Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: jQ3uq4KkfPf7GJN8B0chGiywQboNwWZnMJcvZa+ShdM=
Subject key identifier: 62:79:56:68:D2:10:FF:7F:78:1B:2C:4E:71:DB:52:E5:F8:38:3F:1D
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 0197B6A0AC2C78B84E5C954355DE346EB134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 02A8
Signing time: Sat 28 Jun 2025 13:01:12 +0000
Manifest this update: Sat 28 Jun 2025 13:01:12 +0000
Manifest next update: Sun 29 Jun 2025 13:01:12 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: hgQXgNTE2B3eRMOxNjCVV1K4KCGZwksF4fuCJI7egcM=)
2: oDzw6scHjTvVUxNbd-QUot4DsM0.roa (hash: wtt4piWURYUGaUVkeFPj0sScj6sbR4E+qyw2r+vT/ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ac:2c:78:b8:4e:5c:95:43:55:de:34:6e:b1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Jun 28 13:01:12 2025 GMT
Not After : Jun 29 13:01:12 2025 GMT
Subject: CN=62795668d210ff7f781b2c4e71db52e5f8383f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:ea:5d:42:30:0f:ac:89:9c:d5:0e:46:a4:
c2:fa:37:b3:6f:b2:c5:14:01:ce:60:90:08:3f:15:
f3:6e:25:e8:8f:74:ad:74:47:59:fd:ae:53:7d:9d:
f6:d4:4c:cb:ed:19:b2:51:c7:0a:51:2c:6f:83:83:
3a:8b:2b:34:3f:14:96:fc:88:f9:3c:a5:45:4c:e7:
85:42:ad:90:c4:9f:77:64:21:b8:b6:74:c8:41:ee:
9b:46:84:90:6a:e3:02:b9:ec:cd:b7:0a:13:48:ad:
74:5d:eb:c2:61:bf:7e:35:4c:9c:fb:33:d2:eb:4e:
8a:7c:3a:3c:ed:e7:fa:31:3d:62:9e:58:9f:21:da:
62:aa:ee:6e:11:89:77:39:b8:16:12:c8:98:fb:7f:
6a:7d:75:de:f2:79:15:59:ee:73:dc:0c:c0:b2:cb:
f3:ff:29:b5:cd:d0:2c:95:f6:ee:6a:cc:f6:e9:10:
ee:57:fa:d1:9e:1f:d5:d1:c4:38:2f:02:4f:6b:55:
dd:3e:57:62:ac:d8:b5:42:45:43:b4:13:5e:01:2b:
c6:63:2f:9a:7f:f2:09:a4:c6:ce:7b:3b:e1:e9:7f:
1b:f2:0c:35:24:58:1f:dd:50:52:70:b9:ee:d4:4a:
1f:72:3c:39:d0:fb:9b:03:01:e1:a5:1b:6c:c5:0a:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:79:56:68:D2:10:FF:7F:78:1B:2C:4E:71:DB:52:E5:F8:38:3F:1D
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8e:27:07:c7:21:21:62:53:1b:83:72:28:6a:d5:ce:da:a5:
bf:89:01:71:9b:72:35:45:1e:d4:fe:71:6d:05:33:fe:36:30:
23:a4:cb:4a:b6:48:a0:ca:ea:21:36:03:22:be:a6:6f:e3:16:
5b:42:a9:3a:94:04:05:d7:5c:12:3e:5c:18:c5:60:53:53:ad:
7b:a3:b3:85:9c:d9:19:8b:4d:1f:f2:2c:b1:13:bd:f3:fc:59:
02:40:2e:3c:01:06:2d:02:77:c7:3c:d9:e3:25:30:19:b1:4b:
56:63:38:2f:78:b8:e9:3f:35:65:4f:25:78:de:8e:74:16:5e:
9c:34:5f:dc:ed:64:a5:27:9e:b1:65:a1:0c:3b:43:13:f2:f4:
84:ee:b3:29:10:b6:fd:4c:57:73:9b:a0:43:7d:57:d3:71:a9:
f2:9c:de:08:c4:38:53:70:80:a9:01:82:b9:a6:54:ce:d0:fb:
97:30:25:fa:b8:fd:1e:e1:28:2c:79:fa:6c:e5:8f:72:c5:7c:
aa:73:68:59:6c:de:b8:29:b7:5f:27:dc:58:a8:25:57:7e:09:
c5:ce:78:43:87:75:52:c7:84:d0:15:ad:84:ff:51:4e:ec:79:
39:75:9b:a3:40:ee:c5:86:97:6f:3f:81:10:6b:92:53:1f:4c:
46:3b:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:52 2025 by rpki-client