Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: 3SlVsZzE7SUz0naIX/ithCrBdACqy6gFmb0AxnQH4mY=
Subject key identifier: 19:18:63:11:08:A3:A2:09:61:FD:F2:D5:E3:20:A2:2F:FC:C8:77:0F
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 0199FEB4BC54E336B6CC2EB3D8FFDFE0FE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 13BF
Signing time: Sun 19 Oct 2025 23:01:21 +0000
Manifest this update: Sun 19 Oct 2025 23:01:21 +0000
Manifest next update: Mon 20 Oct 2025 23:01:21 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: +p4rGP0u+ptd7nQESbKsHvYwf8f36nzTt5t41KecTVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:bc:54:e3:36:b6:cc:2e:b3:d8:ff:df:e0:fe:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: Oct 19 23:01:21 2025 GMT
Not After : Oct 20 23:01:21 2025 GMT
Subject: CN=1918631108a3a20961fdf2d5e320a22ffcc8770f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:7a:2a:43:8d:e2:6e:cb:e3:f6:af:26:4d:
84:f3:25:69:0e:5d:48:fa:b1:c3:96:dd:94:51:af:
ed:f1:3f:3f:5e:c8:8a:8f:d6:98:11:bb:48:b4:aa:
93:f3:2c:4c:13:77:bf:c8:2a:fa:99:59:f6:b0:02:
9c:e8:38:d6:5f:2d:df:f5:ca:f9:e0:05:75:07:74:
f2:45:6b:2f:37:ff:c0:3b:4c:c1:9c:00:eb:c3:65:
ac:58:50:31:b9:26:33:18:39:e5:d6:a1:06:98:2b:
f7:94:09:a3:37:4e:6a:b5:0c:b3:aa:9a:df:07:5b:
01:fb:cf:71:79:3c:18:f0:ef:13:e8:45:67:78:d7:
28:cf:63:5f:37:cc:9c:d2:81:85:51:f4:e6:62:2f:
3c:2e:f1:c2:67:d5:bf:46:0b:ba:03:84:c1:6a:67:
8b:1f:74:01:26:b5:d3:16:7b:0d:01:5f:ba:48:1d:
9a:15:07:aa:de:cb:50:ea:3d:b7:ca:9d:65:c0:a7:
d7:bb:32:40:75:4e:87:e0:fe:a0:14:3b:9c:c5:77:
a6:b6:85:da:1b:9a:90:16:23:be:01:79:de:6e:b1:
0f:30:ef:22:0e:9d:91:ee:a6:be:c3:92:33:19:91:
ae:bf:94:f6:e9:db:c5:e4:5c:8c:64:d4:33:6d:bc:
d0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:18:63:11:08:A3:A2:09:61:FD:F2:D5:E3:20:A2:2F:FC:C8:77:0F
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:86:4b:05:f9:e3:ea:d1:17:5f:93:4d:fa:5d:d0:f9:85:f2:
0d:3d:db:9a:f6:71:6f:33:fd:56:e2:45:66:20:20:d2:8f:f5:
c9:65:88:b6:56:bd:45:81:9a:17:8c:85:ba:99:37:3c:6b:93:
a4:e4:b5:40:73:31:57:fe:fa:be:89:66:44:a6:79:10:b0:4a:
89:e2:bc:9b:8b:2d:a2:45:0f:72:0e:6e:53:79:18:77:10:d4:
17:a6:c0:dd:3b:93:90:3e:75:b1:20:b1:98:cd:79:ff:d4:a5:
63:f6:97:21:c6:55:09:23:04:38:a0:bc:1a:b1:ed:f1:c5:0c:
f0:31:f4:52:3a:6d:6e:77:ee:0f:13:b8:7f:b3:22:ab:de:7c:
84:7a:01:8e:eb:86:6b:7d:16:70:26:cd:50:28:95:00:49:25:
04:54:c2:f0:3b:13:6f:6b:e9:f3:3e:f0:c1:76:54:e2:fc:41:
54:93:5d:07:ca:98:2b:66:5d:fc:80:c1:2f:5b:3d:cc:82:44:
d0:83:72:73:f3:f0:ec:98:63:81:12:e2:e6:62:8b:89:31:fe:
d8:8f:5c:05:0e:39:32:5f:4a:7b:b4:b0:4e:78:8c:27:cf:e7:
79:85:d3:cf:30:a7:34:bf:16:e8:62:51:2d:6c:ad:22:8e:1f:
70:e9:2d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:21:30 2025 by rpki-client