Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
File: CEGOlpDQ-3Eavzh04cUApidpPAo.mft (raw, json)
Hash identifier: ICvkW7kM1TyOGiyN1mATUGXeRaL93aKY6Zh7sawU7Us=
Subject key identifier: FA:D1:9E:15:8B:C1:0A:8D:05:23:51:50:3F:60:DA:D2:21:B4:A8:0F
Authority key identifier: 08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
Certificate issuer: /CN=08418e9690d0fb711abf3874e1c500a627693c0a
Certificate serial: 0199FCFD8EEBB778C85CAC0211DDE007D74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
Manifest number: 0FF7
Signing time: Sun 19 Oct 2025 15:01:39 +0000
Manifest this update: Sun 19 Oct 2025 15:01:39 +0000
Manifest next update: Mon 20 Oct 2025 15:01:39 +0000
Files and hashes: 1: 8QToh95n76MX0haqvJV4iXYdSiU.roa (hash: bccQP6DZQf854mroc1UFT6HPAcTOCvETn4EYHYUjQ3o=)
2: CEGOlpDQ-3Eavzh04cUApidpPAo.crl (hash: uTYLCtO7J3qzMJduzVTrR8/jV1JylRI5pTsNU+68M+E=)
3: WXokG7cKriDfqWoaHraaATikOZM.roa (hash: l03IsJpcA1hZ2SxrPxTFFWqboVv9JIckV/GXuLQrkcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:8e:eb:b7:78:c8:5c:ac:02:11:dd:e0:07:d7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08418e9690d0fb711abf3874e1c500a627693c0a
Validity
Not Before: Oct 19 15:01:39 2025 GMT
Not After : Oct 20 15:01:39 2025 GMT
Subject: CN=fad19e158bc10a8d052351503f60dad221b4a80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d7:d4:8e:5d:79:65:31:7e:02:7c:cc:89:bc:
3c:89:f6:dd:0f:d6:c2:7e:0e:72:3a:3f:7c:9f:6f:
44:09:9d:e6:fd:87:4d:73:5c:ed:87:94:b8:a3:e5:
8c:ed:f3:46:a6:9d:2d:c2:29:ae:5d:9a:4e:d6:43:
e7:02:87:59:ad:62:7e:a9:f1:b3:a4:9c:9c:de:7b:
65:e2:f2:2c:44:03:42:18:45:7a:f7:54:30:60:02:
0d:92:4a:3a:c5:0f:8f:70:19:10:2d:c9:49:07:83:
54:19:52:fc:b8:55:fb:d2:da:57:d1:c1:de:c8:be:
d7:c3:29:cd:e1:9a:10:c2:7a:16:d3:ea:bd:78:51:
42:22:7a:98:bc:b8:21:48:37:1c:06:6d:9e:7b:b4:
59:bd:39:3d:46:bf:a8:cc:8b:1a:a9:ca:66:1c:f0:
0b:b9:bb:b8:95:12:f0:24:41:8e:ed:1b:03:75:82:
2b:6d:fc:1f:5f:5a:db:65:57:32:99:a1:af:05:dc:
aa:99:2d:63:55:3f:e7:7b:2a:ae:1f:ce:86:e8:9f:
c8:a9:e1:d7:3c:88:ef:e3:02:e9:81:3e:ea:94:02:
87:cb:69:4a:08:b6:9b:b8:2a:98:d9:35:c3:c0:33:
49:2c:84:67:64:56:06:c5:3b:9b:57:40:dc:75:e3:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D1:9E:15:8B:C1:0A:8D:05:23:51:50:3F:60:DA:D2:21:B4:A8:0F
X509v3 Authority Key Identifier:
keyid:08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d4:83:ff:fb:f8:ee:ac:8c:78:c0:67:66:bd:a8:af:49:05:
13:0b:94:d1:6a:1f:f1:6e:8b:c2:82:6b:7d:e2:d0:a0:f4:2c:
5f:aa:d0:31:90:64:4f:90:02:7a:40:40:03:51:58:8e:ec:e8:
0b:8e:83:cc:65:24:b5:7a:96:bd:c5:70:a5:10:53:d1:30:53:
81:2f:dc:59:25:b3:89:19:0e:58:35:ad:09:61:07:b2:5f:19:
a7:df:c2:13:94:53:70:8d:97:a6:20:f4:62:d4:a8:c3:21:ed:
c5:21:ef:20:b8:8d:45:2b:be:05:a3:ed:42:20:b1:65:6b:73:
3f:a0:c6:35:bd:66:67:1d:84:11:82:69:d9:92:40:87:3f:80:
7a:33:80:1f:3d:39:11:71:36:87:1e:4a:db:c6:6d:86:2d:6d:
bd:a5:10:3e:a4:c4:58:21:1a:03:81:07:8a:b0:79:e3:38:ba:
69:74:85:12:fc:40:6d:6b:f5:c4:e3:a2:ed:ba:04:00:9a:35:
58:04:38:e9:2e:ae:34:70:3c:d7:0c:49:59:48:25:e8:bd:0d:
bc:bf:ff:95:3d:b7:39:de:0e:a3:07:98:23:d1:8a:12:30:fa:
df:a6:b4:ca:0e:d4:05:2c:f1:5a:37:6d:9e:9c:11:ef:fd:5b:
2b:85:51:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:58 2025 by rpki-client