Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: 7qHREk78vfarxnJm8tU91z64bugzVws2l9Bw1MJEvlg=
Subject key identifier: 7C:BE:B5:14:43:6E:E0:9C:F3:85:8C:3F:09:18:85:02:DE:AC:82:03
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 0198D65F5073B60DFC19AA39C2245A75CC48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 033D
Signing time: Sat 23 Aug 2025 10:00:27 +0000
Manifest this update: Sat 23 Aug 2025 10:00:27 +0000
Manifest next update: Sun 24 Aug 2025 10:00:27 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: vGssP43ue9ZL2NX1eov5KcelC51vIjVfRlsdLNg7F4c=)
2: oDzw6scHjTvVUxNbd-QUot4DsM0.roa (hash: wtt4piWURYUGaUVkeFPj0sScj6sbR4E+qyw2r+vT/ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:50:73:b6:0d:fc:19:aa:39:c2:24:5a:75:cc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Aug 23 10:00:27 2025 GMT
Not After : Aug 24 10:00:27 2025 GMT
Subject: CN=7cbeb514436ee09cf3858c3f09188502deac8203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:2c:67:7e:79:bd:61:78:6b:1c:a4:ea:1c:
c4:92:e6:28:c3:cb:c1:ab:e5:83:37:5f:66:d4:4b:
bd:2a:c8:20:d5:91:01:f9:90:99:16:de:45:45:a4:
a4:b6:9f:61:17:bb:a9:a3:7d:5f:cd:1c:5d:60:68:
23:52:9b:b5:6d:21:8b:09:33:4c:4e:22:75:cf:33:
cb:a9:a0:d2:79:3a:a7:79:78:25:3e:db:ba:e5:62:
79:a3:db:af:a2:62:d0:3e:4e:ec:91:26:16:4b:ab:
26:3b:f9:31:fe:b3:a7:49:21:2b:de:02:76:8a:ef:
29:f4:df:6c:83:1b:95:75:5f:bf:77:c5:d3:7b:58:
1b:2c:7d:fd:d7:34:14:ba:bf:9b:01:8a:1b:18:aa:
fb:85:c4:1c:f7:0b:0c:eb:ae:73:a1:0e:eb:5a:8d:
e6:dc:1d:25:ea:bf:b5:85:8b:a0:c1:d2:80:dd:13:
06:7a:3e:78:f6:16:7b:87:2f:8e:b9:ff:5d:77:33:
18:09:4a:02:6b:ce:e5:23:1c:98:41:57:63:0f:78:
48:43:4c:62:89:14:9f:f5:a6:ae:32:12:b5:f0:c3:
fd:33:74:5c:02:a7:19:0f:09:47:b9:7e:d8:48:d5:
8d:f3:b3:e8:5a:25:63:eb:a6:0b:29:08:72:70:45:
15:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BE:B5:14:43:6E:E0:9C:F3:85:8C:3F:09:18:85:02:DE:AC:82:03
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c2:32:26:98:a0:0d:63:a4:ec:6b:37:b7:c1:72:2c:84:c9:
67:8c:f4:10:c8:7e:c5:f0:aa:4a:ad:18:fe:d7:55:00:40:5d:
93:ca:59:d5:24:8b:ba:05:f7:15:c7:5e:d1:f8:dd:8a:f5:26:
b5:1b:ee:71:22:e4:a0:5c:7d:33:2b:93:4c:f2:cf:22:97:24:
69:bc:00:17:c1:85:cf:ee:30:27:d4:f9:e7:36:af:b5:0b:76:
88:55:34:24:40:07:0f:19:0d:cc:7f:d9:b2:2f:16:82:a0:c7:
62:ca:5f:20:a3:e7:ab:cd:5b:c3:a6:d1:f6:0a:64:32:b4:e4:
b5:cf:bf:bb:a2:5a:a1:54:a9:2b:61:23:77:10:fe:15:ca:14:
02:32:f8:a0:68:5f:b2:c1:95:dd:88:46:e8:c9:05:70:3d:1b:
b0:a0:e7:3b:7e:8b:3b:a6:c1:17:02:29:1c:2a:f6:eb:f6:c8:
bd:36:d9:53:90:8c:57:ec:9d:3b:d8:ba:f2:41:88:32:da:0b:
66:03:e1:8e:cf:fc:5e:f9:c0:ee:5b:c7:a9:33:3a:b9:3f:01:
40:55:40:c6:14:13:dd:d7:d5:3e:5f:53:3d:df:84:bc:6d:09:
30:8c:04:77:f5:13:37:9f:3e:30:33:78:29:31:55:ad:21:b3:
7e:63:ef:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:38 2025 by rpki-client