Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
File: CegPaQPGpVbSifWLpes41VyzAHE.mft (raw, json)
Hash identifier: UqjztWZDEpMBVe/J3yY01SRbQydue9233Nsc2uZDm1w=
Subject key identifier: E7:FC:68:BE:D7:FD:4C:90:24:DF:7C:2B:59:B9:12:82:04:5E:7C:B0
Authority key identifier: 09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
Certificate issuer: /CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Certificate serial: 0198D5F1CB2ECF27683E8376BFE6A2D82EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
Manifest number: 13
Signing time: Sat 23 Aug 2025 08:00:49 +0000
Manifest this update: Sat 23 Aug 2025 08:00:49 +0000
Manifest next update: Sun 24 Aug 2025 08:00:49 +0000
Files and hashes: 1: CegPaQPGpVbSifWLpes41VyzAHE.crl (hash: 0fWAHbxYNW6wA0Kld/MtUDpPPp9xYDf8Qz3j4aUe5t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:cb:2e:cf:27:68:3e:83:76:bf:e6:a2:d8:2e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Validity
Not Before: Aug 23 08:00:49 2025 GMT
Not After : Aug 24 08:00:49 2025 GMT
Subject: CN=e7fc68bed7fd4c9024df7c2b59b91282045e7cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:61:90:a5:b0:01:8d:fe:a7:fb:6d:c0:58:
ba:e9:43:73:31:2c:f4:b6:6b:f6:b7:04:74:58:0f:
b1:e8:49:f4:22:44:db:3c:e9:28:e7:ed:7e:7c:28:
68:98:3d:9d:21:cc:0e:b3:1f:d9:7e:1c:f2:0e:05:
79:c4:18:02:93:b8:35:65:de:e9:96:2d:6f:a5:1a:
27:8e:2c:86:f5:36:d8:47:2c:29:e2:aa:60:00:eb:
2b:da:b3:bf:6c:d5:eb:c9:a8:96:c3:00:2b:e5:33:
70:c0:8e:1c:63:b4:50:70:c3:db:67:8f:1a:eb:36:
7d:ee:b2:52:6d:23:6a:21:52:c6:14:43:21:20:f3:
ae:d8:87:98:54:a1:77:46:b0:e5:01:fe:61:8c:b4:
29:a4:2a:0f:52:cd:ac:c5:f1:ec:49:05:1c:a4:6a:
e5:43:60:03:3c:e1:48:67:0b:fe:1c:9e:d1:f5:fd:
0c:0d:29:52:20:61:15:52:9c:6f:e5:22:35:d6:db:
93:c0:3c:f2:e4:9b:f4:ff:37:31:e5:b3:82:c9:ab:
2a:0c:37:d0:c1:f4:e0:be:96:e1:0f:5e:7e:05:18:
05:e4:0d:5c:3e:af:c1:aa:6a:cd:7f:99:b7:8b:de:
f4:d6:ee:cb:96:42:ab:62:5e:e9:1e:97:38:19:fe:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FC:68:BE:D7:FD:4C:90:24:DF:7C:2B:59:B9:12:82:04:5E:7C:B0
X509v3 Authority Key Identifier:
keyid:09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:74:6f:f7:fc:d4:b2:8f:cd:37:c4:4e:9e:4f:f8:02:b8:79:
ac:d9:7c:ac:55:85:83:f4:89:c8:5e:eb:fe:9c:6d:8b:2a:e4:
76:68:48:3c:4e:a2:31:fb:54:43:7b:62:2a:1e:b5:04:a4:0a:
3f:0a:b5:26:da:ef:2f:94:6a:5e:ca:9c:ee:f8:4e:b3:0d:b6:
35:ec:53:e4:1f:34:2c:da:2b:c3:77:ea:ec:44:55:8e:10:b4:
ca:3f:db:5c:02:20:aa:ea:75:d4:0f:34:bf:75:a5:d2:a3:d8:
90:b6:9a:d7:79:e4:f4:a7:6f:e4:88:b4:7e:1c:dd:b9:93:84:
67:08:fe:fc:cc:4e:7d:c9:8b:f6:ed:37:ba:9d:91:0d:2b:8d:
5c:7c:df:1d:41:2b:e9:52:da:82:ad:82:94:85:9d:50:e5:71:
c1:b0:e4:53:fb:f3:f9:06:45:17:18:fd:81:b4:61:78:7a:19:
10:1b:d7:ab:fb:b6:ae:d7:1a:b4:a9:87:af:8b:97:ad:55:75:
c7:82:0f:79:0d:9a:ea:31:22:3d:6b:d3:84:aa:6b:88:68:71:
2e:ba:21:49:1d:b7:b7:54:65:08:12:94:3b:06:d3:60:cc:ba:
36:fa:c2:04:15:c2:84:a8:09:02:a8:6e:5f:d7:32:bf:58:b0:
19:c7:b4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:12 2025 by rpki-client