Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
File: CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft (raw, json)
Hash identifier: A8V8a3FZ4ghozuKMQfVKdFBR32kjNC2N3XYrsJaLTuQ=
Subject key identifier: B8:02:58:1A:AD:61:2B:40:07:C5:D8:04:6A:34:C3:84:AA:18:0A:77
Authority key identifier: 08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
Certificate issuer: /CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Certificate serial: 01984AE576488511E7414F625B89778C16F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 08:00:08 +0000
Manifest this update: Sun 27 Jul 2025 08:00:08 +0000
Manifest next update: Mon 28 Jul 2025 08:00:08 +0000
Files and hashes: 1: CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl (hash: ZGW6mSQ0xcBRfFys96FNxeSowAkABONuo8dJtLTZaGw=)
2: vAZb7s6D6Fuq3D4AHtKSkcv7tbk.roa (hash: dNxWOWstiC1jdikcIMTYHaBFr6iCMFTRh+rrcRXQbJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:76:48:85:11:e7:41:4f:62:5b:89:77:8c:16:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Validity
Not Before: Jul 27 08:00:08 2025 GMT
Not After : Jul 28 08:00:08 2025 GMT
Subject: CN=b802581aad612b4007c5d8046a34c384aa180a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:1a:0a:ff:22:40:e6:b7:52:51:84:9d:1c:
52:15:0b:ee:17:73:19:e1:5f:d0:48:5e:5f:92:5e:
cb:29:24:1e:8f:b0:22:4f:36:d6:56:66:33:f9:f6:
5f:bc:5b:a5:b4:f8:1b:a9:b6:eb:42:71:5b:07:6b:
a1:fb:6e:75:dd:af:a0:7c:a8:5d:84:10:32:47:a1:
cf:2a:a7:32:39:64:66:4a:72:fa:80:7a:78:2d:24:
c2:89:1d:47:fe:3e:84:5d:03:35:57:a8:71:9a:c0:
b2:51:53:c8:f5:bf:01:42:1a:34:87:8a:01:eb:6e:
63:80:08:9a:be:05:2a:08:85:d8:44:af:b8:59:57:
e7:ea:25:90:4f:cc:f5:f6:ad:ff:31:aa:6a:b2:06:
cb:ef:ae:5b:7a:22:e7:43:a0:87:71:87:82:91:ac:
c1:5e:cd:18:dd:cf:8b:93:13:fe:90:88:c6:b4:f3:
f4:d7:4c:47:52:46:4c:e7:75:bf:6b:0e:06:0e:c0:
f7:33:e3:c0:1b:e9:6c:fe:23:50:d9:09:39:19:d4:
0d:98:29:bb:e6:85:6b:c0:86:0a:d3:da:8d:91:6c:
ea:3a:af:64:25:c8:0f:cf:de:c1:d4:49:e0:02:24:
d7:37:f0:f7:f2:90:4f:cc:8b:4d:ab:3c:c3:ec:fa:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:02:58:1A:AD:61:2B:40:07:C5:D8:04:6A:34:C3:84:AA:18:0A:77
X509v3 Authority Key Identifier:
keyid:08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c0:2c:9d:5c:aa:e3:91:e8:73:f4:9a:95:f7:25:ed:d7:3f:
63:0b:5b:57:e3:57:fd:8e:54:dc:5e:b7:3b:b7:f4:03:e4:47:
72:eb:ed:84:5b:b5:dc:09:07:6b:27:81:5e:54:96:75:99:27:
f8:26:1a:87:59:7d:66:80:3a:97:73:d1:d2:43:1c:bb:48:bf:
f4:dc:8f:b6:f5:56:8b:53:53:80:ab:0c:aa:ba:17:03:f8:5d:
ec:b6:c6:8f:7e:bc:59:58:2d:8f:4e:6e:9a:6f:2d:28:1c:dc:
bc:43:28:ed:d0:ec:16:7e:15:e4:91:35:2e:bd:dd:87:ad:04:
8e:2d:4a:d9:e6:c6:69:86:06:c2:30:6e:15:19:6a:0e:7a:92:
c8:ce:29:8f:e3:de:a9:0b:69:05:ce:0c:63:7e:17:2f:b9:0b:
77:da:be:98:d9:b1:7a:27:e3:cd:35:e4:7f:b2:f0:98:a9:b8:
8a:8a:26:90:41:7c:8a:16:89:f7:78:f5:a0:ec:85:14:df:8c:
95:5c:84:81:4a:f7:f6:27:1b:00:8f:ae:43:4a:e7:bd:fa:f0:
9f:0c:99:d9:22:aa:8f:f7:16:58:cd:c2:dc:06:77:ac:fd:9d:
95:3c:96:11:49:40:7b:b3:1c:b8:19:2d:fe:ff:0f:e8:8e:c2:
26:28:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:22:48 2025 by rpki-client