
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier: JNmEdLA8/GhvBIxdvneIt5Oo+TJMt5/JKBMon9o4cis=
Subject key identifier: CE:AC:E7:BC:63:C0:8D:97:51:CB:9C:79:A5:BC:CE:76:37:C9:34:3B
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 0198477702F0A0751C2BED3BE63184279FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 16:00:38 +0000
Manifest this update: Sat 26 Jul 2025 16:00:38 +0000
Manifest next update: Sun 27 Jul 2025 16:00:38 +0000
Files and hashes: 1: 4tKIyKN2LpGytONfG9Wwzb3sMh8.roa (hash: So7qtpci+LVeK7KYvgn0X4FAkS3oDmYxiev+fG5cuSs=)
2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: QeTKJAHYNUr7cUhZNBoUpfKohLuTjSq1velbbcHy9ig=)
3: Ulk603SVbOQAiKSzR_IZBatvpSU.roa (hash: 1Gak7FJcv6XeZUXfgmGsLnHftg1ktwdBLJgL9CPQ7IA=)
4: rjFAvFxrdSB0H68aH_zK0lS1GcA.roa (hash: iKO/ulWqGpWzjwhANl857sDa0g01+J+R36f50OBJrb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:02:f0:a0:75:1c:2b:ed:3b:e6:31:84:27:9f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Jul 26 16:00:38 2025 GMT
Not After : Jul 27 16:00:38 2025 GMT
Subject: CN=ceace7bc63c08d9751cb9c79a5bcce7637c9343b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:90:b1:6d:3c:ab:92:3d:64:2a:99:eb:bf:0c:
74:ee:fa:56:a1:1d:22:d2:2f:82:27:d5:50:1d:b5:
6a:e2:59:e9:35:28:a7:1b:c1:d5:62:a5:5b:4b:9c:
26:50:16:c2:4b:ec:3c:4b:b7:2e:0c:90:37:e9:12:
67:2b:71:2e:bb:d1:b2:8d:03:57:57:a9:42:85:20:
b2:ec:aa:a0:e9:f5:7c:9f:36:d4:e0:f0:11:c2:51:
0a:1e:da:7a:44:c5:04:3c:0e:6a:0d:6f:65:62:af:
28:66:6e:d2:6e:20:62:a9:68:61:79:46:9a:f2:c3:
aa:d5:40:d9:02:87:7c:7a:d3:8b:76:95:6a:5a:bf:
1d:06:76:2f:35:e5:e2:4f:78:8c:13:8b:10:5f:61:
73:ba:cc:c1:43:dd:99:58:d2:0e:48:f8:94:48:08:
10:33:32:0f:68:19:59:fb:02:b1:e5:8a:de:1f:12:
8b:35:7a:39:af:3e:a6:61:69:7b:9e:cc:35:b8:b6:
14:23:33:5d:26:56:39:13:99:0a:4a:93:84:b7:2d:
8a:26:3b:06:65:5c:b2:88:3e:b6:9a:4c:c6:a5:6a:
5b:39:e7:2c:2d:f7:1c:c4:3a:10:11:bb:94:b4:1f:
9a:39:0c:b2:db:f5:51:e7:79:24:93:78:94:35:ef:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AC:E7:BC:63:C0:8D:97:51:CB:9C:79:A5:BC:CE:76:37:C9:34:3B
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4d:1b:d5:d7:8e:a9:ed:29:f7:d9:b2:5d:26:6b:ca:d1:61:
fb:50:ca:86:8c:a8:9f:58:55:8d:cf:b4:7e:b1:f0:42:eb:06:
f5:e1:6a:80:8e:c9:91:a8:2f:d7:23:e9:bf:84:96:4d:4d:24:
3c:a2:66:1e:66:86:d9:1d:11:b7:fc:95:12:1d:8a:15:5b:45:
f9:ed:e8:4b:de:18:2b:71:ad:39:b8:d5:c8:aa:ce:64:fc:ee:
24:76:df:72:c1:88:33:77:84:d5:2d:89:d5:60:cc:c8:e8:fc:
20:a1:c0:87:5e:74:bf:62:1f:fe:b2:3f:af:66:0f:5f:19:fd:
ae:91:2b:f1:be:3b:2f:51:14:d2:72:37:81:03:fd:2d:f2:86:
52:88:c4:95:b5:63:ea:ed:78:11:b8:8d:50:d2:71:c3:90:fb:
7a:e7:ec:5b:3b:92:1e:d9:bc:0f:f2:3d:75:ce:33:6a:92:91:
9c:a8:aa:aa:07:9a:31:95:12:49:7b:9e:c1:d9:47:5f:9f:37:
8d:4f:62:6e:0f:25:9a:cb:9d:60:10:01:6a:62:cb:85:58:11:
68:db:34:bb:a5:7c:9d:ff:15:36:44:5f:ce:9c:7a:c5:cb:78:
dc:5f:4b:c4:f0:c3:f2:64:3f:4d:94:b4:20:af:d6:d0:e0:4e:
b4:d6:a0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:15:11 2025 by rpki-client