Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
File: CegPaQPGpVbSifWLpes41VyzAHE.mft (raw, json)
Hash identifier: Rut6avdsgy4Lou1cBbIraXkDKsXZicFRdKkwnl+8mnU=
Subject key identifier: 2C:80:BE:04:86:EE:4E:10:B5:50:6D:87:F7:7C:A4:B5:EB:9E:EC:F5
Authority key identifier: 09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
Certificate issuer: /CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Certificate serial: 0199FD6B46BB369F59200D5BEDA74BF5A4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
Manifest number: AC
Signing time: Sun 19 Oct 2025 17:01:29 +0000
Manifest this update: Sun 19 Oct 2025 17:01:29 +0000
Manifest next update: Mon 20 Oct 2025 17:01:29 +0000
Files and hashes: 1: CegPaQPGpVbSifWLpes41VyzAHE.crl (hash: BhOuR358c2GK760A7EJ3qGiHrN3kypHajSehdDxibYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:46:bb:36:9f:59:20:0d:5b:ed:a7:4b:f5:a4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Validity
Not Before: Oct 19 17:01:29 2025 GMT
Not After : Oct 20 17:01:29 2025 GMT
Subject: CN=2c80be0486ee4e10b5506d87f77ca4b5eb9eecf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:f1:e8:d6:0d:4d:36:62:18:29:64:50:30:
9f:e8:ec:39:55:92:6b:3a:8f:a2:3c:7a:05:f8:ca:
02:da:60:9c:a1:56:5a:b1:4e:d9:4e:21:ee:12:01:
82:90:67:a0:ed:8b:6d:fc:30:42:5a:e5:18:a0:e7:
55:ae:6c:ca:60:01:83:78:06:b8:54:a9:e8:a7:9d:
f6:86:a0:64:b7:23:da:10:95:b3:0c:f7:4f:79:72:
b0:ad:44:ff:79:94:f0:f5:eb:e6:01:bd:2e:fa:f0:
53:5a:af:2d:59:2a:0d:11:37:52:89:8a:8e:a5:af:
cd:41:8f:c3:06:0c:d3:5a:79:6e:0a:89:44:3a:e0:
60:19:ad:ac:27:74:80:43:0f:9b:d9:00:99:fe:18:
27:f9:1d:1a:fa:50:54:e1:16:0e:d5:3f:55:58:e4:
a3:e4:b8:43:55:24:2e:6f:74:05:c6:a7:b6:78:41:
9a:00:2c:aa:73:4d:99:82:f5:15:f2:ac:e8:fb:75:
5c:6c:e2:14:9f:c1:da:10:97:8d:db:d1:43:46:eb:
fd:e1:4b:12:53:ab:e6:4e:f5:c9:3f:6a:44:23:7a:
e8:a7:b6:15:82:ce:1d:b0:98:87:41:5f:55:af:ff:
95:f4:c4:16:83:43:47:c9:30:2e:a3:fe:b6:9b:0f:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:80:BE:04:86:EE:4E:10:B5:50:6D:87:F7:7C:A4:B5:EB:9E:EC:F5
X509v3 Authority Key Identifier:
keyid:09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:81:e7:a4:c6:2a:97:51:bc:4a:e6:0d:d1:c2:13:5a:a2:11:
c4:09:80:51:41:9b:98:b9:e3:c3:0f:12:f9:fd:15:94:41:51:
cd:b3:eb:e6:8e:3a:e7:80:b4:4f:bb:af:f7:1c:40:34:5f:db:
34:e7:4f:0f:bb:23:b5:c9:e1:73:d3:c5:03:d0:ed:ff:35:bf:
4e:f8:90:fb:0d:d3:ff:d3:7f:ee:96:55:d0:91:9a:63:6a:5a:
62:cd:0a:a8:43:6d:d7:ba:5b:f2:36:8f:1a:66:ce:2f:58:b9:
84:f5:07:03:08:f3:03:69:0d:6a:07:d1:97:e5:79:8e:45:06:
f9:ba:53:2a:54:cd:36:67:ff:ff:7f:9b:67:61:ae:fb:4f:02:
13:10:51:30:7b:5e:82:46:79:29:58:93:02:bc:ca:dc:ef:a3:
34:8a:b0:c9:70:b7:09:5c:23:6a:4b:27:c7:51:b6:82:b6:37:
c6:c5:3c:28:37:f7:f7:70:ec:36:b9:69:12:42:58:fc:ca:fd:
79:b9:b7:12:ea:20:0b:22:fc:2c:d1:86:29:fa:26:20:db:5b:
e0:89:8c:65:63:2b:f2:d4:b2:4c:f5:4f:40:f9:9f:99:f8:82:
3f:c8:a6:0d:d4:2f:97:4e:e1:56:d0:b8:db:cf:bf:7b:8a:29:
f4:7b:63:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:22 2025 by rpki-client