
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
File: cCFOfqyx0k4hHi8l_uStdX5sll0.mft (raw, json)
Hash identifier: XUf0wxuwPZNv2+KgI9FYyVsXVjtBjkZhXCOdg4akiKo=
Subject key identifier: 76:75:D8:67:E8:84:61:31:11:7F:33:63:69:24:E5:60:A3:C9:1E:3D
Authority key identifier: 70:21:4E:7E:AC:B1:D2:4E:21:1E:2F:25:FE:E4:AD:75:7E:6C:96:5D
Certificate issuer: /CN=70214e7eacb1d24e211e2f25fee4ad757e6c965d
Certificate serial: 019889C4B11A83EEEFE8339AF06A70CE5268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
Manifest number: 05CA
Signing time: Fri 08 Aug 2025 13:00:25 +0000
Manifest this update: Fri 08 Aug 2025 13:00:25 +0000
Manifest next update: Sat 09 Aug 2025 13:00:25 +0000
Files and hashes: 1: Ur1p6KL9NTfFRBrJ7C7-zJCCRXo.roa (hash: lsHocd823a47v2/eGKZz1waiHC7kKATLJJz6RHG9Ic0=)
2: cCFOfqyx0k4hHi8l_uStdX5sll0.crl (hash: 9l4JV/ZG4Ml5j/jDau5xTjoDxFDr1P3qGsaTc6JTFg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c4:b1:1a:83:ee:ef:e8:33:9a:f0:6a:70:ce:52:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70214e7eacb1d24e211e2f25fee4ad757e6c965d
Validity
Not Before: Aug 8 13:00:25 2025 GMT
Not After : Aug 9 13:00:25 2025 GMT
Subject: CN=7675d867e8846131117f33636924e560a3c91e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f1:b7:cf:71:09:28:38:0a:a7:b3:8f:e7:a4:
b6:24:6c:9d:a7:b5:13:f5:c3:cb:ef:67:0b:4c:f6:
85:92:6a:be:3f:54:a8:d7:22:9c:66:9b:70:50:88:
51:f0:b9:1d:33:b8:fc:85:c5:20:bb:1b:c0:15:96:
f5:03:00:d6:66:48:7b:b4:a2:34:f6:72:b3:df:00:
d6:c9:80:17:e5:e0:f0:4b:90:65:20:c4:4e:73:3e:
b7:99:e8:f7:4c:81:76:ed:62:96:d0:47:78:57:bb:
9d:b1:a8:90:43:99:69:03:60:92:3d:3c:6f:a3:c8:
13:da:71:e1:26:1e:7c:c0:64:76:cd:81:82:23:a1:
22:65:cd:38:bf:d5:9f:80:a9:f0:6f:73:6a:f5:32:
35:18:76:86:75:77:8e:b5:96:17:c5:48:0f:87:75:
3f:ad:60:1f:78:e7:33:58:f7:69:3a:76:b7:8a:c7:
be:a9:93:60:b4:7c:fd:5c:5c:c1:fa:c4:a0:4e:64:
6a:15:ed:21:82:a4:d1:72:a3:6c:bf:d9:02:99:e7:
96:e8:82:89:01:5f:d3:69:1b:64:ed:9b:4f:f9:6b:
59:8f:55:53:e3:cf:1d:f9:52:65:1f:b1:75:35:09:
60:6d:17:14:03:1f:80:61:f0:a4:f6:0f:1b:de:b4:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:75:D8:67:E8:84:61:31:11:7F:33:63:69:24:E5:60:A3:C9:1E:3D
X509v3 Authority Key Identifier:
keyid:70:21:4E:7E:AC:B1:D2:4E:21:1E:2F:25:FE:E4:AD:75:7E:6C:96:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9d:2f:8f:9f:b3:f0:ff:4f:9e:e7:16:a7:2c:6b:21:ed:33:
e6:bb:5e:e3:07:e9:58:e0:5c:5a:5f:51:f3:e6:8d:97:e1:75:
9a:fc:fd:9f:ab:42:55:a7:13:97:0a:c8:0b:07:9d:83:6e:44:
5f:a5:9a:8f:1e:53:3b:1f:71:c7:c9:75:d5:d5:64:a5:30:6f:
b1:b4:90:8e:a4:9f:39:f4:09:7f:c9:60:b3:5e:2a:aa:3d:dc:
88:d6:e1:b9:c9:2f:aa:c0:ed:45:db:f4:f6:15:9a:72:c4:71:
46:6f:2c:d1:33:6e:99:2f:04:b7:db:b5:5d:6e:4e:08:63:4f:
c5:c6:61:7d:80:b1:48:2a:79:59:eb:d5:a9:d3:80:16:63:d5:
d5:34:90:e6:0e:b0:0d:52:bf:73:13:d8:bb:d9:3c:41:9d:d6:
ba:11:68:23:60:b5:77:64:7d:93:0a:81:ff:1a:1e:1f:ec:6d:
73:55:07:b9:5a:4f:eb:01:a0:03:2e:a8:61:f7:56:ff:3c:d9:
d7:8d:89:4d:ad:76:7e:cd:ba:e9:b8:d9:bd:6b:cd:a2:3f:88:
dd:70:2f:d8:5a:4a:e8:5e:1d:24:d6:d6:32:84:cc:8d:a7:7f:
5c:8a:57:44:47:9a:c8:1a:9b:55:d0:bd:8d:e9:a2:15:5e:5e:
cd:73:5c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:59:17 2025 by rpki-client