Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: +5UHFW0ux/p67XfofIDt2hSFf27J258PBMBFh4frSZQ=
Subject key identifier: 04:08:60:7B:EF:5E:7B:5B:BA:D1:E8:36:BA:59:DC:45:7F:2A:99:1F
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 019A5119A17DA0E7C87BFE32193574A40AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 0881
Signing time: Tue 04 Nov 2025 23:00:25 +0000
Manifest this update: Tue 04 Nov 2025 23:00:25 +0000
Manifest next update: Wed 05 Nov 2025 23:00:25 +0000
Files and hashes: 1: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: dTEtTNeK+yIul/T1FI1n92taqodEUbl/v42FXtn1GNU=)
2: vUAfXYF9TFNLnOrzGOBoj2EvRGM.roa (hash: qsEDepbRFwFuvWf4t9/SaCwgVj17b+21naMELXmYJ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:a1:7d:a0:e7:c8:7b:fe:32:19:35:74:a4:0a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Nov 4 23:00:25 2025 GMT
Not After : Nov 5 23:00:25 2025 GMT
Subject: CN=0408607bef5e7b5bbad1e836ba59dc457f2a991f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:f5:83:93:65:7b:cc:36:e3:7d:9d:8b:4c:
e7:3e:cf:f3:2a:9b:21:13:cb:34:d2:0b:3d:75:4a:
14:12:e5:35:e9:f0:9c:01:7e:90:62:78:16:6a:30:
c6:b3:1d:2e:73:1d:f0:b9:79:73:4e:08:2d:2d:da:
72:5c:82:6e:8c:2b:f9:8e:b6:a9:c9:6d:c8:5d:a5:
24:a8:39:4c:a3:35:0b:7e:79:cb:bf:a2:6f:2c:49:
f2:33:48:19:78:45:9b:b4:1d:83:77:6c:4b:ab:d6:
56:71:83:b8:a6:17:3a:ae:ce:fd:95:e7:ab:99:df:
3d:af:8b:8b:7b:06:99:0f:34:9c:4f:bd:57:cb:ff:
43:46:c0:4d:c7:33:ce:70:6c:8d:ba:8d:68:6d:a5:
43:c6:0e:c3:14:50:b8:b9:e8:a1:17:23:9f:62:35:
db:4d:02:60:21:ac:8d:3f:03:4f:4a:92:f5:a1:b1:
66:82:c1:ce:d4:32:d1:f5:9d:8d:76:94:13:a9:38:
a9:71:a9:1e:5a:c0:25:34:5b:be:12:28:db:51:57:
8b:b4:6c:4e:2e:dd:5b:02:03:77:30:a1:ce:4a:4c:
ec:c9:5c:63:6b:30:56:7b:c8:af:62:83:cf:9d:b5:
46:19:13:fd:75:11:9d:b5:9a:dc:8c:96:47:9f:5d:
ee:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:08:60:7B:EF:5E:7B:5B:BA:D1:E8:36:BA:59:DC:45:7F:2A:99:1F
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:af:72:b7:e2:e0:ce:1a:ce:10:c8:dc:c2:db:61:bd:d3:7e:
79:a2:db:f3:76:96:4c:b6:ea:38:8e:72:55:c9:46:de:4d:68:
a8:9a:0e:ed:2a:18:1b:c1:21:42:ca:c1:24:7e:44:76:ea:36:
f0:e3:75:ac:51:03:7e:d4:fd:db:4d:b5:34:e9:26:2e:92:a8:
72:d5:a0:95:93:72:37:89:7d:6a:38:7d:15:99:53:4a:fd:8d:
92:74:9c:63:91:92:fd:5a:f7:47:44:26:75:ba:c1:22:fd:53:
46:29:5f:66:aa:3b:25:51:11:b3:ce:c4:8b:f1:eb:ab:20:4e:
22:fd:ce:73:0c:30:bb:42:e6:d5:48:ad:4b:90:44:65:cd:58:
12:c1:24:e5:f6:b0:ac:f1:1a:b2:6a:3a:e6:17:a2:da:a6:b3:
2c:45:cc:76:78:c3:81:5b:4c:f0:f8:fa:40:f5:93:53:d2:40:
ad:ca:6a:aa:7b:79:d6:8c:e8:da:3b:cf:8c:41:b7:d0:1f:65:
e7:4c:95:62:a9:38:2c:e8:2c:9c:75:47:2d:f0:4b:3a:f4:d3:
09:4a:e8:47:12:48:5b:5c:7f:4b:5f:2e:2d:a4:85:60:17:29:
85:5e:b5:cb:c4:2c:70:fd:f3:75:84:7b:a6:fc:f1:9a:4b:3f:
eb:e3:87:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:30 2025 by rpki-client