Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json)
Hash identifier: hRlCTFxcDR6XxnsftSKhpuQ99twpAFqsUqNgSAnj/l0=
Subject key identifier: 08:C2:A3:AB:F3:05:6F:18:6E:01:6A:A2:3D:5C:2C:C7:FB:EB:4F:FB
Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2
Certificate serial: 0198D7A8FF0A69F3408B2C428C0C594785A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
Manifest number: 02BB
Signing time: Sat 23 Aug 2025 16:00:33 +0000
Manifest this update: Sat 23 Aug 2025 16:00:33 +0000
Manifest next update: Sun 24 Aug 2025 16:00:33 +0000
Files and hashes: 1: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: FTIqSvRgFfwRyPhpSd/v1tq4PDdMgkvxwgmTF2ZbZ4c=)
2: bQzf2uMGkgXH3X2QS8uIrSp74eU.roa (hash: YLxBLk8jjfgkyujII1/AehF/PxCPTNN02Psu8lVMfcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:ff:0a:69:f3:40:8b:2c:42:8c:0c:59:47:85:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2
Validity
Not Before: Aug 23 16:00:33 2025 GMT
Not After : Aug 24 16:00:33 2025 GMT
Subject: CN=08c2a3abf3056f186e016aa23d5c2cc7fbeb4ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:1e:61:e2:e5:e2:ae:28:0f:c4:26:8f:5e:
37:e1:34:69:56:29:af:23:ed:e7:d2:27:b0:d4:87:
55:64:22:14:5d:b3:d0:cf:7a:33:62:00:d7:f2:d7:
3b:81:0f:45:03:3a:a4:91:91:6f:5a:9d:42:0b:c5:
80:e4:6f:58:cd:68:39:13:ee:3b:26:45:b4:52:45:
a2:d8:ce:69:fe:b2:25:7a:8a:ef:94:e9:85:46:a2:
8d:15:84:47:0a:5c:8d:88:f4:64:81:b4:58:37:d9:
79:eb:98:d9:95:39:82:83:61:7b:6e:f6:0d:b6:6c:
b8:1d:fb:b6:28:61:15:1b:82:a3:2a:a4:2c:b5:9b:
a5:92:b6:6b:16:2f:50:11:4f:9b:2b:61:de:a1:72:
94:a5:80:5d:34:22:b5:c3:e3:bc:1b:a8:89:0e:79:
1c:2c:9f:60:73:cf:a0:46:c8:08:3b:66:0b:9d:ca:
14:df:3e:1f:46:74:bc:14:4f:82:0f:53:15:65:42:
e8:78:70:fa:b7:a1:f7:ee:bb:94:6b:d2:1c:f3:27:
c2:53:62:b7:44:a1:cb:af:1f:3f:6b:8e:3c:b5:bf:
23:43:ce:04:de:2e:d9:be:8d:35:60:ba:6f:32:32:
39:6e:49:86:a5:7a:dc:f7:da:f7:a7:26:41:de:ab:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C2:A3:AB:F3:05:6F:18:6E:01:6A:A2:3D:5C:2C:C7:FB:EB:4F:FB
X509v3 Authority Key Identifier:
keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2d:54:8b:53:31:2f:69:07:5d:d5:f3:17:96:21:b2:69:97:
a3:a8:a1:56:90:2f:92:c7:78:d7:ab:f7:6d:d9:20:2e:97:9d:
49:f8:ec:47:7b:63:4a:24:8e:27:8d:95:fb:e6:ac:0b:5f:1b:
ed:9c:f6:82:e2:60:c9:47:1a:cd:7a:ef:aa:a4:7d:16:57:36:
36:e0:a4:8b:05:71:a9:e8:3a:70:f9:f8:8f:53:0a:1f:0a:41:
fe:37:40:9b:3d:27:62:0c:a4:94:08:37:b4:a5:64:da:bf:91:
9f:1b:8d:69:bc:ca:02:ab:9f:41:16:cb:43:f5:10:6b:52:f0:
72:b3:0e:76:15:1c:63:6c:be:e2:e6:30:72:38:e8:4d:d8:88:
9e:86:24:99:fb:d0:fd:7a:37:cf:c2:fd:69:8d:ee:ac:0b:20:
b4:95:0f:1a:ed:8f:f5:c5:80:eb:2e:20:9c:47:c3:6a:30:0c:
46:f8:d8:81:80:50:16:19:d3:23:50:10:66:fe:36:9b:ec:f0:
05:32:d2:93:50:9c:f7:74:26:e4:15:bc:5a:ae:21:61:ab:b2:
35:58:68:4c:a7:e3:86:56:0d:f8:73:de:50:f9:fe:97:e2:ff:
21:06:b5:1e:41:1e:f8:5c:f3:9a:cb:5f:99:1e:7c:cd:98:41:
c3:df:75:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:37 2025 by rpki-client