Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: Am/uSkfA74r5zErsFeDF2Syc/PtpNMz/7xzbd/rKnok=
Subject key identifier: C4:E9:F9:EB:03:38:95:77:04:C8:95:40:A1:4D:87:C6:00:E9:6D:0C
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 0199228CB80956E715EC2FDCD974212BB2D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 134D
Signing time: Sun 07 Sep 2025 05:01:11 +0000
Manifest this update: Sun 07 Sep 2025 05:01:11 +0000
Manifest next update: Mon 08 Sep 2025 05:01:11 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: AI9hDGro2SNUa1um9qpaEXrHo1+XpN5dQsC/Qdx9bsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b8:09:56:e7:15:ec:2f:dc:d9:74:21:2b:b2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: Sep 7 05:01:11 2025 GMT
Not After : Sep 8 05:01:11 2025 GMT
Subject: CN=c4e9f9eb0338957704c89540a14d87c600e96d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:42:17:69:e0:11:c1:e7:1a:df:77:93:79:
d5:69:49:60:37:14:9b:b4:d9:d1:17:9f:7a:b4:25:
f4:eb:43:a6:b5:c7:de:8b:6e:02:44:e9:ab:95:d2:
fe:74:c8:95:1e:2a:2b:53:6b:c7:7c:56:4b:02:64:
7e:f2:cb:e0:69:a8:1e:59:f5:4c:97:18:b3:d0:42:
17:0e:3f:42:08:9e:3d:e5:b6:23:06:bd:65:59:e4:
08:4f:3a:fd:53:1f:49:20:5a:f5:b8:4d:ed:80:49:
8c:5e:f3:6f:aa:7b:2f:eb:b8:75:e4:c8:b6:43:7f:
bd:cd:75:52:86:30:9b:6c:42:29:44:66:b7:f7:9a:
1c:59:ba:8f:ba:b6:10:4c:30:4b:2c:d6:5c:cc:5f:
6e:fb:2e:93:d9:0e:ba:1a:37:f4:d1:c9:a1:7d:d8:
08:e0:aa:7c:10:ab:8b:35:db:cc:78:d4:fe:a0:93:
c8:d4:12:7f:4d:60:7a:e1:61:71:c7:de:78:50:52:
56:ee:21:87:60:b3:83:04:be:f1:5e:f6:eb:b1:67:
bb:fb:26:98:13:c0:4c:4e:f4:99:2e:ad:1c:53:41:
6d:d9:f3:5f:b0:6d:3a:85:18:b3:56:ae:92:c1:11:
b7:8a:cd:76:8d:dd:c1:aa:51:c5:4b:05:9e:ec:19:
09:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E9:F9:EB:03:38:95:77:04:C8:95:40:A1:4D:87:C6:00:E9:6D:0C
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3b:c3:2d:cf:a5:fb:89:33:13:a1:61:0d:67:e5:e0:d8:97:
d3:20:6b:57:8a:0f:a9:a8:ab:a7:cf:56:9c:68:dc:36:13:97:
53:b7:49:e0:3e:05:de:dc:fd:c2:02:78:45:bc:16:8d:02:4d:
7f:1e:b2:37:a9:1d:26:01:14:df:57:f3:80:28:b7:8e:c6:2c:
9c:61:fb:ad:68:af:8d:c2:ce:82:5b:c8:21:11:c0:e4:ea:22:
19:9a:bf:7e:df:6d:37:dd:b9:ca:7f:7b:f1:70:1d:b9:41:8e:
0d:42:2a:b1:14:0d:94:97:a7:3e:00:de:d6:89:cb:68:eb:7a:
9f:77:eb:ce:05:0e:16:b4:98:29:e8:32:c9:7f:e9:a7:9c:50:
b6:7b:4f:bc:c4:55:64:07:cf:13:64:07:43:fa:ad:aa:f8:02:
ab:e5:6f:65:22:c4:34:8c:5a:f6:93:ee:04:4a:82:74:7f:25:
c3:58:0e:bc:ca:a2:23:b8:58:f1:d0:13:07:9e:58:7e:2c:87:
e4:2d:2b:73:1f:f7:1b:47:a8:ec:79:4a:b1:97:bf:51:6b:f2:
f4:19:80:54:24:ee:5f:6b:22:79:6c:b6:2e:0f:20:ac:f0:ee:
4d:77:4f:c5:39:ca:3a:ba:4b:db:14:3e:71:5a:2a:a0:0c:f9:
b2:6f:6f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:09 2025 by rpki-client