
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier: S1lfZSO4O2MzqM7buHf6250zVoeooa7+mwONYvnjseQ=
Subject key identifier: 93:4D:6F:65:70:58:9E:F7:12:60:FC:CC:31:8C:1A:08:B9:D1:8B:00
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 0199FF59B8681AE4AAE68B848839065F3AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number: 082C
Signing time: Mon 20 Oct 2025 02:01:33 +0000
Manifest this update: Mon 20 Oct 2025 02:01:33 +0000
Manifest next update: Tue 21 Oct 2025 02:01:33 +0000
Files and hashes: 1: 5OdHvHOcZkrao-9cj9p2twVtXj0.roa (hash: XE/cbPsbZGNTjgltCjh6PwbFsSQa/FeH5vMG4ogZQBU=)
2: BxevXOZBdFUOOljteOuO-Rxt-CY.roa (hash: 3iKh9PQRS6dYBM+vLpV5Vh4W7QUExMRDQ5j2EO0fnVo=)
3: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: aNZP6pmsZzBGP7lgKD03j4j2tAJ/zN4J354z2QqHaPM=)
4: dxDHiWZSI0UaIHekmjGJ3sxW6wY.roa (hash: miwDVBoTIblNIC6j43ewfXiSRHSZo0go2veqU8bISQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:b8:68:1a:e4:aa:e6:8b:84:88:39:06:5f:3a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Oct 20 02:01:33 2025 GMT
Not After : Oct 21 02:01:33 2025 GMT
Subject: CN=934d6f6570589ef71260fccc318c1a08b9d18b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e1:98:9b:99:18:5f:2c:32:ee:06:fd:80:b0:
c8:09:ae:44:9b:e7:6e:70:76:5c:6b:88:c0:7e:1b:
23:54:a7:e5:9a:59:f3:5b:e5:b6:7d:0e:b3:ca:79:
79:36:ae:82:bf:a7:b5:5d:31:c7:54:a9:16:5b:3b:
d4:90:6e:c2:9e:db:69:75:f2:92:97:42:70:4e:f4:
6e:ef:91:0d:0d:b1:1d:04:ee:3e:46:28:af:e4:42:
cd:0d:8a:b2:ff:13:da:87:5e:e5:d0:7a:7f:f9:8c:
d9:7e:a0:82:25:1e:f7:f9:cc:77:5e:76:da:b3:2a:
d4:99:36:7b:7d:a6:98:62:54:34:65:ad:6e:d9:50:
01:2f:f2:e9:54:22:a1:a4:1b:ad:59:01:c9:6f:7c:
c3:48:c0:1e:67:37:4e:16:61:00:ad:90:a3:29:de:
e2:6d:50:2e:62:61:f5:7b:ca:b5:ab:72:46:fa:66:
7a:f9:39:6e:bf:36:a6:6e:b0:dd:3b:45:50:9c:2c:
e1:4e:a8:06:d3:f1:5f:ef:58:a5:bc:0f:d0:bb:29:
a4:11:29:39:78:c8:e1:26:d8:ad:fa:db:a2:23:84:
21:50:39:cc:c7:b4:1f:ac:e4:f0:40:8e:36:bc:89:
01:50:da:4d:cd:9c:e3:bf:96:d4:3f:c2:2f:39:6f:
2e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4D:6F:65:70:58:9E:F7:12:60:FC:CC:31:8C:1A:08:B9:D1:8B:00
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ff:54:65:d4:78:17:06:2e:71:84:9d:be:26:fb:6e:48:15:
61:a3:68:df:12:38:71:af:9a:78:dc:9b:b2:50:29:4a:4d:51:
72:1c:fd:80:35:82:8f:c2:df:4d:68:71:e9:82:bf:19:e4:c1:
47:a7:6f:93:1f:7d:81:b3:85:53:c5:d8:4e:26:7e:5b:77:75:
ec:96:a8:5b:28:33:bf:3c:36:4a:0c:63:b4:25:c2:a7:96:59:
72:54:30:44:bd:87:e1:99:1c:ff:c3:ac:76:ed:7e:64:9f:4c:
5c:7d:48:0c:c7:e1:57:46:81:84:b2:4b:5d:6f:23:f1:16:c6:
13:14:ac:20:10:30:37:89:92:72:12:bb:d4:0b:91:ef:9b:73:
65:6d:d5:9d:ba:17:40:5d:9b:f1:1a:81:a1:66:f9:2a:55:47:
8e:a0:8c:1e:b2:b2:19:f6:98:f3:d4:dd:bf:6e:d9:61:7a:0f:
01:5a:66:97:2f:21:b4:c4:c7:57:31:3b:64:0b:0e:11:a1:2a:
d6:db:83:99:45:82:23:f6:4e:9e:1b:c6:d3:c2:c4:6c:32:e8:
fc:d7:7f:d4:ae:3c:6a:fa:44:43:52:be:7f:2b:ec:24:b9:72:
05:f2:14:f8:a4:4f:14:2a:e0:ab:56:71:79:71:c7:09:8d:80:
ea:e6:8a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:15 2025 by rpki-client