Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier: x26/nvJZ2nW8nh272wg2Hx4sS9uJ5W/ca94xgbvMrQs=
Subject key identifier: EE:39:D9:91:2C:04:46:33:55:9C:AF:1B:E8:FC:5E:30:0D:D3:65:06
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial: 01976E199BD0DF7A6910BADA0A061FC8508C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number: 14BD
Signing time: Sat 14 Jun 2025 11:01:01 +0000
Manifest this update: Sat 14 Jun 2025 11:01:01 +0000
Manifest next update: Sun 15 Jun 2025 11:01:01 +0000
Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: KyXyHeNznVl6LqQrwU1UuMzIkXvbemrFTzV2kZ4lJzo=)
2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:9b:d0:df:7a:69:10:ba:da:0a:06:1f:c8:50:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
Validity
Not Before: Jun 14 11:01:01 2025 GMT
Not After : Jun 15 11:01:01 2025 GMT
Subject: CN=ee39d9912c044633559caf1be8fc5e300dd36506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7d:41:86:33:ff:77:93:4b:58:5d:1a:88:7d:
98:7f:a0:0e:59:c3:85:a9:df:3c:7e:e6:ae:66:d9:
04:67:60:fb:90:a2:6f:02:99:ff:3f:99:2d:87:1f:
78:a5:7c:1e:f2:f2:bb:91:76:31:41:9b:54:a7:9c:
33:a3:de:be:cf:6a:fc:a3:df:c3:35:87:8b:2d:c2:
8b:77:66:51:a7:d0:4d:6c:ff:53:ba:09:6b:d7:28:
1b:8d:3c:2f:0e:da:12:df:b6:29:26:8e:d6:ed:e4:
7c:80:89:af:97:6a:38:de:ac:3c:ba:94:64:3b:17:
fa:55:6f:75:a5:64:cf:08:82:8b:3f:80:eb:9e:24:
dc:c1:a0:d6:18:eb:c3:bc:97:ec:e4:5a:dd:e9:f6:
56:d4:df:80:e3:d2:b3:b8:3f:be:1d:40:56:ab:6d:
c4:ec:be:87:aa:f7:c9:69:f8:de:a7:a5:1e:b2:b4:
32:af:5c:a4:75:12:04:7d:08:16:88:0a:3c:2b:86:
53:4d:50:14:e6:19:2d:78:36:f2:83:13:5e:36:a2:
b3:3d:21:ac:cf:77:84:aa:98:a9:40:55:a0:20:ee:
9e:a9:32:0c:e1:fc:9c:65:b5:a1:86:ce:ef:b6:db:
1e:68:6b:04:f2:cc:13:31:54:f0:5c:e8:f4:59:97:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:39:D9:91:2C:04:46:33:55:9C:AF:1B:E8:FC:5E:30:0D:D3:65:06
X509v3 Authority Key Identifier:
keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4d:8a:d9:e0:c5:93:2c:17:44:58:de:52:60:15:23:47:5e:
77:87:e8:b2:0a:74:96:29:2e:02:df:2f:f7:dc:dc:70:f8:ca:
a6:5d:61:15:f9:79:3d:7e:dd:02:e1:2b:28:17:18:18:b8:d4:
bd:01:0f:95:0f:00:25:8a:fc:a7:91:ca:e4:77:1f:d6:74:9c:
47:64:28:21:9b:51:2e:e0:44:fe:a7:ac:17:a6:58:05:26:63:
81:71:ee:7a:27:c5:1d:30:13:22:5e:6e:41:4b:ed:15:35:73:
ca:8a:d3:e7:12:ca:e5:57:33:e1:45:da:df:28:c1:d5:71:bb:
b3:21:db:1e:e4:1f:3a:41:45:e5:2e:74:75:76:ff:39:22:88:
62:e1:05:58:a1:b5:24:23:cb:af:db:b4:9b:92:62:c8:db:3d:
e1:da:fc:13:ff:ca:fe:a4:dc:62:dd:3c:99:a1:9a:5c:b6:33:
b5:3f:43:13:33:4b:24:9c:e4:7d:c5:21:be:60:c0:ba:44:44:
6b:3e:c6:d3:1b:94:45:a7:61:9f:3e:04:e6:6c:1e:56:56:ec:
c3:12:0b:15:d3:40:c4:a5:f0:a6:6e:6b:8a:73:e1:ed:4e:75:
e3:cc:9c:85:4f:18:0e:0e:37:74:7c:59:66:cf:49:e3:87:49:
1b:56:4c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:35:00 2025 by rpki-client