Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: /LffM9VAoVVSf4AHPCRqYE3nKDMW1on9I7Hlds75o+w=
Subject key identifier: FD:6E:63:49:02:60:A3:18:07:60:53:BB:93:62:D7:BA:7C:9B:23:90
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 019894B766691ECEE92EE76431C41443476B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 0FE1
Signing time: Sun 10 Aug 2025 16:01:43 +0000
Manifest this update: Sun 10 Aug 2025 16:01:43 +0000
Manifest next update: Mon 11 Aug 2025 16:01:43 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: l1SSBfUld+49q+hpuKGH7zv0zO1YCEwo9RVe36BiFZ8=)
2: QFbV3cLIo6fGM98z7n86TaXk26k.roa (hash: OdVi+1rHdt0zdTh+loubxHzRa31DZflpr11+itY/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:66:69:1e:ce:e9:2e:e7:64:31:c4:14:43:47:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Aug 10 16:01:43 2025 GMT
Not After : Aug 11 16:01:43 2025 GMT
Subject: CN=fd6e63490260a318076053bb9362d7ba7c9b2390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:74:0c:6e:c5:45:04:27:f2:aa:d0:17:d7:
b9:f6:81:12:09:4f:39:73:51:b9:57:25:81:4a:16:
bf:c0:fc:1a:b3:b2:55:0b:e7:d9:df:2e:f0:59:fd:
bb:3b:a3:95:14:c1:6c:77:96:27:54:f1:53:55:4d:
ff:b2:9d:c6:51:a0:fb:31:0e:e5:6d:22:4d:5b:7b:
9d:54:43:52:e4:b6:c7:1b:5a:0a:93:4c:0b:c2:b2:
c9:de:09:47:2c:e2:66:51:5a:fe:74:cf:c5:f2:0d:
63:5e:6f:a8:c9:06:07:37:e1:b7:4f:dd:96:ff:eb:
f5:20:f1:fa:79:e3:30:a5:b1:8f:5d:85:c3:5f:d3:
5b:e8:a3:f6:e1:ca:df:3b:24:09:70:11:22:05:59:
dd:d9:37:f5:d6:c0:72:9a:17:0d:d4:d6:d7:40:ba:
1f:00:b2:91:e6:15:20:56:d8:2b:f1:90:14:a3:6f:
6a:b1:88:3a:f5:4e:7d:af:f9:65:2a:3b:a6:69:af:
04:64:b5:cc:9d:32:bc:70:e2:85:0a:cf:c6:2b:39:
40:e6:9f:bc:67:63:9a:51:36:6c:26:75:f4:c7:fe:
0d:55:e5:3c:38:9a:db:76:04:fd:4a:90:7f:e3:66:
40:ab:8d:dd:ed:2f:b4:eb:f7:1c:5a:38:92:3e:f9:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6E:63:49:02:60:A3:18:07:60:53:BB:93:62:D7:BA:7C:9B:23:90
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4f:82:8c:19:4f:2e:24:07:ad:fe:f7:93:44:57:b5:92:ac:
6e:fb:fe:57:4b:06:b3:f3:56:d8:75:3b:9f:a3:96:80:3d:ac:
77:71:df:5f:28:b8:cd:1a:98:1d:ea:18:32:cd:23:98:77:61:
84:d4:a6:44:d5:57:3c:b0:a8:51:b8:22:f9:75:a5:29:f6:3d:
1b:16:8e:3a:6f:dc:3a:ae:43:da:ba:ca:65:a1:83:e5:4e:61:
3f:63:e9:60:20:cc:3b:5a:f3:0a:7e:b9:a5:61:27:9c:c0:42:
3f:79:01:26:a1:78:56:fa:6d:af:0c:f6:e4:6a:37:01:4c:bf:
3a:19:8c:d8:c3:62:08:e8:ab:1b:c5:9f:ef:7a:32:7d:75:a3:
b6:d6:c6:ad:90:f3:9d:79:1a:10:be:66:7e:d3:20:d0:8f:8b:
96:31:54:24:f0:a2:b6:e2:cc:d0:12:49:1c:8f:ca:fe:00:db:
97:72:e7:35:5b:db:05:79:f7:81:17:19:2f:ca:cc:2a:56:d6:
1a:6d:b7:a6:7c:a7:24:42:09:76:aa:73:17:38:04:c2:a7:b8:
82:23:c4:d9:d9:1e:d3:5b:c4:e9:01:f1:6f:2d:bb:82:0e:1c:
fa:47:c6:14:a6:78:04:05:cb:50:0b:c8:07:47:cb:2c:c0:78:
3c:62:99:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:17 2025 by rpki-client