Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
File: CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft (raw, json)
Hash identifier: TqSK/qhNTKq+9zFbdvftcmS+JbIXFB/l5hcysbN2HRs=
Subject key identifier: 09:D1:BD:BC:5B:7B:97:9E:2C:C0:9B:ED:F5:1D:E1:FA:25:88:A5:6F
Authority key identifier: 08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
Certificate issuer: /CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Certificate serial: 0197B632ECA819967150DCBFB9B86858EBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 11:01:20 +0000
Manifest this update: Sat 28 Jun 2025 11:01:20 +0000
Manifest next update: Sun 29 Jun 2025 11:01:20 +0000
Files and hashes: 1: CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl (hash: /QiB1fGf9uy0LiUv1hFGjg69U7PPFH8IQbPl8vAi63g=)
2: vAZb7s6D6Fuq3D4AHtKSkcv7tbk.roa (hash: dNxWOWstiC1jdikcIMTYHaBFr6iCMFTRh+rrcRXQbJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:ec:a8:19:96:71:50:dc:bf:b9:b8:68:58:eb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Validity
Not Before: Jun 28 11:01:20 2025 GMT
Not After : Jun 29 11:01:20 2025 GMT
Subject: CN=09d1bdbc5b7b979e2cc09bedf51de1fa2588a56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:c3:ee:4c:66:9b:68:dc:24:ff:c1:de:d9:
9c:d9:47:a5:e2:71:bc:00:49:14:eb:40:44:70:e8:
e1:c3:fd:ba:2a:90:99:e3:43:e9:98:89:60:91:21:
06:17:f9:5b:c7:1b:70:ee:57:dc:55:4a:e7:9b:16:
a1:00:5f:53:ca:98:d1:27:a8:bc:59:d8:6f:4f:a7:
73:d8:27:df:04:dc:57:f6:e1:13:02:99:08:c9:e6:
60:11:72:8b:d4:28:aa:9f:29:c8:03:b8:9c:ec:25:
7e:08:c0:33:bd:da:0c:17:ff:13:fa:4b:ea:e3:e8:
06:b6:c2:9a:d7:29:9f:6d:0b:3b:e6:2c:9a:84:04:
43:13:47:08:88:f2:af:eb:4d:37:97:64:df:67:10:
38:60:5b:9f:ae:2f:f4:ae:52:78:b6:b0:6a:22:c2:
f7:c1:f5:b6:7d:c8:c9:e6:68:33:ef:26:bd:88:c2:
e0:1d:3f:bc:98:a2:b1:c6:1e:a6:0a:4e:b7:8a:88:
94:96:41:0d:f5:73:d5:16:de:de:39:13:ed:0c:0b:
b5:41:4c:c8:3e:67:cd:0c:6c:fb:86:22:df:b5:64:
4b:b1:ba:49:d7:c6:a7:82:d0:e3:40:10:2a:34:ed:
7d:40:88:eb:13:3a:46:7a:9a:87:19:d7:64:42:ca:
b7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D1:BD:BC:5B:7B:97:9E:2C:C0:9B:ED:F5:1D:E1:FA:25:88:A5:6F
X509v3 Authority Key Identifier:
keyid:08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3e:06:16:1f:4f:68:ad:84:5e:d1:66:0f:56:c7:ba:91:95:
24:a1:22:f1:ab:02:de:e1:2f:19:0f:dc:bd:de:6d:0b:cd:36:
96:b5:d3:c7:24:ee:ed:5a:33:e4:b7:9e:35:4c:e1:c0:46:3d:
23:f3:4d:18:0c:82:e7:7e:05:5b:fc:6c:69:eb:86:ad:59:0d:
e3:7f:ee:63:37:a0:70:5a:9f:85:cd:ef:1d:65:92:0f:e1:5e:
d0:9b:0e:1b:d1:c6:31:3e:47:63:95:39:f7:6d:05:36:c6:0f:
26:e8:fc:b0:21:53:10:15:21:51:4a:e4:eb:f5:17:47:3d:d8:
97:fe:2b:f0:68:aa:d6:08:f2:10:72:d6:e3:b8:4a:b4:db:c5:
f6:4a:6d:81:42:ed:3d:ca:ad:71:7a:06:3b:1e:f8:43:f0:da:
ab:21:c4:e4:53:d8:0d:22:bb:bb:6f:c2:5a:d2:96:f0:f7:dd:
72:b7:21:81:7a:5d:a8:4a:8f:09:af:18:06:8e:c4:59:cf:4e:
2b:b4:8a:3b:55:0e:49:8a:46:27:0c:3c:db:ad:44:0a:ab:26:
02:f6:8e:90:48:ef:2f:29:40:5f:69:30:26:fb:e8:24:71:74:
20:7f:c7:db:a6:6f:e2:f5:65:3b:f5:1f:73:dd:7b:12:5a:85:
c4:49:a2:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MuyoGZZxUNy/ubhoWOvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDNlOWMyNDg3OTU0NjkxMjI3YjFlMzIxNzVkOGY3YTFj
YzNlZjUwHhcNMjUwNjI4MTEwMTIwWhcNMjUwNjI5MTEwMTIwWjAzMTEwLwYDVQQD
EygwOWQxYmRiYzViN2I5NzllMmNjMDliZWRmNTFkZTFmYTI1ODhhNTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdLD7kxmm2jcJP/B3tmc2Uel4nG8
AEkU60BEcOjhw/26KpCZ40PpmIlgkSEGF/lbxxtw7lfcVUrnmxahAF9TypjRJ6i8
WdhvT6dz2CffBNxX9uETApkIyeZgEXKL1CiqnynIA7ic7CV+CMAzvdoMF/8T+kvq
4+gGtsKa1ymfbQs75iyahARDE0cIiPKv6003l2TfZxA4YFufri/0rlJ4trBqIsL3
wfW2fcjJ5mgz7ya9iMLgHT+8mKKxxh6mCk63ioiUlkEN9XPVFt7eORPtDAu1QUzI
PmfNDGz7hiLftWRLsbpJ18angtDjQBAqNO19QIjrEzpGepqHGddkQsq3eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnRvbxbe5eeLMCb7fUd4foliKVvMB8GA1UdIwQY
MBaAFAhD6cJIeVRpEiex4yF12PehzD71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VQcHdraDVWR2tTSjdIaklYWFk5NkhNUHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wYzRlMjAtZDU5MS00MTVlLWEwNmYt
MDA4YTUwOGJhZTlkLzEvQ0VQcHdraDVWR2tTSjdIaklYWFk5NkhNUHZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8wYzRlMjAtZDU5MS00MTVlLWEwNmYtMDA4YTUwOGJhZTlk
LzEvQ0VQcHdraDVWR2tTSjdIaklYWFk5NkhNUHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlD4GFh9P
aK2EXtFmD1bHupGVJKEi8asC3uEvGQ/cvd5tC802lrXTxyTu7Voz5LeeNUzhwEY9
I/NNGAyC534FW/xsaeuGrVkN43/uYzegcFqfhc3vHWWSD+Fe0JsOG9HGMT5HY5U5
920FNsYPJuj8sCFTEBUhUUrk6/UXRz3Yl/4r8Giq1gjyEHLW47hKtNvF9kptgULt
PcqtcXoGOx74Q/DaqyHE5FPYDSK7u2/CWtKW8PfdcrchgXpdqEqPCa8YBo7EWc9O
K7SKO1UOSYpGJww8261ECqsmAvaOkEjvLylAX2kwJvvoJHF0IH/H26Zv4vVlO/Uf
c917ElqFxEmiNA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:39 2025 by rpki-client