Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
File: CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft (raw, json)
Hash identifier: j9S3l3LCSqVGLJyUNt/7S/Fb4sJ5d6oE5Y+a78I8cv0=
Subject key identifier: 78:00:71:51:13:2D:82:BA:21:ED:67:40:C7:0D:A5:5E:67:4B:4B:5D
Authority key identifier: 08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
Certificate issuer: /CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Certificate serial: 0199FB7CDEF1EEC56E3489939D011B78CEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 08:01:28 +0000
Manifest this update: Sun 19 Oct 2025 08:01:28 +0000
Manifest next update: Mon 20 Oct 2025 08:01:28 +0000
Files and hashes: 1: CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl (hash: IPZRbkdJLyNfXgJrdpjtflbjRiAHf+TS3Q2/yLvkz6E=)
2: vAZb7s6D6Fuq3D4AHtKSkcv7tbk.roa (hash: dNxWOWstiC1jdikcIMTYHaBFr6iCMFTRh+rrcRXQbJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:de:f1:ee:c5:6e:34:89:93:9d:01:1b:78:ce:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Validity
Not Before: Oct 19 08:01:28 2025 GMT
Not After : Oct 20 08:01:28 2025 GMT
Subject: CN=78007151132d82ba21ed6740c70da55e674b4b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:22:86:a5:4d:16:38:55:85:d5:9b:90:0a:
ed:80:66:7d:3d:94:3f:45:75:ee:81:3d:18:a1:be:
ea:b7:67:f4:30:a5:55:66:b5:b5:f4:b7:de:e6:0c:
fd:3a:71:00:c3:45:9a:d4:c5:b8:5d:72:81:b6:bd:
ab:6e:bd:64:ac:47:7b:06:9c:7b:22:39:ad:65:f5:
ac:ef:e5:bb:5e:33:24:00:4e:eb:30:d4:00:2d:06:
18:99:09:ac:32:ab:89:52:dd:1b:ef:85:61:e0:d0:
08:51:bc:4b:f1:14:3e:8d:9a:dd:41:8b:fb:52:f5:
0b:58:53:86:67:de:4f:9c:44:fa:98:ee:89:d3:21:
84:d4:58:05:67:28:23:3b:76:3e:f6:73:59:9c:23:
4d:4c:97:2b:fc:31:79:fd:1f:31:2c:e9:4b:63:c4:
cb:77:02:9a:68:73:a8:6f:5f:de:19:b4:da:2c:42:
a7:7d:8b:f2:df:49:9b:d6:f4:d8:77:0a:52:25:4c:
83:98:ab:c2:44:6d:16:f2:c1:a7:b5:de:9e:f3:70:
83:31:a3:1e:2d:20:47:5d:40:bf:89:ce:30:f6:6e:
15:6f:7a:51:ae:5e:bf:62:d6:e8:83:ef:9c:ef:73:
17:ab:28:f2:ce:a3:7d:5e:61:dd:26:42:c1:65:17:
a7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:00:71:51:13:2D:82:BA:21:ED:67:40:C7:0D:A5:5E:67:4B:4B:5D
X509v3 Authority Key Identifier:
keyid:08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ff:f2:ae:02:12:bd:bb:3d:16:e3:9e:ef:eb:f4:73:87:aa:
0e:2e:67:e6:c1:88:0e:c6:17:ae:4f:28:f6:b1:e2:3c:c7:02:
b3:aa:db:fb:00:8e:b9:ce:10:7b:15:ea:61:47:3c:0b:5e:f4:
a9:92:91:a1:9a:6e:4d:23:9f:b5:54:95:d5:90:68:24:6d:ad:
2f:1d:3a:61:fa:30:93:a5:08:01:1b:c2:dd:79:4e:2b:1a:7a:
34:9b:c1:ad:42:db:01:b8:17:55:af:49:1e:9c:b2:b4:1e:92:
bc:fe:78:07:16:97:7c:2a:bb:e3:97:d6:aa:a9:f6:e9:81:bd:
4f:d0:02:da:d4:02:c8:5c:3c:0e:53:b0:7e:5c:0b:9d:33:4f:
97:7a:b3:70:1c:d3:00:5a:c5:58:a6:60:af:ba:da:d0:f1:85:
a7:e0:c6:4e:ab:07:a4:30:19:03:9e:2c:e3:aa:8a:bc:ca:6d:
5b:6b:1a:cb:cb:bb:00:b1:25:47:70:da:39:8f:2a:10:3b:5e:
45:2f:62:4f:14:cd:d0:de:0b:8f:31:36:22:11:da:32:5a:7a:
59:43:a9:a4:8e:45:b0:76:e0:e1:5c:9d:84:e6:ce:0c:fd:7d:
18:ca:b5:f3:87:76:5e:6d:ca:35:b8:ed:34:be:d8:d8:20:b7:
f8:e6:09:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:20 2025 by rpki-client