Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: gmL1DBj06oslOBoDlJUunlZcxWtLUGVP5zZcy6vw9gc=
Subject key identifier: 00:3B:EF:43:F6:60:78:AA:57:7D:EF:A3:29:97:11:09:13:0E:95:E5
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 0198D404E8920185AF65BCCD4F3E12198C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 0239
Signing time: Fri 22 Aug 2025 23:02:28 +0000
Manifest this update: Fri 22 Aug 2025 23:02:28 +0000
Manifest next update: Sat 23 Aug 2025 23:02:28 +0000
Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: 2BdK3ZSHnoaW3yCHEELbaO6S3E7J2lMdKK2MMf0Cwt4=)
3: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:e8:92:01:85:af:65:bc:cd:4f:3e:12:19:8c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Aug 22 23:02:28 2025 GMT
Not After : Aug 23 23:02:28 2025 GMT
Subject: CN=003bef43f66078aa577defa329971109130e95e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:8c:7d:04:ab:7c:23:22:46:13:54:22:b5:
c5:6b:5e:b0:da:fb:72:08:73:e7:1f:d7:94:4c:9e:
ae:a6:bb:db:9a:ab:c1:62:67:2f:d4:20:3e:b4:9c:
ed:5a:fa:93:fd:76:22:6d:33:ca:73:41:3e:16:14:
c0:01:6d:63:cf:b1:da:bc:9c:61:11:95:1b:b4:db:
ec:e4:69:15:bd:3e:ae:e3:41:55:71:48:12:a6:67:
70:3c:d7:96:10:35:4e:ad:93:61:6d:83:99:ca:86:
0b:5b:1a:c7:a8:86:e5:03:63:bb:b8:93:38:06:6e:
af:ba:20:31:54:2a:84:a7:00:83:2e:0f:35:8b:92:
32:d2:25:81:ac:f2:b4:16:a7:97:d3:63:c1:ca:6a:
be:33:03:54:9f:79:71:2c:76:2b:7f:a3:be:00:0f:
9e:c9:53:6e:a8:da:65:a4:50:40:e0:96:eb:c4:bd:
71:0c:9f:b7:70:43:f2:2c:cc:5a:2b:cb:83:69:03:
bb:87:33:dd:f3:91:36:8f:a8:ac:7a:0e:b4:f5:ff:
eb:10:f0:9e:7d:79:4e:71:55:a6:27:4c:5d:44:52:
87:17:2f:b1:2c:3e:3e:53:4b:c4:16:aa:aa:11:ea:
81:39:3f:63:ac:e8:eb:37:f6:46:f2:94:2a:4d:19:
d8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3B:EF:43:F6:60:78:AA:57:7D:EF:A3:29:97:11:09:13:0E:95:E5
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e4:e6:e2:f0:94:23:c6:8e:1e:83:85:0f:aa:bc:23:01:c3:
af:6f:72:4f:47:2b:1d:17:15:f8:b1:b7:99:71:e5:26:ae:4a:
98:73:85:cd:68:67:6f:26:03:5f:9f:94:e2:79:7a:87:c0:12:
ec:06:d0:3e:b8:ad:2b:45:11:1f:93:2d:d9:e6:7b:dd:41:fe:
eb:da:24:2d:35:b2:eb:09:a8:3d:ac:74:ba:e2:15:ba:4b:be:
b2:4f:cd:12:7c:3c:48:4f:c3:ec:e8:4f:d6:51:b9:b8:f6:da:
13:db:63:c5:a5:e6:9f:0c:56:44:66:ff:6b:d2:c0:be:50:b9:
b7:da:5d:fc:84:63:e9:90:a6:b7:bb:f7:c1:be:0a:08:9e:e9:
72:ae:84:83:23:4f:4f:d0:74:0d:b3:e6:fc:da:ed:e4:56:77:
2e:16:70:c6:db:f3:03:6b:91:44:30:bf:88:60:bc:09:ec:a2:
cf:a7:4a:ac:94:38:b7:09:08:57:fa:da:de:c7:7c:87:50:e7:
16:3b:6e:ff:d8:90:dd:0e:45:b4:0b:98:c1:40:b5:83:07:e4:
77:5b:f9:32:6e:9e:84:85:96:92:da:62:e3:96:4a:f5:08:be:
88:5c:1a:40:ac:f7:0a:31:5b:a2:ab:91:cd:56:69:9a:70:ac:
dc:4e:a6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:33 2025 by rpki-client