Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: cuj82hYZBEkwynzePF+Vmhn52g/KvWV2fA/nfAJ30ng=
Subject key identifier: 16:68:6E:86:B6:B3:D8:EB:B3:38:0E:39:88:15:65:A3:E5:38:E0:A6
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 019A54BF3FCB47F4A52E095C3DE9C2A7C349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 10C9
Signing time: Wed 05 Nov 2025 16:00:11 +0000
Manifest this update: Wed 05 Nov 2025 16:00:11 +0000
Manifest next update: Thu 06 Nov 2025 16:00:11 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: QKQFBj+Nz9IcW+MIhtZiPZRBR4+IFq6lvPQYqlGZ1Ok=)
2: QFbV3cLIo6fGM98z7n86TaXk26k.roa (hash: OdVi+1rHdt0zdTh+loubxHzRa31DZflpr11+itY/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:3f:cb:47:f4:a5:2e:09:5c:3d:e9:c2:a7:c3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Nov 5 16:00:11 2025 GMT
Not After : Nov 6 16:00:11 2025 GMT
Subject: CN=16686e86b6b3d8ebb3380e39881565a3e538e0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:c9:cf:00:31:60:14:f9:db:10:36:46:bc:
ec:b6:7f:7c:c4:a2:76:d9:8d:0c:2f:11:63:25:2e:
76:dc:56:12:b8:0f:d6:d1:1d:75:8d:cf:63:30:ac:
fa:f9:41:57:71:8c:90:31:0c:eb:d6:a2:17:1f:5c:
00:b4:b5:2e:55:bf:95:d5:56:f0:f2:7f:17:10:03:
f8:df:a6:4c:d2:4a:ed:0e:1d:b5:57:c4:15:f3:2e:
45:3b:3c:ea:bc:df:83:9e:e6:ae:4f:eb:e4:78:f0:
51:7e:af:1e:12:a4:98:06:6c:c8:40:78:41:53:e3:
38:88:64:89:d5:c5:77:f8:08:42:50:e9:a1:52:4f:
90:a6:e2:24:ad:72:55:01:e8:b2:b9:8b:4f:fc:71:
c8:2a:87:20:32:bb:43:70:cb:e8:c9:21:cc:ac:98:
e9:19:d5:73:80:b6:05:bf:96:8d:30:4a:82:66:9d:
0c:9c:44:55:54:0f:51:e3:ef:3e:73:22:a2:bc:22:
a6:53:1c:a0:d7:27:91:6a:09:17:11:53:8e:43:87:
83:1a:eb:7f:89:0a:f7:7e:e1:72:05:36:64:f5:03:
9b:31:de:c1:e7:94:6b:1b:47:7a:3b:e7:0e:fc:fa:
64:e6:be:ea:b5:6f:ad:4b:1e:6e:f2:f3:52:80:3a:
94:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:68:6E:86:B6:B3:D8:EB:B3:38:0E:39:88:15:65:A3:E5:38:E0:A6
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:52:e1:8e:b4:29:97:6e:6a:9a:6d:b2:c6:7a:5f:5b:20:9e:
d8:b8:15:6c:fe:46:e9:8e:a8:a6:45:09:b7:7a:1f:d7:8a:70:
65:62:c7:48:3a:cf:1b:32:0f:20:46:f5:f1:91:2d:05:34:cc:
48:d6:c0:48:e2:e7:7c:b5:12:93:1c:f9:8d:6d:71:da:96:6d:
ed:61:60:14:08:ab:b7:31:56:0d:56:d1:e0:c8:ff:b5:0e:5a:
41:87:d6:f0:f9:bf:69:84:3d:dc:23:9a:f6:1e:19:77:d2:16:
67:6e:9a:4b:43:e7:c4:f6:f9:91:46:69:c2:5d:ad:c6:ef:f6:
d2:38:bc:cb:ed:c4:b8:ad:3f:53:4d:83:57:42:69:a7:13:13:
08:3f:e9:47:f8:03:ce:1d:3f:bf:a0:96:e2:1f:ce:ec:df:9d:
9c:ce:1b:d9:f9:43:f5:d7:bc:b4:5c:5f:22:27:a3:cb:91:ae:
eb:e4:06:69:56:2d:61:78:9c:0a:d0:45:d8:67:c4:12:0d:22:
39:0f:6f:bb:95:b6:07:38:4a:a6:f2:07:31:47:9a:f8:c0:f1:
fe:b0:86:81:98:93:d6:6f:ef:c7:9b:9a:21:58:60:3a:0c:b0:
1e:ba:fe:10:93:ca:57:dd:c8:ce:53:81:f3:13:94:dd:9d:d4:
06:54:8a:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUvz/LR/SlLglcPenCp8NJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MjY5NTQzY2E0NzE1OGI3ZTc3NzU4N2FkZWZmZDdlN2M2
OGIwNjEwHhcNMjUxMTA1MTYwMDExWhcNMjUxMTA2MTYwMDExWjAzMTEwLwYDVQQD
EygxNjY4NmU4NmI2YjNkOGViYjMzODBlMzk4ODE1NjVhM2U1MzhlMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspDJzwAxYBT52xA2Rrzstn98xKJ2
2Y0MLxFjJS523FYSuA/W0R11jc9jMKz6+UFXcYyQMQzr1qIXH1wAtLUuVb+V1Vbw
8n8XEAP436ZM0krtDh21V8QV8y5FOzzqvN+DnuauT+vkePBRfq8eEqSYBmzIQHhB
U+M4iGSJ1cV3+AhCUOmhUk+QpuIkrXJVAeiyuYtP/HHIKocgMrtDcMvoySHMrJjp
GdVzgLYFv5aNMEqCZp0MnERVVA9R4+8+cyKivCKmUxyg1yeRagkXEVOOQ4eDGut/
iQr3fuFyBTZk9QObMd7B55RrG0d6O+cO/Ppk5r7qtW+tSx5u8vNSgDqUYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZoboa2s9jrszgOOYgVZaPlOOCmMB8GA1UdIwQY
MBaAFAgmlUPKRxWLfnd1h63v/X58aLBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgt
NjBmZmRlMGNkN2M3LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgtNjBmZmRlMGNkN2M3
LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVLhjrQp
l25qmm2yxnpfWyCe2LgVbP5G6Y6opkUJt3of14pwZWLHSDrPGzIPIEb18ZEtBTTM
SNbASOLnfLUSkxz5jW1x2pZt7WFgFAirtzFWDVbR4Mj/tQ5aQYfW8Pm/aYQ93COa
9h4Zd9IWZ26aS0PnxPb5kUZpwl2txu/20ji8y+3EuK0/U02DV0JppxMTCD/pR/gD
zh0/v6CW4h/O7N+dnM4b2flD9de8tFxfIiejy5Gu6+QGaVYtYXicCtBF2GfEEg0i
OQ9vu5W2BzhKpvIHMUea+MDx/rCGgZiT1m/vx5uaIVhgOgywHrr+EJPKV93IzlOB
8xOU3Z3UBlSK/Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:22 2025 by rpki-client