Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: wCu6b7RxxTMksXaBLAhe6FpsPTCODPsPnbTdaOGpvs0=
Subject key identifier: AD:20:5F:D8:06:A6:C7:45:4D:48:AA:6B:F0:4E:FB:F6:69:80:37:D6
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 019A4EF4F0982D95822030D2D3D3409AD41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 1438
Signing time: Tue 04 Nov 2025 13:01:06 +0000
Manifest this update: Tue 04 Nov 2025 13:01:06 +0000
Manifest next update: Wed 05 Nov 2025 13:01:06 +0000
Files and hashes: 1: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: owocvOqsQiVz2P+Y+XuyJ++EmwlRG+9THvcqs0f6kQw=)
2: HVKHyWK-3ZYz5KzbpJqwzo297Wc.roa (hash: OXPJlcYgMDd9TeVLc/h7NB1E8LuM//ZUW90WT8mlIsU=)
3: MsZP7jFPKkJqiHU_2G78BAV7afI.roa (hash: MXKAJZ6YryHNNBfafKO5IJGZB2W0L2svHImaEXgu2Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f0:98:2d:95:82:20:30:d2:d3:d3:40:9a:d4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Nov 4 13:01:06 2025 GMT
Not After : Nov 5 13:01:06 2025 GMT
Subject: CN=ad205fd806a6c7454d48aa6bf04efbf6698037d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:36:ee:79:a8:4a:b6:7e:20:c6:0d:0d:10:
7e:47:32:c3:be:1d:91:b6:8a:9f:ee:3b:08:51:31:
34:57:75:70:c8:62:6e:6d:a7:5d:25:1f:4c:73:9c:
d8:6d:6b:41:77:12:9c:5d:4a:9c:a1:49:7e:38:0f:
bd:df:f7:3a:b6:a7:aa:07:b3:49:94:f1:a5:a7:22:
99:b8:d6:a2:3c:db:e1:09:c0:47:fe:7c:94:1e:ce:
e8:fd:b1:f0:e6:2c:cf:82:70:29:75:51:e0:29:3d:
01:69:15:44:f5:f6:44:48:a0:60:d7:81:d8:88:e0:
2f:3d:36:f5:2c:10:24:fb:da:b1:ed:78:88:81:6e:
08:ba:0f:cc:7d:51:dd:35:6b:19:52:e8:f3:d5:94:
3b:f0:75:79:44:2c:b8:ed:05:d7:33:ed:ac:41:8f:
08:cc:0b:d8:02:0b:69:24:b4:7f:29:dd:4c:96:f4:
27:b4:6b:05:56:f9:73:45:72:0b:43:65:20:2d:2a:
a5:26:5c:0c:85:4b:52:31:a5:48:c1:f6:7f:95:47:
fb:4a:57:f2:63:94:9e:2e:82:80:4a:bb:74:c5:1d:
94:f5:08:d1:73:83:69:8c:8c:a8:bd:17:ef:c1:24:
d3:cf:ff:3c:a9:84:2b:76:95:6c:b5:63:82:92:fe:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:20:5F:D8:06:A6:C7:45:4D:48:AA:6B:F0:4E:FB:F6:69:80:37:D6
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8a:65:27:93:27:29:42:ac:67:41:f9:0e:9a:aa:70:e0:6a:
8f:ec:3e:ff:3a:df:65:88:74:6c:01:ac:a3:22:42:d7:20:b2:
3a:43:dc:e5:51:3e:e4:98:aa:13:c2:d2:d2:c7:ca:18:8d:f9:
ab:c6:cb:0a:ad:94:88:cd:31:1d:1e:3e:37:a1:66:4e:95:97:
e6:94:f4:04:fe:9d:15:f5:ef:72:95:c1:be:4b:58:13:9c:01:
f1:4a:14:3b:04:c8:b2:c5:7d:18:11:11:ba:6d:05:9f:11:3f:
82:0b:25:1c:01:bf:ef:91:fd:52:30:78:0f:7a:9e:1a:ce:06:
ee:75:2f:43:1a:01:3e:a5:ac:38:73:84:a4:47:b8:90:40:86:
dc:09:88:86:18:5b:38:cb:51:df:6b:87:4d:5d:10:5e:ee:0b:
86:58:11:a2:34:53:82:e6:d1:60:c2:32:2b:9a:16:8d:57:be:
24:b1:2b:84:11:5b:6c:5d:b0:cb:3f:69:3b:d4:27:72:3b:7c:
dd:e6:47:55:48:20:bd:29:8f:cc:9e:fe:3c:ef:4f:ca:62:02:
fc:3e:0c:01:e0:11:73:c9:9e:b0:dd:38:20:ee:64:b2:27:d8:
43:bb:02:b7:08:c2:3b:87:55:1a:8f:91:13:c7:17:11:c1:61:
28:cb:ec:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:11:36 2025 by rpki-client