Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: wy7JNgvqGscIEskuygm2HFk4rb0kPfym9tNyZV6lv2U=
Subject key identifier: 5E:9E:79:44:25:3A:EE:53:87:90:23:EC:C6:D2:52:F8:32:58:7B:CE
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 0199FBEBD651B7457D6C31A03978DDEBB042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 141B
Signing time: Sun 19 Oct 2025 10:02:40 +0000
Manifest this update: Sun 19 Oct 2025 10:02:40 +0000
Manifest next update: Mon 20 Oct 2025 10:02:40 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: 4kdg/s8IuVDBYCcteaAB8ae6YRTdzVER9jNMwCwtz7w=)
2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=)
3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d6:51:b7:45:7d:6c:31:a0:39:78:dd:eb:b0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Oct 19 10:02:40 2025 GMT
Not After : Oct 20 10:02:40 2025 GMT
Subject: CN=5e9e7944253aee53879023ecc6d252f832587bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:0b:4c:27:f6:4a:d1:e2:38:e3:f4:a4:04:
04:57:8a:16:e1:b7:74:70:25:fb:6a:69:8d:e4:d1:
8d:dc:f5:9e:c8:0f:3d:5b:48:c4:a4:02:dc:fd:e1:
af:4b:2c:77:61:ac:2f:35:3c:7b:2c:eb:c4:72:d5:
21:21:e3:4c:be:30:10:05:22:7f:8c:9e:f6:fd:ae:
9d:6e:b2:b6:73:09:b8:9e:83:53:41:2e:e4:5a:51:
c9:3d:c5:e6:8c:68:89:e7:03:d5:e8:db:57:33:3f:
94:12:3d:55:fd:42:12:e0:a2:86:95:60:9c:2c:ca:
ab:16:29:90:8f:5e:b6:80:55:72:f9:7c:a8:a6:5d:
39:aa:a8:bf:13:41:03:d2:76:c6:ff:2f:b1:24:cf:
d5:59:b4:32:c7:70:99:fe:37:29:0a:53:08:d5:7c:
82:b2:55:67:4a:0c:15:d6:21:c9:d8:06:89:53:d6:
1e:a5:97:cb:16:83:73:25:21:1c:e8:da:b4:85:8c:
c2:3c:5e:c3:f4:29:94:c6:29:f7:89:77:92:7d:61:
96:f1:3a:8e:f5:53:ba:49:0f:e6:27:b4:2d:a1:a4:
d8:e8:a3:13:67:39:30:ac:38:0a:f6:75:83:08:1c:
d3:ec:16:0f:54:f8:58:83:4c:91:e2:8e:63:24:2b:
f4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9E:79:44:25:3A:EE:53:87:90:23:EC:C6:D2:52:F8:32:58:7B:CE
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1e:bf:f2:86:9d:93:69:38:bb:ec:60:68:a4:72:91:79:e8:
e8:e1:a5:86:5f:70:97:8d:04:e3:1d:ae:8d:14:5d:59:41:73:
f9:9b:91:35:fe:21:8e:81:54:9e:a4:a2:71:30:f3:b0:be:23:
67:d0:67:7d:6d:12:70:28:1e:5b:46:18:d3:f0:f9:d0:b1:24:
da:1f:bd:28:e9:0d:ec:87:5d:b9:19:8b:b7:e5:c1:29:dd:53:
99:c5:e6:83:cc:56:bc:f1:4c:eb:e2:0c:98:6e:ea:ec:8a:df:
fd:e4:08:85:96:90:ca:6a:63:8e:b0:57:d9:79:ab:b1:eb:65:
63:4b:93:ab:f3:d6:45:28:4c:e6:f3:93:51:5f:84:4a:67:f2:
3b:39:54:58:dc:59:0c:20:44:7f:89:07:fd:4c:c5:9b:19:72:
d3:ee:ad:e3:88:b2:d6:21:10:71:f6:9c:76:d0:55:0e:1c:ff:
cd:74:d2:f7:58:3b:6f:18:45:75:5e:87:4d:79:46:84:f0:7a:
63:4a:00:e4:87:96:c4:44:ca:00:25:f5:fc:f1:8e:f8:82:30:
74:89:36:81:29:35:87:08:f8:8e:a3:0f:b3:e2:4c:3c:7b:af:
25:55:e8:93:3f:99:cc:32:0f:d0:b1:a2:3e:af:d4:c4:ff:27:
b7:a4:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:19 2025 by rpki-client