
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier: zkwOpwPrrQoT9KrX2q4t2lFB4Gu3+8mUcF0dLE8hELo=
Subject key identifier: EF:93:D1:2B:9A:CC:83:D8:B3:96:D0:C3:20:6F:6D:C9:43:30:FE:86
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial: 019872CFEEC05257D8E2A90B8A0B2833C652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number: 1544
Signing time: Mon 04 Aug 2025 02:01:26 +0000
Manifest this update: Mon 04 Aug 2025 02:01:26 +0000
Manifest next update: Tue 05 Aug 2025 02:01:26 +0000
Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: PBxaK/j4ZynbG5sBPHz0mL38FTUn3H7yYqa9HJhWRlI=)
2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:ee:c0:52:57:d8:e2:a9:0b:8a:0b:28:33:c6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
Validity
Not Before: Aug 4 02:01:26 2025 GMT
Not After : Aug 5 02:01:26 2025 GMT
Subject: CN=ef93d12b9acc83d8b396d0c3206f6dc94330fe86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:18:7a:10:c0:83:1d:f2:af:67:33:ee:72:7e:
0c:43:90:b5:7e:5c:be:70:b9:92:fe:ae:2c:00:c2:
16:af:7d:58:42:89:58:86:38:83:d6:3d:ab:e1:fb:
a6:c4:cb:44:a7:3d:fe:e4:8b:d1:97:2e:3b:3b:00:
5a:37:31:e9:5c:a1:c4:d3:6a:0d:f4:51:cf:f2:ba:
a9:fe:eb:67:fe:ba:6a:a5:5f:87:ea:ea:94:17:ab:
23:4f:65:62:93:19:ff:c1:c3:ad:99:42:da:b2:ac:
9c:1b:e5:04:1e:e3:4b:2c:df:77:0f:ac:69:07:93:
d3:56:8d:12:a3:07:bb:fc:d7:75:79:00:a3:d8:a8:
2c:a1:08:3c:f9:b1:bc:05:7e:78:58:e7:03:57:c4:
e1:1c:49:ef:3c:f3:ce:b3:5a:5d:c3:e2:78:11:29:
b8:32:a0:5f:6e:f7:f8:2d:37:5c:4f:4c:83:c0:a0:
1a:0c:41:25:0f:0d:59:dd:d5:bf:f2:17:2f:df:8b:
3e:b3:d5:63:ad:91:23:64:e0:ec:85:7d:52:3b:76:
25:1c:0b:53:97:30:dc:18:46:5d:a7:75:31:fd:22:
e5:86:fb:e7:e9:58:e4:1e:13:1a:91:fc:85:ae:cc:
1b:cf:8a:2e:72:0f:a5:9c:38:96:8f:0a:e4:a7:7e:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:93:D1:2B:9A:CC:83:D8:B3:96:D0:C3:20:6F:6D:C9:43:30:FE:86
X509v3 Authority Key Identifier:
keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:17:10:c0:be:80:de:81:0b:ef:c7:fb:ce:3f:bc:f2:ba:80:
6e:4d:19:0c:f1:11:4e:02:52:a5:37:d8:bf:d1:1f:9f:c9:b0:
88:dd:11:2d:b6:3c:b3:12:db:e8:fd:0f:b6:d7:58:a5:e8:89:
96:76:3d:c1:ab:59:22:a4:ec:10:80:63:61:d8:f5:62:d9:f8:
f9:0e:ec:d5:ac:a8:42:47:29:ef:d0:c5:a5:2b:57:6a:ff:0f:
fc:a8:28:bb:31:4e:0b:ac:0c:df:cf:3b:d4:ad:89:df:66:70:
f6:a9:19:82:7b:08:d9:4b:ed:3b:f5:04:2c:e0:3d:60:92:1c:
e6:98:95:b7:bc:2b:8b:3a:0d:c1:87:44:a4:71:6b:70:0f:75:
aa:7d:03:1e:e5:57:7d:18:b8:37:c1:7e:c2:77:ed:83:7b:27:
73:62:b4:7c:c3:70:f7:f5:0a:8e:8c:bb:41:da:44:6f:0c:59:
f5:95:df:27:e0:82:25:26:7e:ca:54:48:e7:38:bc:4a:ca:a4:
80:72:f6:ad:a2:a1:30:d7:e6:42:d1:e6:5b:df:fb:e9:4a:33:
89:f0:c0:d7:6e:1a:5a:5f:ef:33:5c:26:f6:b2:6e:8e:fe:82:
4f:57:7c:c6:2b:4e:38:55:a7:90:8a:cd:47:7e:30:5b:0e:79:
9a:ba:af:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:42 2025 by rpki-client