Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier: eA/su8ZPrFlgPX1Y6EGe4dF7zXrHWrVhT8hDTATRpHE=
Subject key identifier: 23:83:31:EC:F2:02:62:AE:B7:33:1F:B6:16:AD:CC:E3:43:9A:57:0C
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 0198D5F1CE9BF706ECCB97B594047FF57AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number: 0792
Signing time: Sat 23 Aug 2025 08:00:50 +0000
Manifest this update: Sat 23 Aug 2025 08:00:50 +0000
Manifest next update: Sun 24 Aug 2025 08:00:50 +0000
Files and hashes: 1: 5OdHvHOcZkrao-9cj9p2twVtXj0.roa (hash: XE/cbPsbZGNTjgltCjh6PwbFsSQa/FeH5vMG4ogZQBU=)
2: BxevXOZBdFUOOljteOuO-Rxt-CY.roa (hash: 3iKh9PQRS6dYBM+vLpV5Vh4W7QUExMRDQ5j2EO0fnVo=)
3: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: fUohnvcoBQqouMuZH9xE6uDTguo8CBxJC9vPHu0kwXc=)
4: dxDHiWZSI0UaIHekmjGJ3sxW6wY.roa (hash: miwDVBoTIblNIC6j43ewfXiSRHSZo0go2veqU8bISQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ce:9b:f7:06:ec:cb:97:b5:94:04:7f:f5:7a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Aug 23 08:00:50 2025 GMT
Not After : Aug 24 08:00:50 2025 GMT
Subject: CN=238331ecf20262aeb7331fb616adcce3439a570c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:10:b7:f5:e3:6c:ff:c3:35:7d:4f:9e:1a:a7:
54:f3:78:28:db:a7:42:d0:15:24:b6:89:ed:35:91:
0b:f9:e7:62:c8:90:f6:c0:26:6e:b9:02:76:f0:24:
57:59:aa:86:fc:33:46:d2:27:fd:03:f0:ca:63:56:
47:e9:6c:a8:38:f4:77:c3:66:b5:2b:7e:45:7e:39:
13:32:2d:1e:36:b4:77:1e:7b:5d:8f:71:eb:70:57:
23:2f:4f:20:3b:d2:2f:21:df:1a:da:30:af:71:44:
9b:6c:69:54:1b:8c:a4:e5:47:e2:41:9e:ae:2b:91:
96:79:34:8b:a5:29:94:ea:41:7a:f0:f8:f9:71:5e:
08:5d:76:a8:61:a1:f7:d3:40:07:ef:5f:56:b0:c2:
0e:c9:ac:29:36:61:98:7e:17:0e:e4:ea:69:e2:be:
8b:21:18:09:f5:a5:e2:5e:ea:7f:26:4f:a0:84:42:
30:7e:34:1a:2c:1f:cb:09:a1:2d:5e:c6:5f:9e:3d:
54:59:df:9d:3f:14:f4:0a:a3:fc:8c:db:1c:46:45:
e8:1b:0e:35:64:22:22:a8:74:fb:40:9e:16:fb:d5:
9c:bb:a2:c3:a0:85:ac:1f:28:4b:76:8b:f2:c9:cf:
db:ca:7c:a7:f8:cd:e2:7a:ad:f6:33:57:6c:e1:4f:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:83:31:EC:F2:02:62:AE:B7:33:1F:B6:16:AD:CC:E3:43:9A:57:0C
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fb:63:fc:3e:46:3e:1e:ff:61:ce:a8:88:3b:95:98:7b:4e:
8e:ef:6d:df:f7:d7:6d:68:c8:b6:69:81:e5:8e:7d:71:e6:42:
54:97:21:16:ba:21:6e:e5:50:9f:7c:ef:cf:8d:80:96:82:9f:
3e:ba:30:60:75:4c:f1:99:c2:64:1f:eb:92:d0:26:5f:52:e5:
e1:be:68:d1:cc:e2:9a:e4:27:5c:fe:ca:f4:d1:8c:83:2a:c7:
ef:d2:81:90:b8:8f:0a:5f:0b:2b:7b:dc:d7:3d:83:c6:d3:c4:
52:cc:b7:c3:54:f6:af:04:d3:3d:14:91:ff:39:bd:42:65:7d:
c7:e8:ba:a1:b1:fa:60:e5:6c:34:53:2b:a0:35:ed:a8:0e:17:
24:d2:8d:75:10:a2:53:24:66:80:d9:44:76:8d:3d:61:51:65:
8b:33:b3:55:62:c6:fb:5c:38:ef:6b:36:89:5e:b7:4e:62:ac:
7f:9b:0a:f3:8f:8e:66:8d:7b:89:22:c6:35:e4:b4:a0:f2:61:
07:57:76:1a:d1:3a:48:26:0b:7a:68:62:3d:bb:bb:0b:62:4d:
10:96:61:13:f5:22:7d:fd:3c:30:cc:bc:f2:d0:5c:d1:d5:53:
e1:be:d0:9e:6a:87:f2:ba:28:11:1c:1c:13:5b:91:1d:54:0c:
81:1b:a7:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8c6b9wbsy5e1lAR/9XqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWU3ZWUwZjc1YjcxNjRhYzc1OTYxOTdjN2YxMjFkNmZj
YTE1NzYwHhcNMjUwODIzMDgwMDUwWhcNMjUwODI0MDgwMDUwWjAzMTEwLwYDVQQD
EygyMzgzMzFlY2YyMDI2MmFlYjczMzFmYjYxNmFkY2NlMzQzOWE1NzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRC39eNs/8M1fU+eGqdU83go26dC
0BUktontNZEL+ediyJD2wCZuuQJ28CRXWaqG/DNG0if9A/DKY1ZH6WyoOPR3w2a1
K35FfjkTMi0eNrR3Hntdj3HrcFcjL08gO9IvId8a2jCvcUSbbGlUG4yk5UfiQZ6u
K5GWeTSLpSmU6kF68Pj5cV4IXXaoYaH300AH719WsMIOyawpNmGYfhcO5Opp4r6L
IRgJ9aXiXup/Jk+ghEIwfjQaLB/LCaEtXsZfnj1UWd+dPxT0CqP8jNscRkXoGw41
ZCIiqHT7QJ4W+9Wcu6LDoIWsHyhLdovyyc/bynyn+M3ieq32M1ds4U+orQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCODMezyAmKutzMfthatzONDmlcMMB8GA1UdIwQY
MBaAFAnufuD3W3FkrHWWGXx/Eh1vyhV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTct
NjY4M2M4ZmM5ZTViLzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTctNjY4M2M4ZmM5ZTVi
LzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/tj/D5G
Ph7/Yc6oiDuVmHtOju9t3/fXbWjItmmB5Y59ceZCVJchFrohbuVQn3zvz42AloKf
ProwYHVM8ZnCZB/rktAmX1Ll4b5o0czimuQnXP7K9NGMgyrH79KBkLiPCl8LK3vc
1z2DxtPEUsy3w1T2rwTTPRSR/zm9QmV9x+i6obH6YOVsNFMroDXtqA4XJNKNdRCi
UyRmgNlEdo09YVFlizOzVWLG+1w472s2iV63TmKsf5sK84+OZo17iSLGNeS0oPJh
B1d2GtE6SCYLemhiPbu7C2JNEJZhE/Uiff08MMy88tBc0dVT4b7QnmqH8rooERwc
E1uRHVQMgRunxA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:01 2025 by rpki-client