Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
File: CegPaQPGpVbSifWLpes41VyzAHE.mft (raw, json)
Hash identifier: yR8lBsL9G7ntPgSTu5r6ZzYZXmZiUAroF1P/aVcDLEA=
Subject key identifier: 65:9F:32:99:62:6C:A0:C2:10:20:F9:12:9B:C1:B0:F9:A1:03:6F:21
Authority key identifier: 09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
Certificate issuer: /CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Certificate serial: 019A7149D8BB03886D5FF801DCEE6BADA7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
Manifest number: E8
Signing time: Tue 11 Nov 2025 05:00:56 +0000
Manifest this update: Tue 11 Nov 2025 05:00:56 +0000
Manifest next update: Wed 12 Nov 2025 05:00:56 +0000
Files and hashes: 1: CegPaQPGpVbSifWLpes41VyzAHE.crl (hash: Lk4e+FQZeucC8iypMzOirHxyXyKLJZMo7pRQPoBK8Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d8:bb:03:88:6d:5f:f8:01:dc:ee:6b:ad:a7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Validity
Not Before: Nov 11 05:00:56 2025 GMT
Not After : Nov 12 05:00:56 2025 GMT
Subject: CN=659f3299626ca0c21020f9129bc1b0f9a1036f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:06:c0:57:cb:e7:d3:1c:9f:05:95:46:89:b0:
0e:cb:da:d3:9f:35:fc:13:1e:0e:b1:19:46:09:63:
e7:51:42:36:78:df:56:b9:1a:77:d7:11:43:e6:f8:
5c:c7:b6:9d:49:ed:e8:b7:e6:2e:47:01:ab:87:e2:
bc:a3:24:09:3e:87:35:cb:6c:be:bf:82:77:48:51:
00:3b:7a:19:60:41:35:a5:f9:91:8e:b6:6c:74:54:
ae:70:9a:b4:bd:c6:04:41:1b:54:b6:cc:7b:04:7d:
95:90:f6:ec:64:c8:71:6e:6a:13:7a:32:c0:3f:95:
f4:06:92:49:27:99:bc:a7:5b:4a:e7:7c:48:4e:be:
2e:1f:af:72:9c:1d:ed:a1:19:e6:16:aa:c7:98:9a:
b8:e5:4c:34:d1:8e:a1:63:47:d6:b2:cf:5c:68:9e:
42:1f:4c:7d:81:5e:94:e5:0b:d8:5e:8e:1d:2d:c9:
d2:37:87:fc:00:f0:bd:d0:94:1b:8e:79:1b:3c:15:
2d:cc:5d:18:a8:a1:9a:f7:c4:18:d9:59:a0:a0:60:
45:a4:2a:46:01:1d:1a:c8:b3:34:6d:69:b6:12:fb:
83:5d:79:2d:d3:6c:13:75:75:89:ad:aa:64:95:c8:
b0:05:e4:d1:7d:44:26:03:9b:b5:fa:43:0b:af:da:
95:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9F:32:99:62:6C:A0:C2:10:20:F9:12:9B:C1:B0:F9:A1:03:6F:21
X509v3 Authority Key Identifier:
keyid:09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:49:9b:22:3d:d1:77:9c:d3:8d:e4:32:d1:82:ca:d6:b6:c4:
1e:21:38:60:78:18:4c:e3:f1:30:10:df:7c:b0:7e:ee:1e:26:
8b:b1:5e:0c:fd:08:50:33:b0:36:6d:f5:91:c0:46:65:e2:d8:
b0:67:3a:ba:b4:d2:f8:c6:43:77:54:f7:a9:de:6f:44:44:c3:
18:65:1f:e7:9c:b4:49:fa:4a:29:9f:ce:9e:0d:2c:92:90:d3:
9a:7f:45:fe:ff:bb:7b:59:e9:de:5c:84:a6:ad:46:1b:95:4d:
f7:43:c3:c3:54:98:18:d0:ee:58:aa:8d:89:b0:ee:8d:79:39:
2a:dd:3a:ce:49:00:9f:31:f5:87:6b:1f:64:5a:08:79:d0:cc:
1b:7a:89:3f:f0:61:31:10:15:e7:44:d4:46:3d:e9:0c:ae:22:
71:a2:d4:80:fd:1f:37:2c:a6:07:03:6b:e4:5f:2e:5a:b3:cc:
cd:0f:a2:99:eb:c8:51:24:da:f6:d6:24:5b:f5:46:6c:76:a5:
2d:35:60:2a:09:8d:a5:dc:a2:9e:1b:3a:ce:2a:53:98:2b:03:
63:d2:27:53:fa:40:fc:45:59:ee:a4:bc:e9:3c:91:5d:89:4f:
bc:19:e8:6f:2e:98:d3:0e:fd:2b:a0:53:90:8c:be:0f:49:f0:
18:c5:51:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:15 2025 by rpki-client