Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: zRKcNs1oUEicugndfBxtX2CIBDXOVA9t9dUGzwBA3H0=
Subject key identifier: 4E:00:9A:3A:FD:6B:4E:E2:E8:0F:86:82:2B:20:92:46:89:1D:73:38
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 0199FDD8EFE147DD04491C920B0A311DFFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 03D6
Signing time: Sun 19 Oct 2025 19:01:16 +0000
Manifest this update: Sun 19 Oct 2025 19:01:16 +0000
Manifest next update: Mon 20 Oct 2025 19:01:16 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: Sv+Pxzwii60Iie0L3r6wDlT/luvXgHRTVodp8XLZ3fU=)
2: oDzw6scHjTvVUxNbd-QUot4DsM0.roa (hash: wtt4piWURYUGaUVkeFPj0sScj6sbR4E+qyw2r+vT/ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ef:e1:47:dd:04:49:1c:92:0b:0a:31:1d:ff:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Oct 19 19:01:16 2025 GMT
Not After : Oct 20 19:01:16 2025 GMT
Subject: CN=4e009a3afd6b4ee2e80f86822b209246891d7338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:14:8a:72:54:fe:f4:9d:5c:31:23:74:3e:
2b:4b:af:ae:58:11:7c:59:03:ee:4e:d4:cb:5e:96:
8b:da:38:de:4a:5a:72:cc:08:22:5c:27:a8:f0:d7:
6e:15:c6:4f:fe:b6:ca:b2:da:77:92:2d:a1:56:8f:
b2:96:d0:41:d3:bc:46:8b:de:9d:b7:45:df:20:05:
13:24:33:4f:87:35:53:aa:e8:f7:aa:91:3d:d2:43:
2a:f1:06:47:19:75:ee:38:5e:c1:05:90:cd:f8:36:
22:42:dc:49:12:0b:66:6f:a3:aa:1f:40:5d:e3:94:
84:08:a9:23:a4:d9:a1:34:2d:e9:98:da:fc:f2:fd:
d1:ac:82:f4:21:47:a9:4d:cc:83:8a:aa:0a:9b:17:
dc:80:5a:b5:7b:4e:fc:21:fa:cd:10:eb:24:35:7d:
d5:2d:49:f1:cc:f3:06:91:2d:fc:3c:ee:fa:b7:47:
71:5c:1b:97:c0:9e:f7:79:e9:65:9a:5d:b0:a5:0d:
44:4e:f6:02:f0:13:65:52:65:0b:b3:64:39:be:94:
4a:c4:01:14:90:05:12:dd:bc:c0:be:3e:7a:7e:36:
f9:93:46:e0:15:78:95:86:78:62:f2:0a:07:7b:91:
c3:23:10:e7:d0:67:dd:bf:f9:e7:55:27:1f:de:bc:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:00:9A:3A:FD:6B:4E:E2:E8:0F:86:82:2B:20:92:46:89:1D:73:38
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:09:d7:e5:6e:08:c5:44:89:ae:b4:be:40:3f:e4:f5:49:4e:
86:f2:65:1d:41:d4:8c:0e:05:86:c4:e0:c7:88:77:3f:b0:50:
a6:fd:ee:dc:69:6e:30:d2:a8:a9:2c:ec:be:b6:48:e6:10:8a:
49:7e:ab:e9:e7:e3:a9:51:d7:08:7c:f8:f1:8b:72:e5:b9:05:
c2:c7:03:4a:b1:b3:59:d0:04:3b:c2:f8:47:ef:c1:47:b5:29:
42:f6:5f:ab:cf:77:b0:41:af:48:e6:56:0d:67:43:91:67:4b:
1d:b2:d9:27:38:ca:ae:28:2d:35:b9:c6:3e:ff:22:89:8c:ff:
da:d6:c4:7a:30:30:c7:5f:fa:a3:03:9a:e6:6b:21:a3:ca:8a:
9d:2f:a1:1f:40:3e:f6:f6:5c:53:c0:22:65:26:72:f2:c1:8f:
4c:2b:32:61:49:15:27:7c:43:e5:6c:c2:7e:5d:59:a0:12:67:
4e:bb:4f:6e:e3:02:f6:30:d5:1e:36:42:53:d7:99:27:13:59:
cd:c1:6c:5f:60:6a:dc:20:00:ef:48:c9:2c:50:66:30:71:82:
80:2b:35:37:42:c6:f1:b3:51:c0:13:60:a3:8b:6c:e6:e9:bb:
b3:c5:29:ae:9e:91:35:75:bd:12:d7:98:f1:e8:7e:d9:80:45:
eb:42:97:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:53 2025 by rpki-client