Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: ZZxHFv48IM2z7cvpchGnS7LdBuhCfK11Vh36ttYcZvA=
Subject key identifier: 6B:1D:38:5A:E6:09:9F:0A:18:6E:46:FB:B5:8B:3A:A5:13:7B:7C:1E
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 0197B74589CBCC172F87285EC0B6BA9D79CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 0FAC
Signing time: Sat 28 Jun 2025 16:01:17 +0000
Manifest this update: Sat 28 Jun 2025 16:01:17 +0000
Manifest next update: Sun 29 Jun 2025 16:01:17 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: MDOcs0yeuHqLT8/7hxHlWlo4hBHBtC5eulxo6XDyhzw=)
2: ZzkiDwtBZqtMUNkcvV7d7s_Jt5k.roa (hash: pTGPYQviSOj1ZFFzCCHZK/34uo5urkjZrgwZdrFPiTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:89:cb:cc:17:2f:87:28:5e:c0:b6:ba:9d:79:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Jun 28 16:01:17 2025 GMT
Not After : Jun 29 16:01:17 2025 GMT
Subject: CN=6b1d385ae6099f0a186e46fbb58b3aa5137b7c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:07:d1:c3:32:5c:2b:72:13:e7:4b:65:64:
15:90:cc:2e:91:d1:2f:0b:ed:20:94:c1:06:41:54:
2b:21:0a:e3:4e:56:17:ee:d5:8e:61:1c:ef:4d:00:
24:15:8f:90:12:24:42:a1:a9:37:4e:b4:7e:83:29:
16:ad:35:b7:bf:4d:ac:57:ba:97:ab:e9:ad:ed:8f:
70:ec:30:93:64:fb:88:1d:57:96:59:55:3d:42:0a:
3b:31:59:e4:c1:97:cf:55:07:f5:16:7a:32:ad:5b:
fc:e7:fd:ac:b2:4f:61:51:56:b6:17:b5:b3:78:0d:
7e:30:dc:f1:c7:09:65:b7:68:79:e6:c3:c8:c4:f9:
ca:93:a5:bf:05:d8:b1:2b:ff:e5:2e:69:37:7f:09:
43:a1:8a:18:d5:8a:d2:59:84:aa:7e:b2:27:d8:dc:
72:19:87:fd:5c:3f:e3:48:e5:07:5e:56:23:9c:83:
72:d8:64:13:22:72:28:77:84:67:ef:04:65:b8:cd:
c4:e3:ad:86:72:00:6a:3a:f3:ca:f6:82:84:1c:68:
5a:db:5f:8f:db:38:ab:79:d4:ae:fe:67:d1:05:88:
74:98:c5:f5:ff:f7:95:38:1b:df:a3:2b:0e:9d:6b:
d1:83:07:7d:91:6e:f2:ac:10:d7:7e:a9:2d:8a:e4:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1D:38:5A:E6:09:9F:0A:18:6E:46:FB:B5:8B:3A:A5:13:7B:7C:1E
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2d:d0:4c:96:6d:2a:5f:8b:2a:b9:2c:97:28:a6:8b:02:13:
b0:a1:b0:6d:6b:4d:f0:9e:5b:5b:0a:8f:00:08:f6:03:5e:ef:
fe:cb:b7:bf:16:73:83:24:28:b7:98:a7:d6:df:2d:a4:77:91:
d2:c0:b2:39:ab:52:c2:21:08:d4:7a:64:51:90:61:51:05:11:
17:eb:f5:7a:c1:cf:c5:c0:11:33:dd:ab:33:5f:2d:b1:88:f6:
cf:29:48:49:83:c1:77:b7:1b:cd:74:15:41:52:b5:f4:58:c7:
75:5e:92:56:c6:ce:a9:bd:75:69:c6:7b:74:be:c7:3b:91:d2:
a3:9a:9a:82:ed:cc:e4:ce:d3:93:16:6d:ad:a6:e9:1c:9c:b7:
30:66:c9:41:37:4c:1a:8d:ef:ba:0b:2e:30:26:8d:6d:f6:a9:
41:26:39:a7:61:87:81:7d:48:11:3b:d7:48:b2:c0:0b:4c:a1:
1c:40:a4:9f:bd:2e:02:53:c9:79:b9:25:56:32:91:c5:31:42:
9d:48:2c:f3:ef:1f:79:b9:28:15:36:e0:57:c4:7f:7a:76:d4:
8f:21:e8:d9:ad:b8:22:62:ba:6b:98:73:1d:07:17:d4:37:7e:
16:ff:b3:c6:f9:0e:6c:f0:ac:4a:ef:0b:71:60:ce:cb:8c:11:
47:eb:23:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RYnLzBcvhyhewLa6nXnLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTU1MThlNjg0NjdiNDI5MGMzNTA5MjY4YjZkNmQ2NjQ5
NjJjODYwHhcNMjUwNjI4MTYwMTE3WhcNMjUwNjI5MTYwMTE3WjAzMTEwLwYDVQQD
Eyg2YjFkMzg1YWU2MDk5ZjBhMTg2ZTQ2ZmJiNThiM2FhNTEzN2I3YzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LgH0cMyXCtyE+dLZWQVkMwukdEv
C+0glMEGQVQrIQrjTlYX7tWOYRzvTQAkFY+QEiRCoak3TrR+gykWrTW3v02sV7qX
q+mt7Y9w7DCTZPuIHVeWWVU9Qgo7MVnkwZfPVQf1FnoyrVv85/2ssk9hUVa2F7Wz
eA1+MNzxxwllt2h55sPIxPnKk6W/BdixK//lLmk3fwlDoYoY1YrSWYSqfrIn2Nxy
GYf9XD/jSOUHXlYjnINy2GQTInIod4Rn7wRluM3E462GcgBqOvPK9oKEHGha21+P
2ziredSu/mfRBYh0mMX1//eVOBvfoysOnWvRgwd9kW7yrBDXfqktiuT2bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsdOFrmCZ8KGG5G+7WLOqUTe3weMB8GA1UdIwQY
MBaAFAnlUY5oRntCkMNQkmi21tZkliyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUt
ZTc0NTk0ODk4M2VkLzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUtZTc0NTk0ODk4M2Vk
LzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAei3QTJZt
Kl+LKrkslyimiwITsKGwbWtN8J5bWwqPAAj2A17v/su3vxZzgyQot5in1t8tpHeR
0sCyOatSwiEI1HpkUZBhUQURF+v1esHPxcARM92rM18tsYj2zylISYPBd7cbzXQV
QVK19FjHdV6SVsbOqb11acZ7dL7HO5HSo5qagu3M5M7TkxZtrabpHJy3MGbJQTdM
Go3vugsuMCaNbfapQSY5p2GHgX1IETvXSLLAC0yhHECkn70uAlPJebklVjKRxTFC
nUgs8+8febkoFTbgV8R/enbUjyHo2a24ImK6a5hzHQcX1Dd+Fv+zxvkObPCsSu8L
cWDOy4wRR+sjLQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:22 2025 by rpki-client