Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
File: CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json)
Hash identifier: HvBj6Sz79+YImARJTP0v6QoKt5Pe9iFFDHblm7EcnBc=
Subject key identifier: 8C:56:93:69:96:07:C2:E0:71:F6:79:06:A6:EC:94:43:84:F3:84:7C
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial: 019A541B1EE73D8262839D585ED7A31F446B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
Manifest number: 16A0
Signing time: Wed 05 Nov 2025 13:00:54 +0000
Manifest this update: Wed 05 Nov 2025 13:00:54 +0000
Manifest next update: Thu 06 Nov 2025 13:00:54 +0000
Files and hashes: 1: 61-G3WXkR-SwbN4v7xZM_7MiENo.roa (hash: dPwb3l0zAU2N1RIH5n+vuaC+VR/dScikzlcMxqnd6Lg=)
2: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: uqP/16FyNtUdG0XLYLX2sToasZr0rrZeMVJH/Nkr5J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:1e:e7:3d:82:62:83:9d:58:5e:d7:a3:1f:44:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Validity
Not Before: Nov 5 13:00:54 2025 GMT
Not After : Nov 6 13:00:54 2025 GMT
Subject: CN=8c5693699607c2e071f67906a6ec944384f3847c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:6d:83:8b:bb:51:0d:9e:10:48:f9:a4:7e:
bf:56:b0:5e:d5:39:2b:1d:bf:59:c5:1f:fd:b5:be:
21:e2:32:2b:d7:ad:a6:37:e2:e2:77:71:c1:28:82:
d3:e0:10:73:1e:61:80:0b:ae:5e:4e:79:32:65:c9:
fb:08:f5:e3:e0:85:ad:a2:74:a8:4f:e5:3c:10:53:
ba:00:cd:be:1c:f7:e9:76:45:c0:49:67:88:b7:70:
08:18:0f:11:48:0d:ee:13:aa:e7:90:0a:22:73:e0:
28:8d:75:17:fd:86:9d:4e:9c:c1:16:a0:8d:ca:15:
c7:a5:f1:b3:ac:37:17:9f:2f:ec:d1:e5:88:2d:76:
31:45:73:72:1f:e4:85:58:cb:83:00:14:2f:77:f6:
40:ff:6e:54:17:24:01:86:6a:a5:30:4f:7e:38:51:
fc:29:9b:1f:b6:8a:05:12:76:82:c7:59:bd:dd:fa:
38:4c:ab:e0:5f:4c:d3:53:1c:47:f6:59:0b:26:a6:
d0:68:af:e0:43:48:30:5b:4c:13:08:69:45:80:02:
d4:c8:8a:e3:99:1f:03:bf:eb:01:1a:02:ad:63:f7:
d8:6c:8d:59:00:12:1b:53:8d:4f:7d:1e:62:1e:e5:
0c:55:18:b2:d9:d1:4c:57:ff:29:57:d9:15:6b:51:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:56:93:69:96:07:C2:E0:71:F6:79:06:A6:EC:94:43:84:F3:84:7C
X509v3 Authority Key Identifier:
keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e5:af:0b:ce:5d:53:0a:b2:14:78:30:9d:5a:01:24:59:04:
df:32:99:11:5b:72:79:04:9e:cd:46:ad:81:06:3c:19:8f:91:
c4:61:b5:64:ec:52:fa:2b:1c:36:f4:4f:ab:3d:0b:c9:bf:da:
0f:27:4a:4e:eb:a3:fe:54:50:3f:79:d0:97:34:c4:23:ec:d3:
16:81:3b:b4:a8:93:7b:6a:6c:69:2c:5f:9f:0d:c5:15:54:5f:
45:bc:36:f8:d4:c1:8b:f8:e5:ea:b3:5e:3f:08:7a:77:26:4e:
fb:57:fd:4c:04:4a:62:f2:b1:49:38:59:69:ee:a5:e4:84:7c:
d0:6f:8b:8c:92:1d:00:ec:eb:32:71:94:b7:a8:81:51:fb:9b:
da:19:31:94:90:c9:a7:36:85:7f:8e:62:30:6b:6b:fb:8e:71:
f9:91:bc:78:0c:98:30:17:3f:7b:1a:8e:82:18:87:6b:bf:c7:
a3:0b:94:36:19:65:df:a7:97:39:5d:7e:1a:de:1b:1c:81:aa:
e9:3b:cd:4c:fc:be:01:bd:4a:e9:4e:a0:ab:25:12:db:77:d8:
87:ac:ea:0d:9f:80:47:eb:e4:57:f9:fc:08:70:15:63:aa:40:
fd:2c:9c:e8:e3:b0:7d:26:21:aa:f1:ef:f5:d8:91:c8:d6:54:
11:c0:7d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:18:05 2025 by rpki-client