Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: bs+yQDkPxDnge9O4z+foTHTws54ZhFDIl39CPXBys7I=
Subject key identifier: 30:68:97:8E:58:3C:A0:A9:30:27:19:75:F0:1E:E5:32:90:2D:7C:02
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 0198D515BCE724F278CFC3A4412533EC2CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 1040
Signing time: Sat 23 Aug 2025 04:00:28 +0000
Manifest this update: Sat 23 Aug 2025 04:00:28 +0000
Manifest next update: Sun 24 Aug 2025 04:00:28 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: zXBl9mJdUOZzFPooDdxtJafceDGdOmgaxS1Clc6zQyw=)
2: ZzkiDwtBZqtMUNkcvV7d7s_Jt5k.roa (hash: pTGPYQviSOj1ZFFzCCHZK/34uo5urkjZrgwZdrFPiTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:bc:e7:24:f2:78:cf:c3:a4:41:25:33:ec:2c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Aug 23 04:00:28 2025 GMT
Not After : Aug 24 04:00:28 2025 GMT
Subject: CN=3068978e583ca0a930271975f01ee532902d7c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:28:6d:ae:ec:76:d9:8b:59:da:c3:f7:5b:ba:
e4:a2:1c:f3:9d:8d:6b:34:11:75:4d:61:1b:45:2a:
a5:3f:ad:ec:9a:e1:88:a7:89:48:c3:56:b2:27:dd:
7a:70:d5:01:26:97:f0:2b:39:97:1e:81:fc:e4:bd:
30:7b:4c:c3:cc:a5:8a:b4:6e:78:85:ee:94:23:41:
18:96:6e:86:a0:25:2c:3e:78:43:88:8a:e3:58:27:
29:79:fc:5a:f8:6d:7b:37:7a:45:91:fa:60:ef:1b:
82:aa:c7:91:2f:45:9a:fa:3e:2e:3f:5d:4d:52:4e:
8d:30:8f:d8:9b:40:64:ae:19:63:71:ef:3a:85:52:
1d:7a:25:b6:b6:ad:cc:ee:cd:42:b7:ed:d1:62:98:
15:fc:d6:76:d7:7b:94:28:2e:28:ba:ef:1f:3f:3e:
df:30:17:7c:db:b8:5a:9a:b9:61:a7:ea:d5:a0:67:
c6:39:f3:6c:27:e5:ba:b4:50:1b:2b:ed:27:04:aa:
33:5e:48:ef:19:6f:a4:f8:ea:57:ce:3d:2a:a5:e2:
86:d6:89:d3:49:1c:96:d7:65:65:8e:03:74:52:e8:
15:4c:6f:43:c8:73:88:91:d4:d9:d9:1f:f3:b4:e7:
53:23:d4:35:50:c5:ce:e5:d1:34:b2:50:e6:5a:b9:
9e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:68:97:8E:58:3C:A0:A9:30:27:19:75:F0:1E:E5:32:90:2D:7C:02
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3b:9f:8b:11:37:75:3b:61:86:8b:33:82:a9:82:1a:6b:88:
28:a6:77:a6:33:b2:e8:38:f4:29:d1:74:90:85:48:c4:d2:8a:
ab:78:66:db:f3:78:03:77:7e:32:65:db:53:e3:f5:e0:3b:ae:
73:85:e2:37:0a:66:fc:25:b5:64:62:18:5d:fa:53:1b:55:85:
ec:10:f8:21:0b:56:65:ff:e3:e7:d9:d4:ce:82:b4:58:e9:9d:
15:36:26:8a:e3:ca:f7:e3:1a:7e:2e:73:f6:bb:3f:49:e9:4a:
f8:1f:42:8f:68:45:e8:04:9d:a7:f3:07:0f:c2:d7:81:79:97:
51:21:a8:5d:7e:5f:be:ec:a8:bf:90:7d:99:f7:5f:0d:4a:5a:
7d:cc:05:c4:c7:83:64:20:3c:7f:73:80:33:eb:2b:1e:93:b6:
3b:35:b4:4d:8d:49:b9:0f:9c:6b:e4:9b:a2:a2:ea:35:9e:a9:
b7:82:94:fa:2b:13:d4:8d:1a:21:55:e6:bc:a1:2a:be:ce:30:
42:de:47:bc:7b:c1:77:dd:a4:c0:f6:f5:48:48:a3:df:02:c9:
46:fb:f5:63:0a:d8:47:76:3f:9e:c7:e1:b8:3d:14:c8:46:0e:
b1:86:2b:a1:8b:ba:a7:a9:17:50:b1:b0:64:d4:ab:25:0a:09:
df:38:ad:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:09 2025 by rpki-client