Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
File: CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft (raw, json)
Hash identifier: VfodYG8Domd7/971pdPYimMCccrrtaVINMn0G2pzn8M=
Subject key identifier: 4F:10:A1:D1:43:42:35:6A:EA:EC:31:85:EC:D9:EC:D3:86:80:5D:11
Authority key identifier: 08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
Certificate issuer: /CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Certificate serial: 0198D404ABB5FA10A024FA2A737B8E0B8FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
Manifest number: 164D
Signing time: Fri 22 Aug 2025 23:02:12 +0000
Manifest this update: Fri 22 Aug 2025 23:02:12 +0000
Manifest next update: Sat 23 Aug 2025 23:02:12 +0000
Files and hashes: 1: CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl (hash: SFZ+UuDursY1IPIBVTlqGOID1KbdnHPwFb8tBz0z0/0=)
2: vAZb7s6D6Fuq3D4AHtKSkcv7tbk.roa (hash: dNxWOWstiC1jdikcIMTYHaBFr6iCMFTRh+rrcRXQbJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:ab:b5:fa:10:a0:24:fa:2a:73:7b:8e:0b:8f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Validity
Not Before: Aug 22 23:02:12 2025 GMT
Not After : Aug 23 23:02:12 2025 GMT
Subject: CN=4f10a1d14342356aeaec3185ecd9ecd386805d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:9c:aa:c4:cc:6f:13:d8:bd:26:a8:b3:60:
17:5f:3d:0d:3b:45:19:e7:72:fc:45:2b:db:dc:ac:
18:af:c5:c5:75:2e:3d:13:fc:21:9b:21:af:3b:af:
a9:99:dc:53:4c:89:cb:ea:6a:ed:e1:5f:05:d4:4c:
66:53:75:3b:dc:7a:e9:da:43:73:3c:21:dd:50:bd:
c8:86:bf:38:b2:d8:44:56:07:fa:b8:4a:5b:1f:a2:
6f:ab:b3:ee:e8:7a:00:05:62:3f:02:cc:4e:72:a6:
14:85:54:40:2d:75:06:c3:48:af:d8:26:5d:10:76:
59:c2:93:46:e2:2c:52:ce:f1:d9:db:a6:5c:c4:64:
50:0f:a5:91:20:7c:0f:9f:7f:2f:eb:68:ca:84:ad:
d6:41:71:92:e3:e8:e3:b4:ad:e6:be:ec:3e:f4:f0:
66:0d:5d:52:91:17:97:68:95:9d:2e:b1:dd:e8:9b:
f8:b0:66:09:05:fd:71:4b:03:dc:b9:0b:df:32:4f:
54:47:2e:c4:f9:a9:3a:4d:38:0a:43:88:0e:fe:8e:
28:6f:0c:a7:55:8e:9b:8f:4e:c3:ff:0c:5d:95:4f:
0b:11:1a:50:8c:cb:83:99:ed:7c:a2:20:21:be:cc:
c2:bc:8a:e4:36:b6:df:2d:fb:c4:23:4e:b9:3d:9a:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:10:A1:D1:43:42:35:6A:EA:EC:31:85:EC:D9:EC:D3:86:80:5D:11
X509v3 Authority Key Identifier:
keyid:08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c0:60:57:11:ec:7d:fa:76:63:07:74:12:9f:9d:89:fe:85:
52:10:60:ed:da:d9:0d:96:88:6b:33:2a:2f:9e:59:93:69:cf:
23:13:a4:32:39:2f:fd:c4:78:4b:97:41:a9:45:bd:a1:76:4d:
20:83:c6:cf:40:2f:e0:3b:2e:2f:4e:2c:89:3b:ad:da:7b:eb:
cd:ac:ab:57:6f:c2:5d:74:2d:95:2f:20:a2:e2:10:7e:e0:7a:
d6:26:8d:79:07:2c:ce:b4:98:bd:5d:2a:c4:10:0a:43:20:7d:
7b:8e:89:2e:37:1f:bc:3b:3b:33:6a:ac:c5:55:35:b9:a0:9d:
52:1e:d7:e9:c4:b5:38:36:c0:76:c9:ec:00:b1:4c:22:6f:1a:
9c:53:83:e7:9f:f1:27:48:fa:75:5a:18:18:51:0a:78:ad:90:
5e:db:e7:fc:e1:39:9e:3b:ee:ab:8d:fe:9a:59:73:93:1f:e5:
63:4f:d8:10:cf:e9:8d:0e:69:24:1e:58:85:80:64:71:cd:c2:
43:1e:8f:cc:e0:04:ec:06:8f:74:71:d3:d4:cf:be:df:c8:99:
29:83:ca:65:09:d9:3a:0e:18:dc:b3:b3:3c:f2:08:53:88:c6:
c2:47:76:b4:81:4e:cb:37:4b:c3:96:7c:97:00:15:c9:89:c1:
e1:25:86:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:40 2025 by rpki-client