Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json)
Hash identifier: OUFBfLS9aErKa2yJHiBuS5HytlxY5GxYUiJzkUXpLrM=
Subject key identifier: 9B:AE:11:F9:5A:B2:B7:D1:28:A7:80:53:B2:53:6B:ED:EB:CB:1E:AE
Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2
Certificate serial: 019852686D94919748943DF94B2B78E37676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
Manifest number: 0276
Signing time: Mon 28 Jul 2025 19:00:32 +0000
Manifest this update: Mon 28 Jul 2025 19:00:32 +0000
Manifest next update: Tue 29 Jul 2025 19:00:32 +0000
Files and hashes: 1: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: 6WDgoSn6Di+TeWAFUBLZ9/l3HAGPX0ZJaS77Tz1RMA4=)
2: bQzf2uMGkgXH3X2QS8uIrSp74eU.roa (hash: YLxBLk8jjfgkyujII1/AehF/PxCPTNN02Psu8lVMfcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:6d:94:91:97:48:94:3d:f9:4b:2b:78:e3:76:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2
Validity
Not Before: Jul 28 19:00:32 2025 GMT
Not After : Jul 29 19:00:32 2025 GMT
Subject: CN=9bae11f95ab2b7d128a78053b2536bedebcb1eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:0c:0a:7e:3e:b5:a6:a5:35:52:b3:80:a3:
20:d3:35:fd:ae:da:7d:5b:8b:21:18:d6:2f:d6:aa:
3c:8f:a8:d4:9d:74:c7:58:3c:dc:dc:e0:9b:7f:c4:
3b:45:eb:ee:ef:3e:98:d3:f8:6a:cf:d9:8a:ca:af:
74:10:a8:85:e4:94:ee:5d:de:1c:03:cf:e5:d5:3b:
ae:32:51:1a:ae:a8:ea:d4:13:94:a5:9e:19:29:30:
a3:29:82:6b:a6:36:f0:9f:85:b4:a8:b8:23:68:ba:
c8:8a:7a:aa:6b:15:b6:28:8e:f2:fb:9a:ca:da:f1:
09:4c:ae:d0:65:7d:e4:f6:7a:57:05:ce:40:c1:9a:
39:e7:f2:2e:b1:dc:87:70:b6:a5:f5:9b:51:d3:1a:
c9:02:74:fc:3f:03:9f:c4:0b:bc:cc:72:10:94:cb:
b8:51:f5:6b:0e:82:96:fb:40:18:bc:e5:9f:64:f6:
36:04:12:a0:fa:5e:67:a1:8f:fe:ac:0c:16:f7:b6:
15:ef:56:ae:4c:8b:67:32:63:93:bb:ca:90:2b:94:
9c:b8:5e:82:54:ae:90:de:5c:21:26:1e:a6:cd:3b:
46:f1:a8:e1:b1:97:22:dd:f9:7c:28:22:c8:52:1e:
fe:47:0f:ab:04:fc:14:35:70:1a:68:b8:77:d6:19:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AE:11:F9:5A:B2:B7:D1:28:A7:80:53:B2:53:6B:ED:EB:CB:1E:AE
X509v3 Authority Key Identifier:
keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:38:db:d3:d9:9f:ba:34:70:35:8e:94:5b:85:05:de:b8:00:
6a:47:cb:18:79:8f:d1:3c:e1:f9:17:3d:62:cf:fa:0f:fc:8e:
44:08:e0:f8:21:e5:67:1b:a2:55:53:eb:02:1c:eb:46:b7:3f:
55:b6:92:18:85:ff:17:ed:d4:2c:59:65:95:85:dc:0e:35:c6:
3e:17:bc:00:bd:51:fd:e5:d2:87:49:67:8c:ea:fe:3d:f4:04:
b9:3f:2e:e0:a1:94:f5:a9:f3:6e:23:7b:92:fe:0b:66:fa:e6:
dc:e4:0c:ec:93:f7:ce:14:95:76:04:ae:6b:10:cc:1f:aa:db:
15:07:20:4f:c8:2a:4b:aa:6d:9f:fd:61:ea:a8:29:3f:85:9d:
00:0e:64:e1:b3:68:97:6e:25:13:84:3d:07:ef:37:15:4b:be:
56:1c:b3:ea:60:b1:d9:d8:55:fa:a7:17:8b:42:69:ec:51:1c:
3a:cd:c3:17:d0:01:48:76:65:42:ed:f1:37:ff:2d:1f:8d:08:
47:51:3b:f4:4e:dc:94:7c:25:a7:03:a8:21:13:a2:39:85:8a:
5a:18:ea:03:ec:a3:e6:f9:18:17:f2:f2:fb:d0:c3:d8:fc:50:
47:ec:31:09:1a:76:28:d4:db:ab:1c:3c:55:f8:3e:82:c5:e6:
da:37:63:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:57:11 2025 by rpki-client