Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: BVq6BPGZzGmsUzxmkoAxT3ZagLyUUQh6NKf9nJqQYuU=
Subject key identifier: 73:77:4C:E7:47:42:31:88:02:5C:C9:6E:6C:60:C0:81:94:6F:29:FD
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 0197B7B3348B3A38BDA4A94AFB7574DBF5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 18:01:04 +0000
Manifest this update: Sat 28 Jun 2025 18:01:04 +0000
Manifest next update: Sun 29 Jun 2025 18:01:04 +0000
Files and hashes: 1: 4to_68QAA5EZP6QVD93278mKQ9M.roa (hash: Din2sy8w9QJ69ucmdkg50bJdWrDL1O3pEtYdPufl40o=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: AHZwEI+2/0dni2hCTmOdBa7ehNAE9FPmZ/CfSSzB30s=)
3: kA5bGRl5EHENPG-lFJ-KaUPwtEE.roa (hash: SCW2no/wqMGhhPF1PG24OTD/SWeQikiX3GB3gK0CJDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:34:8b:3a:38:bd:a4:a9:4a:fb:75:74:db:f5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Jun 28 18:01:04 2025 GMT
Not After : Jun 29 18:01:04 2025 GMT
Subject: CN=73774ce747423188025cc96e6c60c081946f29fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:bc:d8:ca:0b:95:77:82:30:ed:18:6b:8b:
9a:5d:c1:6b:a0:66:0a:72:ea:f8:7e:6c:0c:4d:ea:
c7:c5:7b:e1:bf:43:f9:a7:a4:2f:3a:60:95:f8:84:
10:fc:1b:b2:f3:35:b8:7d:b1:97:10:64:05:70:e2:
8a:26:7f:7b:cc:31:f0:91:16:33:83:c5:82:24:32:
9c:1d:a4:b0:1f:d8:70:ce:e7:70:51:86:bd:a1:d0:
d9:e9:0b:e1:67:b1:be:d4:3c:cd:94:3f:25:e0:0a:
64:90:2a:9a:ea:55:00:8b:35:22:0a:eb:39:24:7a:
87:0f:e0:d8:ee:fc:47:42:b7:d5:a9:47:52:e5:6a:
d5:ea:4b:11:69:4a:92:e6:08:d5:07:cf:62:40:3f:
64:5e:15:9e:3b:75:53:7d:4f:ef:24:9d:fb:83:27:
ce:1f:83:1b:fd:7e:f7:1b:88:eb:f8:48:e1:d7:72:
4e:ac:db:b0:13:bd:a0:42:25:bf:d8:37:3a:d7:81:
9c:39:8e:89:0a:8b:06:db:62:4c:00:67:4d:a9:aa:
ab:8f:8d:94:3a:2b:45:c3:f5:0b:dd:c0:fa:b5:20:
64:a2:8d:7d:28:b9:fe:b3:f3:8c:96:cb:04:26:ea:
4d:f9:a3:28:3d:91:c7:fe:63:7f:11:53:59:ec:ae:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:77:4C:E7:47:42:31:88:02:5C:C9:6E:6C:60:C0:81:94:6F:29:FD
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a3:4d:fc:1f:64:14:a0:4f:f5:12:9d:7e:0a:a7:86:ff:8a:
d7:e2:e0:b2:d3:8c:cd:e0:78:04:81:88:af:4c:c2:5e:7a:2c:
ab:22:07:17:fa:1f:f5:e1:c7:34:e9:43:cf:80:29:01:c8:d5:
49:55:ae:56:a2:a0:7b:fb:a9:32:11:40:eb:8b:66:b6:d2:0d:
aa:72:35:e5:41:51:19:e1:9f:c4:2e:bd:36:44:2b:fc:20:a9:
0d:34:8b:60:f6:24:77:b3:c2:ba:e3:8d:55:db:48:70:4e:80:
65:e8:e1:b4:c4:1b:59:45:69:cb:49:09:09:6d:85:00:e0:85:
7c:42:0a:77:0e:39:03:3d:f2:92:0c:20:ed:a2:4f:57:ee:62:
bd:cc:ab:43:97:b1:a3:32:12:ff:0c:b7:9b:52:13:cd:5e:b5:
7a:24:cb:dc:26:ae:04:fb:c8:5e:f8:46:f2:56:0d:af:05:9a:
d9:55:07:33:64:1c:05:d5:22:4b:2b:db:9b:83:cf:3b:79:33:
c1:86:d4:f9:8b:ee:f0:44:cb:1e:67:12:34:68:7f:df:cb:42:
f4:97:8c:26:56:28:98:64:70:e6:37:50:fd:fb:74:cf:b0:eb:
4d:48:48:82:63:2d:83:2a:65:17:15:db:1c:fb:ed:05:f4:ee:
5f:3a:c2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:55 2025 by rpki-client