Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
File: CEGOlpDQ-3Eavzh04cUApidpPAo.mft (raw, json)
Hash identifier: ugU0srV1nkoTH50hVXMYTEIoAlxFKh6OIOIBSgzrZps=
Subject key identifier: 7D:46:DE:EF:16:3D:55:27:50:CD:98:27:7D:83:A1:B7:FE:77:EE:B7
Authority key identifier: 08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
Certificate issuer: /CN=08418e9690d0fb711abf3874e1c500a627693c0a
Certificate serial: 0198D583B4C72AE3457AA3544BE33F5C2508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
Manifest number: 0F5D
Signing time: Sat 23 Aug 2025 06:00:35 +0000
Manifest this update: Sat 23 Aug 2025 06:00:35 +0000
Manifest next update: Sun 24 Aug 2025 06:00:35 +0000
Files and hashes: 1: CEGOlpDQ-3Eavzh04cUApidpPAo.crl (hash: R+87wpiXQKN8XkZhV3IN+ZuR1NXmy6gYqSXScNrSxbs=)
2: WXokG7cKriDfqWoaHraaATikOZM.roa (hash: l03IsJpcA1hZ2SxrPxTFFWqboVv9JIckV/GXuLQrkcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b4:c7:2a:e3:45:7a:a3:54:4b:e3:3f:5c:25:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08418e9690d0fb711abf3874e1c500a627693c0a
Validity
Not Before: Aug 23 06:00:35 2025 GMT
Not After : Aug 24 06:00:35 2025 GMT
Subject: CN=7d46deef163d552750cd98277d83a1b7fe77eeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:89:65:38:14:b6:6c:e1:4f:42:4c:5c:c2:
76:c7:d7:8a:f1:15:67:d7:99:02:0e:bc:dd:15:c9:
1d:90:ae:e3:29:c8:ee:3a:a4:17:29:eb:4a:36:69:
6b:7c:55:9d:e3:6a:a7:a7:db:62:ae:3e:36:0a:fc:
51:b4:00:82:de:0f:57:2a:d1:f3:2f:bf:62:70:bf:
1e:62:1a:5b:c5:c5:6e:77:e2:67:24:12:5d:64:cb:
52:07:25:f1:a1:28:84:4f:b0:3c:80:1f:b1:af:bb:
68:74:19:ea:44:95:39:68:83:c1:a1:38:97:2a:66:
12:87:f4:3f:fd:b9:6b:3d:98:53:f8:92:ea:50:f5:
72:ae:5b:b7:ad:82:64:0b:de:c3:ae:80:84:dc:ad:
f8:2e:24:1a:7f:50:1c:66:d9:51:76:4d:06:59:1f:
b4:fb:5a:52:77:e2:63:3c:ef:9b:b9:2d:18:a0:3f:
de:89:f8:e7:a5:b5:fc:f3:be:b5:dd:1e:00:de:a3:
3a:93:ba:df:48:b5:64:50:c7:e8:68:a2:de:cd:39:
9e:a3:8c:65:58:4d:df:9c:27:e1:ba:41:49:3b:74:
4a:b3:f5:39:dd:f5:97:3f:29:2b:37:b3:9c:1e:e7:
e7:eb:72:a1:b1:59:ce:e0:e5:0f:a1:f8:fb:9e:f3:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:46:DE:EF:16:3D:55:27:50:CD:98:27:7D:83:A1:B7:FE:77:EE:B7
X509v3 Authority Key Identifier:
keyid:08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e5:63:b8:9b:67:be:46:e0:6d:d0:a5:86:21:6d:07:fb:8b:
0d:63:08:ba:9b:dc:1c:21:88:53:38:55:3e:af:52:74:3c:14:
2d:e8:db:1d:8e:e0:64:fe:51:50:2c:69:32:d2:5c:57:b4:1c:
a8:72:c7:6f:d0:25:ac:be:7d:a4:c5:03:59:16:ef:60:e3:d0:
69:a5:18:48:f3:74:94:52:83:2d:38:4a:3c:9b:86:d4:ba:65:
f7:f9:45:0f:8c:f3:ab:42:20:71:99:cc:9f:e9:6d:87:b8:c0:
42:61:be:2e:e0:e1:18:a9:d4:0f:73:f1:e7:6d:50:28:fe:f1:
44:78:71:c9:f8:9b:a1:09:2d:83:e7:48:15:e3:ef:b4:ed:5c:
cd:de:a1:aa:85:92:7a:38:42:1a:c7:54:9c:5c:73:dd:bf:78:
7e:59:e4:67:f6:92:de:f1:94:66:b0:eb:6d:ba:b8:fd:79:4c:
9f:a9:24:b9:ee:7d:67:29:15:2b:3c:08:55:56:3a:ac:0e:9c:
e3:ec:4c:6b:ce:63:79:69:62:ec:a8:e6:e5:ce:b7:31:da:7e:
d2:50:7a:72:6e:f9:c0:4a:cb:d9:69:00:72:99:37:86:29:33:
8e:3e:be:27:a0:47:54:7a:2d:2f:55:e0:ea:ec:ed:69:08:74:
cb:d7:7b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:24 2025 by rpki-client