Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json)
Hash identifier: s60suHapaFnmDFLgasSz9uua5UjeWNXHncmMnzApV/E=
Subject key identifier: 7D:5B:51:E1:17:95:4C:2E:8A:96:6C:8B:62:84:68:38:68:99:8C:C4
Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2
Certificate serial: 0199FC8F34E88FFFE657C41D3CF37AE846D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
Manifest number: 0353
Signing time: Sun 19 Oct 2025 13:01:07 +0000
Manifest this update: Sun 19 Oct 2025 13:01:07 +0000
Manifest next update: Mon 20 Oct 2025 13:01:07 +0000
Files and hashes: 1: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: X7EiCQCED5Hbx2P8nEv9rECzIy9KkgqoKBn/vuem7LU=)
2: hwJf6VumQco-ZneET3L8ACOfvX8.roa (hash: EcoD8v/r1aMC/ov7E8diQalSosE5t0EwMU8AArCBREA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:34:e8:8f:ff:e6:57:c4:1d:3c:f3:7a:e8:46:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2
Validity
Not Before: Oct 19 13:01:07 2025 GMT
Not After : Oct 20 13:01:07 2025 GMT
Subject: CN=7d5b51e117954c2e8a966c8b6284683868998cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:58:9e:2b:14:02:68:9a:7b:1c:08:57:11:
9d:89:75:a3:5e:6f:e3:3c:7a:fb:19:12:dc:9c:82:
95:de:4f:11:b1:11:83:c1:bc:47:bb:89:f7:f4:b0:
a0:91:8b:fc:bf:de:e4:f7:7d:e2:67:99:bc:2e:c2:
02:20:ed:bb:f2:ef:15:e0:71:6f:a5:96:db:de:84:
13:45:88:4a:a4:69:7d:3f:87:b8:40:43:56:d0:64:
25:33:29:f2:10:87:72:5e:b3:93:19:e8:56:b4:fe:
69:a9:0b:09:fa:c0:77:24:b4:38:f8:35:f0:df:ed:
89:85:87:f1:75:73:29:ed:d5:47:a0:68:71:17:c2:
bd:78:d5:ea:f7:e4:51:da:3a:fe:8a:bc:e6:b5:dd:
09:02:51:e8:9b:16:a0:79:21:cf:29:43:0d:a4:fc:
5a:26:3e:f3:e0:26:45:1a:2f:38:cc:71:fd:48:d3:
40:7e:06:bb:15:91:c3:bd:26:f3:19:5b:14:4a:4c:
f6:ab:32:bc:21:00:10:bc:ce:ac:47:36:28:86:e7:
88:ff:91:42:2b:ca:ea:a8:bd:2d:b8:8a:bb:b8:b5:
af:3d:40:5a:4b:8d:3e:e1:ad:b8:23:12:51:40:0f:
08:44:ae:94:42:0f:a6:1f:8b:fd:26:3f:68:f9:15:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5B:51:E1:17:95:4C:2E:8A:96:6C:8B:62:84:68:38:68:99:8C:C4
X509v3 Authority Key Identifier:
keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:40:2f:c2:31:f0:19:96:3c:14:4d:d5:2e:11:29:73:b6:f6:
a4:37:7b:06:76:a8:55:aa:dd:71:46:af:61:59:cc:d0:2c:31:
75:af:3b:65:22:4a:d2:34:4b:5c:e9:9f:a1:cb:8c:b8:de:a5:
e8:48:b2:6b:5a:29:67:99:5f:74:4a:92:25:5a:fe:2a:14:51:
80:f8:c8:11:1c:14:70:ca:ec:2f:0e:da:f3:b1:f2:a6:8e:f4:
59:06:3e:1c:d2:9e:2a:0c:34:e4:c9:97:48:5f:bf:63:9a:69:
2e:99:00:b2:91:c0:92:b4:8f:30:06:4d:1a:52:53:43:e6:41:
ad:f0:6b:2e:35:0e:f4:78:89:5e:00:98:06:11:02:a9:05:51:
07:97:e6:a5:8c:45:a7:29:37:35:b0:0a:fc:fb:5a:ee:d1:42:
12:4b:19:04:ce:10:25:24:c8:5c:78:11:51:0a:bb:ed:10:50:
8b:31:0a:43:7d:bd:0a:00:1e:42:c3:17:59:20:90:1a:7e:d4:
3d:32:ac:88:e8:35:57:86:0d:5f:12:06:16:63:8d:2a:86:24:
7b:5f:93:b0:be:09:32:6f:a4:6a:b9:52:55:cc:bc:46:b2:51:
9f:40:24:80:34:c2:f6:52:24:e3:fe:1e:9d:60:65:c8:32:70:
65:b5:0c:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jzToj//mV8QdPPN66EbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDI3NTlhMDRmY2ZkOWRkMzg2NDg2ZjA0ODIwZTRhMDYw
Mzk3ZjIwHhcNMjUxMDE5MTMwMTA3WhcNMjUxMDIwMTMwMTA3WjAzMTEwLwYDVQQD
Eyg3ZDViNTFlMTE3OTU0YzJlOGE5NjZjOGI2Mjg0NjgzODY4OTk4Y2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPtYnisUAmiaexwIVxGdiXWjXm/j
PHr7GRLcnIKV3k8RsRGDwbxHu4n39LCgkYv8v97k933iZ5m8LsICIO278u8V4HFv
pZbb3oQTRYhKpGl9P4e4QENW0GQlMynyEIdyXrOTGehWtP5pqQsJ+sB3JLQ4+DXw
3+2JhYfxdXMp7dVHoGhxF8K9eNXq9+RR2jr+irzmtd0JAlHomxageSHPKUMNpPxa
Jj7z4CZFGi84zHH9SNNAfga7FZHDvSbzGVsUSkz2qzK8IQAQvM6sRzYohueI/5FC
K8rqqL0tuIq7uLWvPUBaS40+4a24IxJRQA8IRK6UQg+mH4v9Jj9o+RWpiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1bUeEXlUwuipZsi2KEaDhomYzEMB8GA1UdIwQY
MBaAFAhCdZoE/P2d04ZIbwSCDkoGA5fyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VKMW1nVDhfWjNUaGtodkJJSU9TZ1lEbF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zZGZlN2YtNTdhZS00NTBjLTkyZTEt
NzAyNWUxODgwNjhjLzEvQ0VKMW1nVDhfWjNUaGtodkJJSU9TZ1lEbF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8zZGZlN2YtNTdhZS00NTBjLTkyZTEtNzAyNWUxODgwNjhj
LzEvQ0VKMW1nVDhfWjNUaGtodkJJSU9TZ1lEbF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwkAvwjHw
GZY8FE3VLhEpc7b2pDd7BnaoVardcUavYVnM0Cwxda87ZSJK0jRLXOmfocuMuN6l
6Eiya1opZ5lfdEqSJVr+KhRRgPjIERwUcMrsLw7a87Hypo70WQY+HNKeKgw05MmX
SF+/Y5ppLpkAspHAkrSPMAZNGlJTQ+ZBrfBrLjUO9HiJXgCYBhECqQVRB5fmpYxF
pyk3NbAK/Pta7tFCEksZBM4QJSTIXHgRUQq77RBQizEKQ329CgAeQsMXWSCQGn7U
PTKsiOg1V4YNXxIGFmONKoYke1+TsL4JMm+karlSVcy8RrJRn0AkgDTC9lIk4/4e
nWBlyDJwZbUMwA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:25 2025 by rpki-client