Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json)
Hash identifier: Bj0nID/1M6QoEShCuZATXzi5m8gz4jqTRCNoQec47BA=
Subject key identifier: 6A:53:8D:82:84:2B:82:C9:89:A6:AE:02:C2:D6:84:45:80:45:76:E0
Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2
Certificate serial: 0197B5FBDD2C3CDBB05B1108D0DF1F6B3793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
Manifest number: 0225
Signing time: Sat 28 Jun 2025 10:01:11 +0000
Manifest this update: Sat 28 Jun 2025 10:01:11 +0000
Manifest next update: Sun 29 Jun 2025 10:01:11 +0000
Files and hashes: 1: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: nW+bEhlBwpMyJnOh7dLJT964VYqJySJpS34NKwreqgo=)
2: bQzf2uMGkgXH3X2QS8uIrSp74eU.roa (hash: YLxBLk8jjfgkyujII1/AehF/PxCPTNN02Psu8lVMfcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:dd:2c:3c:db:b0:5b:11:08:d0:df:1f:6b:37:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2
Validity
Not Before: Jun 28 10:01:11 2025 GMT
Not After : Jun 29 10:01:11 2025 GMT
Subject: CN=6a538d82842b82c989a6ae02c2d68445804576e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c1:67:c2:44:84:86:43:b7:e0:2d:3e:14:7d:
b9:35:a3:84:d3:e4:ad:4f:e4:96:28:69:bb:9f:61:
8e:d1:5b:f3:a5:1b:1c:89:1c:e2:e5:c3:41:59:fa:
80:fb:db:22:4f:d4:8b:89:8b:97:38:fb:85:d2:6e:
55:23:c4:19:b9:bf:6e:95:ad:54:7f:d8:17:d2:ab:
dd:0d:6d:4b:f8:76:a2:5e:b5:41:b3:c5:fa:a6:b5:
fb:c3:0e:ea:05:6b:43:e9:ae:9a:0b:0a:d5:75:17:
84:7e:db:93:df:88:6a:34:68:5b:bf:b0:31:7c:27:
dc:eb:7f:04:9d:3e:77:90:1f:cb:29:a3:c5:15:ea:
a1:30:54:e8:67:41:a7:df:bf:21:0a:10:c8:d2:33:
ab:32:e4:63:74:31:94:b4:b1:2e:e4:92:49:28:5c:
a6:db:30:01:b7:59:75:06:d8:28:88:21:3d:c5:b1:
b1:4a:74:36:59:9e:74:eb:09:0b:3d:4e:d0:57:85:
ec:19:1d:71:1a:5f:02:6d:00:5f:58:1d:aa:f4:48:
d8:cc:7a:86:7b:70:10:f2:9e:79:55:10:1c:70:6d:
95:00:4d:a8:e0:0c:80:4e:52:03:e2:a3:28:50:e0:
f4:8a:6b:3b:17:58:64:01:be:0b:94:ee:aa:0c:25:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:53:8D:82:84:2B:82:C9:89:A6:AE:02:C2:D6:84:45:80:45:76:E0
X509v3 Authority Key Identifier:
keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:70:fd:ca:ba:6b:5c:9a:f9:9a:74:5f:7b:56:85:ae:1c:76:
be:5f:5c:14:a3:c6:7e:3d:b0:df:09:f1:a9:2b:05:93:0c:68:
ed:5e:ca:71:96:4e:d4:f4:da:80:9e:7a:48:31:e7:a9:a8:68:
4f:ef:d7:c2:f0:8b:72:58:af:69:d6:87:d0:32:30:06:85:cf:
85:b8:ec:3b:0d:f5:92:c1:a0:66:16:6c:87:b0:4c:22:d3:aa:
4f:ab:1b:df:8c:6b:a3:51:75:15:1f:42:31:e4:d8:55:b7:24:
fb:03:b6:cb:d7:8a:04:87:bf:c4:e8:2c:94:7e:b9:f7:dc:58:
29:ca:3a:78:c0:65:1b:55:aa:a3:9b:9a:96:e3:0a:1c:11:eb:
05:ba:6c:ef:19:8a:e7:a3:7c:f1:84:c9:75:72:fc:1f:b8:23:
dc:b7:82:70:13:66:b2:49:45:ac:de:1d:58:0e:b7:e6:b8:3b:
aa:c3:4f:8c:ab:b3:f0:97:9d:a1:e0:d0:14:ff:c2:74:33:cd:
b3:a2:57:99:ee:15:80:6f:0c:3d:20:2d:c5:d2:a8:3e:d3:58:
e6:33:96:33:e7:e9:a6:e3:05:35:e2:83:b3:62:ec:42:d8:a4:
84:cf:18:9b:bc:e9:ed:5b:91:93:81:3c:ee:72:2f:b8:f6:2d:
e8:c0:33:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:22 2025 by rpki-client