Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: ucu0XY95Id2tV5v/0pJfbRQW8rvk4iAZWas4b4tNHOU=
Subject key identifier: 0E:3E:50:3A:85:40:CE:2F:25:CC:EC:6E:45:11:C7:CD:D6:0C:F0:76
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 019849654F5F86813892B00D54F58A900AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 02F4
Signing time: Sun 27 Jul 2025 01:00:32 +0000
Manifest this update: Sun 27 Jul 2025 01:00:32 +0000
Manifest next update: Mon 28 Jul 2025 01:00:32 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: qIgHuS8jrYyLYckd7UsRY4OMJ6gqmvtlCZ6RmZMcn3M=)
2: oDzw6scHjTvVUxNbd-QUot4DsM0.roa (hash: wtt4piWURYUGaUVkeFPj0sScj6sbR4E+qyw2r+vT/ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:4f:5f:86:81:38:92:b0:0d:54:f5:8a:90:0a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Jul 27 01:00:32 2025 GMT
Not After : Jul 28 01:00:32 2025 GMT
Subject: CN=0e3e503a8540ce2f25ccec6e4511c7cdd60cf076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9e:15:41:7b:bf:8c:6c:51:a9:f6:ae:9d:68:
21:3a:0d:0c:bc:dc:9d:f7:fe:98:16:28:13:26:6e:
df:cc:ff:c2:65:61:03:42:53:2d:43:1d:c6:cb:a2:
d5:b5:75:3a:b3:5d:63:bb:6a:d8:5d:f0:e4:bc:f8:
c1:f2:78:95:2f:97:e7:66:a4:ee:9c:e9:05:b9:92:
80:dd:7a:35:df:00:67:a7:ce:d9:2c:97:6c:55:f9:
91:e0:ec:3a:da:02:ca:66:b3:a1:ed:fd:56:aa:59:
44:7e:80:5f:b4:a3:26:c4:26:ca:ad:f1:4b:35:b8:
60:7c:22:ba:76:17:cb:77:24:1f:4e:61:e3:e6:56:
d4:8a:9e:34:bc:64:3f:d9:f5:2f:f6:1e:2c:0e:85:
ea:2a:20:79:9b:33:dd:5b:db:45:9f:d9:04:47:cb:
fe:2d:b1:05:64:fe:86:ea:62:04:40:92:84:08:d1:
7a:bf:27:e5:30:d8:cb:71:a6:8d:ff:3b:4a:85:ec:
f0:ea:02:61:a5:f5:77:77:a5:31:76:f1:cf:ed:78:
08:32:9c:8b:52:21:cd:69:57:5d:ec:93:ac:eb:bb:
2a:ee:36:3c:99:f6:1f:45:cd:40:f4:4e:75:1e:62:
f7:00:05:84:83:8b:63:df:4c:07:1f:04:2d:09:d4:
7b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3E:50:3A:85:40:CE:2F:25:CC:EC:6E:45:11:C7:CD:D6:0C:F0:76
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6f:f8:5b:22:9f:05:1e:35:c9:3e:17:9f:b8:f7:a4:2a:0c:
62:2f:5d:8e:72:f0:9a:80:f5:69:94:29:31:06:0d:2c:5b:5b:
53:21:39:a9:8a:83:45:2e:1f:67:86:26:51:63:92:6d:1f:03:
6e:19:c5:ff:f7:ee:85:16:11:20:a8:03:b2:3c:e7:70:f1:ba:
66:1f:9d:32:56:e8:53:7e:be:d0:55:e6:fc:74:1e:d1:fa:a7:
e7:7b:66:c6:f5:12:73:43:3d:65:67:af:b7:a7:c6:e7:89:35:
f4:ac:f0:4c:9e:84:d1:7d:64:af:06:e6:03:d4:5a:4c:20:77:
fc:4d:97:e4:ca:9b:53:a3:a0:d1:02:40:13:09:77:0b:61:8d:
8d:05:4d:c7:1c:17:b1:96:1d:06:8e:f7:1f:a8:3d:f0:e3:ac:
11:c0:23:2a:10:0c:fa:00:07:99:43:19:19:8e:90:31:26:41:
1e:48:66:06:54:a5:bc:ac:39:8f:ed:52:41:63:51:8f:38:77:
e5:20:71:68:4b:5f:f6:e5:c1:28:0d:22:f8:c4:6d:9d:bb:f1:
1c:b6:a7:b6:7b:d5:58:bb:9a:38:96:da:e6:bc:a5:bb:63:15:
83:81:33:e8:b8:66:26:6b:fe:05:60:58:51:05:cc:88:fd:c6:
05:b0:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:40 2025 by rpki-client