0f:54:0d:53:f3:c7:9c:4a:02:a1:aa:8d:3c:00:
9a:81:1b:b6:8a:19:28:91:d8:83:f1:21:00:b3:12:d8:0c:76:
75:ff:fe:44:41:4f:2b:32:ef:1c:fe:a4:9d:b6:f4:b1:06:63:
96:0d:78:96:7d:8a:d0:c9:2f:fb:27:ba:ea:07:94:04:6a:3d:
16:bc:ab:3c:a1:96:d1:37:f7:3c:3a:31:2a:20:4d:50:ad:d6:
d1:ed:6d:ab:67:14:fa:9a:86:0b:44:6e:b4:94:83:ee:5e:00:
dd:38:96:5f:28:72:69:f3:db:82:a5:2a:f9:9a:cc:0b:af:5e:
ad:5c:51:09:50:2d:09:b3:87:aa:4d:b3:f2:30:6e:20:b1:a7:
aa:3e:8c:14:5b:09:c1:37:e9:45:2f:04:4a:5c:42:d9:ff:f3:
71:f1:5c:06:03:ad:7d:29:fa:42:ac:90:3c:5d:ed:cf:b1:95:
e2:a3:ee:88:49:7e:72:02:a1:ce:e0:30:68:c5:af:f2:c2:fa:
fd:82:3a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:32 2025 by rpki-client