Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: Khk3C1IFx0qtrg3BXFBsni5f2UREtebbj66C2V4noDE=
Subject key identifier: 24:D0:D6:4E:EA:D8:EA:E4:48:EF:BD:CC:CB:80:5B:10:69:FE:A2:45
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 0198481C25728DEFA922BD0D01585F3A39D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 0FF7
Signing time: Sat 26 Jul 2025 19:01:00 +0000
Manifest this update: Sat 26 Jul 2025 19:01:00 +0000
Manifest next update: Sun 27 Jul 2025 19:01:00 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: pUlriPjdoob5RRP8q7Kkvjei3jYvJ6ZlTdmkIPKwPU8=)
2: ZzkiDwtBZqtMUNkcvV7d7s_Jt5k.roa (hash: pTGPYQviSOj1ZFFzCCHZK/34uo5urkjZrgwZdrFPiTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1c:25:72:8d:ef:a9:22:bd:0d:01:58:5f:3a:39:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Jul 26 19:01:00 2025 GMT
Not After : Jul 27 19:01:00 2025 GMT
Subject: CN=24d0d64eead8eae448efbdcccb805b1069fea245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:80:96:c2:a6:3f:f3:c8:7b:c5:ef:7a:18:
90:bf:63:d6:3d:d4:28:40:3f:cc:38:e0:75:78:1a:
f8:98:43:45:1c:fe:ee:84:d9:dd:d4:35:85:e7:82:
b1:86:83:c7:5b:a7:3e:01:85:b9:eb:24:7c:a0:5f:
46:f4:5c:a0:8e:95:76:f3:3a:3e:bb:23:1b:7d:54:
6c:bc:73:75:9b:35:a5:be:c1:4f:47:01:6c:33:43:
62:57:50:57:d1:58:9f:b1:13:e9:5e:98:ae:3e:01:
d2:49:ec:27:f8:4a:c0:8d:7a:f3:1c:c7:f2:7e:da:
82:14:a1:0c:38:41:39:db:22:0d:40:91:e1:cf:e2:
11:90:47:32:de:9e:63:ef:e7:55:a5:ce:2f:d5:0c:
3f:f6:9b:76:44:b8:38:53:48:a8:cd:f7:86:f7:80:
8e:f9:8b:8a:ec:c1:13:8a:cb:c1:31:6e:50:15:55:
96:57:80:58:b7:70:29:17:81:a0:cf:80:df:76:77:
78:61:c1:db:57:d7:58:2c:58:0b:6c:2a:51:a2:66:
c5:30:f1:e8:58:7b:da:56:94:f2:30:18:46:9c:07:
dc:91:41:64:bd:21:ff:15:f7:b5:49:de:77:63:23:
da:1c:67:90:b8:49:c2:75:6b:f8:60:3f:5c:45:ff:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D0:D6:4E:EA:D8:EA:E4:48:EF:BD:CC:CB:80:5B:10:69:FE:A2:45
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:31:89:33:65:59:75:38:55:2a:99:f1:ea:b1:1b:f9:b0:38:
9a:52:23:83:25:f8:3c:fe:12:2e:e4:11:7f:a7:35:7f:70:2c:
cf:88:c4:75:6f:a9:53:8e:e1:39:d5:72:f9:7a:d7:4b:f8:7b:
33:be:db:59:14:01:36:93:50:24:35:29:95:48:bd:d4:cd:57:
df:d4:18:61:44:6c:9c:6e:ce:38:1f:ec:90:18:cd:b0:24:ec:
70:7b:e4:31:57:d4:1e:d9:9a:a5:97:14:0a:c7:1e:36:96:d6:
00:1d:8f:6b:bc:17:8b:69:65:0c:a7:5c:81:3a:92:eb:25:53:
3d:62:02:c6:d9:cc:19:35:45:66:7f:05:c2:5c:6a:09:94:e2:
1b:17:20:4a:ff:3c:82:17:66:aa:57:08:60:bf:e8:82:2c:3c:
92:5c:17:af:b6:05:18:af:87:65:b3:17:c7:7e:9a:1d:a7:c8:
f5:8c:35:09:6c:5b:01:89:14:c4:1e:e8:00:83:6c:d3:25:b6:
28:3b:0e:ba:80:da:ff:84:2f:75:c6:99:67:86:58:7a:33:03:
3c:0f:a4:ed:44:35:50:c4:b9:a9:dd:80:e6:a1:5e:00:26:41:
74:c8:5d:12:6f:78:4d:94:98:5c:0b:c9:56:4a:6f:51:a4:d8:
e5:2d:bd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:25:03 2025 by rpki-client