Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
File: CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json)
Hash identifier: OMvuM/MBnwlSoNRl3PD7V8fYz5EselvPvog3p2TVYsU=
Subject key identifier: B1:3D:7D:AE:8C:0C:F3:9E:A7:D9:22:07:FF:66:F4:23:58:07:DE:5C
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 0199FEB47B958DA28ADBB907C5616F324AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
Manifest number: 1159
Signing time: Sun 19 Oct 2025 23:01:04 +0000
Manifest this update: Sun 19 Oct 2025 23:01:04 +0000
Manifest next update: Mon 20 Oct 2025 23:01:04 +0000
Files and hashes: 1: 9BZlV5u49Gak3QK5oEuLPOBSnn0.roa (hash: FmzCgS4aXNRr8JerLZUsfQlHdIEA6EKm/rMgvtNymy8=)
2: B6wSZJvSGeybR7CPqtyVhXyylu0.roa (hash: JHvST/m8T4zGrW1YqRbxakpRITmsR241Cez8p9x2uaE=)
3: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: bOGbM3lCWEXLhV2gL1kctqzSbyX4E4mpMoeg4JLhLgk=)
4: HoNzXhT8lx7vw7JlMXDLD2qJC4o.roa (hash: cNxTbsYhGJbBaA5KX6zTYu/tMB/8NFnmb2pRJ5AhFSg=)
5: ao-pH_2txkXRm36Fqqb0zfVnxeQ.roa (hash: PbN0VPyFR+E4wVcHf4vZ5OY6UiGEFVo+Jh+vf+hGjQM=)
6: mEa7ci9GxscmRsk-oNcnX_tH1Ws.roa (hash: ooLE+dfj0M2cSMZSDMJWC5DsnnWyEmz/3Hgg0yiBDWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:7b:95:8d:a2:8a:db:b9:07:c5:61:6f:32:4a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Oct 19 23:01:04 2025 GMT
Not After : Oct 20 23:01:04 2025 GMT
Subject: CN=b13d7dae8c0cf39ea7d92207ff66f4235807de5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:bf:3a:61:e5:40:b3:39:41:fe:ad:1d:e8:
e4:65:7b:fd:99:ae:7f:f1:99:3f:17:6a:7a:f3:ae:
6a:e1:20:9d:94:30:fb:a7:77:e5:61:85:5c:79:85:
19:ed:42:e3:08:34:ef:41:de:c6:b8:19:6c:f6:7e:
b1:1b:19:bf:ce:9a:08:2d:f2:28:34:69:f5:f1:08:
38:ed:aa:d0:4d:d0:67:a0:ad:bd:6f:48:54:44:fd:
88:ed:2a:6e:62:64:b5:39:5c:cc:28:86:54:ca:4d:
21:20:b9:70:27:42:13:c3:66:7a:54:b3:69:0c:6e:
25:3e:a3:16:75:0a:c0:2a:41:14:20:e0:6e:f7:01:
a1:66:7a:1f:46:97:d6:e2:97:ed:25:0b:8d:a5:2c:
ba:a5:25:8d:79:6b:d8:19:9d:87:d0:15:cf:45:e3:
5a:d8:4b:ee:39:b8:36:75:27:34:74:9a:2c:40:8b:
b8:5c:e8:0d:40:64:10:9f:50:68:91:57:73:8a:9e:
3c:28:29:aa:d5:0f:36:f5:4d:1f:6d:fe:7d:62:96:
85:79:22:38:56:d2:92:88:3e:c1:1a:f4:50:69:d2:
44:50:56:89:39:4a:8f:ca:e4:e1:5f:64:55:12:ac:
2b:b6:45:f7:c1:07:c1:c7:4a:71:11:3a:c9:63:5b:
58:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3D:7D:AE:8C:0C:F3:9E:A7:D9:22:07:FF:66:F4:23:58:07:DE:5C
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:45:40:e4:0f:dd:9e:0b:6d:c5:6c:00:06:b9:46:73:2e:66:
9f:ab:e6:df:1f:f2:ca:4d:a1:08:68:87:94:e4:a3:cd:60:57:
3b:7c:f4:58:e6:1a:28:ac:9d:c9:c0:0c:02:83:de:7d:2d:21:
f6:b3:6e:35:a6:c1:2d:6c:07:d4:c0:02:64:74:63:9a:92:2d:
ef:c3:bf:1d:2d:20:a8:7e:c0:33:bb:04:dd:58:9b:d2:cc:66:
e4:44:e7:09:d0:c4:20:f3:85:71:3b:9d:99:33:30:03:b4:8a:
39:c7:a5:bd:0a:43:17:8d:cc:1b:3d:6e:2a:47:01:f9:d4:5a:
97:1f:dc:96:cf:ec:82:63:b1:bb:46:40:70:24:bf:d9:eb:53:
28:71:75:0d:a8:e3:0e:16:d4:eb:aa:21:8e:fb:21:13:bc:f1:
45:aa:d9:a8:ea:03:04:af:34:86:ea:57:ca:3a:a7:a9:d0:92:
81:49:01:15:88:5a:71:40:de:89:2f:bb:d9:53:c5:59:60:ee:
0e:4f:80:b2:52:a9:db:46:a0:4f:06:98:53:d7:26:19:f2:16:
66:ad:81:83:e7:b2:57:2c:b9:bf:03:ec:58:56:50:ce:bd:0b:
38:55:0e:5e:2a:1a:8c:4c:66:61:30:06:23:51:e4:55:aa:89:
c5:da:d9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:28 2025 by rpki-client