Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
File: ccWe2rmO-wzTdnYPQGnkxouL2iA.mft (raw, json)
Hash identifier: bCaxgK52M++mjo5ug65SpJu7XPHAlXMZCwCguoNJsWY=
Subject key identifier: AB:86:40:2C:CE:43:CD:49:6D:2C:BA:14:2D:E8:8A:E2:6E:95:A1:D6
Authority key identifier: 71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
Certificate issuer: /CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Certificate serial: 019A52D1DC5187D54DE5B5188B1B61CA541B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
Manifest number: 085F
Signing time: Wed 05 Nov 2025 07:01:16 +0000
Manifest this update: Wed 05 Nov 2025 07:01:16 +0000
Manifest next update: Thu 06 Nov 2025 07:01:16 +0000
Files and hashes: 1: ccWe2rmO-wzTdnYPQGnkxouL2iA.crl (hash: ViCIRfKbWa9pfWrmFT3cF/224/uUpe+yrvoBgcqaCrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:dc:51:87:d5:4d:e5:b5:18:8b:1b:61:ca:54:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Validity
Not Before: Nov 5 07:01:16 2025 GMT
Not After : Nov 6 07:01:16 2025 GMT
Subject: CN=ab86402cce43cd496d2cba142de88ae26e95a1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:78:3f:b0:1e:30:64:bb:70:12:76:19:5d:
ce:90:a7:d3:11:7a:46:b1:79:b6:6b:4a:33:50:da:
46:e8:be:f6:e4:5c:fb:84:f2:a2:a7:19:84:e6:3f:
07:01:85:49:3e:6f:67:7e:89:b6:bc:7a:c7:95:2f:
a4:f7:12:5b:7f:7f:0a:f8:e7:9a:5c:59:30:8d:43:
0c:de:a8:98:ab:3e:10:57:35:27:e6:40:b7:a4:50:
cf:b9:ae:12:53:f0:d2:bb:ef:94:11:b2:1a:8f:58:
13:46:57:30:e3:a6:21:8c:bc:aa:45:a0:1a:2b:aa:
91:98:51:47:12:2d:aa:4d:2f:8b:c1:c7:7e:2e:6b:
d6:3c:ad:13:e2:27:8a:93:e2:54:0d:49:d1:3d:06:
c0:df:9a:91:7c:ca:e0:8e:cd:0f:af:e9:8e:b5:56:
8a:ac:f8:d6:7f:40:20:1d:90:db:2a:76:57:c2:51:
c6:45:f5:2e:44:c9:f2:c7:1f:4c:f0:27:77:76:5e:
ab:ad:42:2e:8b:7e:ae:ab:e5:17:23:b9:6d:c0:eb:
16:8d:08:22:ff:94:fc:8f:bd:eb:19:e9:17:1f:34:
36:80:14:0c:6a:7b:e8:1c:f0:11:c0:ce:34:c8:9f:
63:26:47:6b:3e:9f:54:06:32:7e:b8:82:05:92:4a:
da:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:86:40:2C:CE:43:CD:49:6D:2C:BA:14:2D:E8:8A:E2:6E:95:A1:D6
X509v3 Authority Key Identifier:
keyid:71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:04:61:9d:66:c3:7b:69:4d:89:7e:79:cb:9c:b6:c3:a6:57:
94:1c:be:7b:7e:2f:d7:83:dd:03:ec:f3:1b:b8:5d:a7:8e:cf:
fc:3d:ff:ae:87:3c:93:42:16:db:ce:98:54:68:e3:51:76:c1:
f2:f8:39:d7:ce:42:d4:11:7b:e2:39:59:fa:62:ce:16:c4:d8:
67:8d:08:b7:3b:3d:68:f0:fd:e1:31:e0:4f:62:90:93:dd:49:
f6:4c:a7:9a:a3:4e:78:50:48:3e:64:dc:4d:b8:9d:3d:07:23:
da:4e:a5:cc:f8:0f:04:de:d7:83:a1:d1:07:ab:08:2e:de:85:
8b:09:07:11:18:97:1e:71:53:37:d4:75:79:0c:d9:1e:66:d7:
28:e8:e4:6e:68:d4:c9:70:8e:10:25:ba:29:d2:db:6b:9e:3f:
f3:ac:8b:f0:60:41:2c:16:51:6f:98:d0:cf:05:43:69:18:2c:
d5:fd:38:06:30:48:09:c8:77:19:bb:db:1e:a3:f0:46:62:ca:
14:2c:c6:c0:65:7d:09:23:85:19:78:fa:6c:10:16:59:8f:6a:
b5:42:a7:39:87:46:02:28:bf:32:f3:04:6c:44:87:2c:57:06:
d4:0f:51:cb:f0:d7:7e:b1:ae:70:75:c7:ee:5f:87:e9:c4:f6:
77:2b:f3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:19:02 2025 by rpki-client