Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
File: cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft (raw, json)
Hash identifier: opilbYiINwTu4BswH/dLZkyViugZI0vL/PM8ojhhNsM=
Subject key identifier: 55:D0:05:57:60:36:29:53:AC:23:77:29:5D:AD:41:2D:83:72:4F:AA
Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
Certificate issuer: /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Certificate serial: 019A014836BDAA05D7C46CA9DE6FB66DAC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
Manifest number: 04B9
Signing time: Mon 20 Oct 2025 11:01:41 +0000
Manifest this update: Mon 20 Oct 2025 11:01:41 +0000
Manifest next update: Tue 21 Oct 2025 11:01:41 +0000
Files and hashes: 1: cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl (hash: w/nlARHt6oFREHC1oYr9C4QIILH168oZqeUaD0qMNSM=)
2: zNpNQl9NSaLChe4B635hRjw02-o.roa (hash: ukOTTrydtQmkqVzRSGtZSX72LHto0GmqblImsbLdsZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:36:bd:aa:05:d7:c4:6c:a9:de:6f:b6:6d:ac:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Validity
Not Before: Oct 20 11:01:41 2025 GMT
Not After : Oct 21 11:01:41 2025 GMT
Subject: CN=55d0055760362953ac2377295dad412d83724faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:bd:a4:85:c4:5f:54:d2:c6:73:3a:f7:18:
c2:e0:89:d3:ab:72:b0:3f:76:ab:1f:05:31:e1:c4:
ec:98:a3:f2:cb:50:85:1d:ed:26:af:fc:17:dc:41:
62:2b:2f:83:ca:76:fd:4f:56:18:a8:69:65:3f:32:
ca:c0:e3:0a:5e:e9:b2:b1:cd:a8:18:54:c8:70:d0:
02:53:e4:2c:b8:ca:a4:07:7b:d5:f7:be:fb:6f:09:
08:c4:3f:9f:3d:20:22:d4:0d:29:b6:f2:f9:10:66:
4b:2c:45:a6:14:78:68:ed:a9:26:64:20:d2:74:d5:
2d:95:51:b2:3b:8e:12:76:76:4b:a8:0e:1d:5b:55:
57:82:9f:6c:55:7f:ea:d8:a9:78:db:71:49:b2:cd:
9d:a8:7a:c8:83:50:4a:d0:d4:ad:cf:32:25:bd:6d:
b4:08:09:8d:19:0d:5b:a8:b7:1c:0c:76:4f:66:3b:
4a:c2:13:69:d9:96:fb:2b:f2:00:49:37:f8:75:b1:
f7:72:e0:6a:fe:5a:0d:00:04:98:ce:7c:bb:ef:00:
cb:71:f7:a2:a6:33:66:98:1b:26:b6:d6:f9:4c:b2:
f3:b7:4c:be:63:bd:5a:28:47:b8:56:91:ef:f9:b4:
14:6e:c8:a5:90:30:ea:d7:54:4b:38:99:02:d7:3d:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D0:05:57:60:36:29:53:AC:23:77:29:5D:AD:41:2D:83:72:4F:AA
X509v3 Authority Key Identifier:
keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:58:01:80:c3:40:1c:8d:92:8f:34:da:f5:b0:be:df:d7:10:
1e:65:38:e2:8a:d7:db:e9:9a:3a:52:6f:33:1a:9c:44:ce:28:
6d:a9:cb:2a:22:f6:94:6b:2f:81:2b:a4:87:fb:34:65:9b:16:
7f:61:0d:05:0d:71:b3:82:29:c9:f9:6d:12:75:d9:a1:ba:2d:
b4:13:fd:05:70:77:2c:16:41:fb:fb:6c:83:ee:34:d6:c4:3b:
2a:26:2b:bc:a6:dc:79:9a:93:d2:7a:01:79:ae:96:a3:c8:1c:
5f:1e:24:c7:62:b0:a5:d3:b0:29:36:0e:c9:c4:76:bb:fd:7b:
bb:8c:a9:eb:ce:01:b1:ff:43:a4:61:cc:c7:9b:1e:cf:de:6d:
63:4c:92:7b:bd:a7:1c:58:e9:9b:3a:1e:e3:50:bb:f7:3e:9e:
a0:bf:e7:03:f0:4a:74:8f:09:47:e2:aa:cf:f3:39:f0:29:a1:
57:8c:0a:76:a0:c5:8c:ea:a8:4a:44:c2:e5:90:7a:89:ec:6c:
d3:f9:d7:1b:52:8f:b3:81:1d:5b:dc:e9:69:80:29:25:0f:bc:
60:c5:43:4b:ca:51:b3:8e:cb:0e:38:fc:be:ae:72:2c:65:d6:
f8:93:f9:ed:e0:13:9b:ad:b3:d7:a4:3a:e9:da:f4:af:9a:62:
88:fc:1d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:32 2025 by rpki-client