Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
File: CegPaQPGpVbSifWLpes41VyzAHE.mft (raw, json)
Hash identifier: PP/GhJOKULRSdZzZNpJlm6F6rXPugWMEmF/P63gGuy8=
Subject key identifier: C1:2A:A3:3E:DC:A6:3B:C1:85:1C:E7:64:D5:3D:4B:9E:4D:B9:70:61
Authority key identifier: 09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
Certificate issuer: /CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Certificate serial: 01992330D2F68616218ABC41D9940E575A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
Manifest number: 3B
Signing time: Sun 07 Sep 2025 08:00:25 +0000
Manifest this update: Sun 07 Sep 2025 08:00:25 +0000
Manifest next update: Mon 08 Sep 2025 08:00:25 +0000
Files and hashes: 1: CegPaQPGpVbSifWLpes41VyzAHE.crl (hash: mp8Z2t+r7wmmpiWQCij/SSQFFig2ODoOSodagg0id3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:d2:f6:86:16:21:8a:bc:41:d9:94:0e:57:5a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Validity
Not Before: Sep 7 08:00:25 2025 GMT
Not After : Sep 8 08:00:25 2025 GMT
Subject: CN=c12aa33edca63bc1851ce764d53d4b9e4db97061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:11:bb:a7:cc:4d:05:21:53:1e:e1:de:b0:
04:56:48:bb:1c:05:79:1d:f1:81:08:26:3d:1f:58:
db:42:76:b8:da:63:ff:81:65:52:1d:72:d8:19:73:
46:39:1e:a2:98:76:ff:63:f5:10:9d:01:d0:b4:2c:
f1:b7:ae:f5:31:64:b4:7b:29:8a:68:a0:ac:db:ca:
e4:4a:a1:3c:08:7b:54:88:77:4f:ee:ce:05:31:d5:
fa:bf:45:17:39:94:7c:16:be:e5:67:3d:68:b5:cf:
12:b9:46:f4:84:b7:dd:e1:75:d9:df:9f:d6:39:43:
78:fd:92:0e:a9:f0:c0:cb:40:d0:a6:37:ca:25:50:
f5:fb:38:2c:c9:63:8b:27:72:c1:e2:34:86:4f:ac:
19:65:ad:ab:4d:e8:83:ba:ff:37:34:5c:1d:4f:5e:
88:33:af:4c:c8:5c:fa:8b:bd:dd:ce:ab:31:c5:af:
b4:81:8c:02:09:c7:b1:bc:69:ac:a2:20:0c:c6:40:
c9:e8:8f:32:64:92:62:fc:d2:28:b6:63:70:8d:b1:
cc:a4:39:ef:71:ef:c5:f4:c4:e4:f0:fc:44:8d:5b:
28:19:de:68:22:28:d3:00:9a:16:e5:8a:92:e8:61:
73:12:c0:da:cd:70:b3:6d:42:87:bc:a2:79:65:e2:
ff:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2A:A3:3E:DC:A6:3B:C1:85:1C:E7:64:D5:3D:4B:9E:4D:B9:70:61
X509v3 Authority Key Identifier:
keyid:09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:21:0d:ec:61:60:27:ef:29:06:00:22:4b:5b:82:54:41:87:
82:45:a7:7f:d6:64:df:b4:1b:88:1a:cb:b1:de:14:c3:4b:11:
3a:ac:86:57:08:73:5f:2f:20:5d:1b:86:6a:52:5f:99:5a:f2:
82:2d:ba:30:49:5b:1e:aa:ae:0f:53:dd:48:ee:a4:6a:50:22:
4a:48:81:0c:0b:3a:86:da:22:95:d1:03:b5:80:1e:15:0b:b6:
ca:a0:f0:e9:69:08:34:71:cd:9d:19:a7:ee:1e:bc:c9:8d:74:
ea:93:44:93:ad:b7:9f:16:3c:46:cd:18:97:92:40:df:a2:db:
3e:63:ed:86:bb:0b:08:3a:48:80:af:91:93:ff:0a:08:cc:ca:
a0:f4:45:b8:e6:5f:e3:ce:11:a3:2a:aa:07:f4:15:f5:60:7a:
69:86:b5:cd:72:47:be:3a:ae:02:12:f4:02:f5:54:55:44:b5:
37:5c:bd:44:52:c7:26:86:f9:8b:74:03:2b:d0:f5:53:f0:d8:
8e:a7:1c:8a:ec:b9:ba:e8:03:74:4f:e7:70:f9:29:f9:1a:e9:
b5:9a:27:73:1d:fc:71:86:3b:7e:3a:1a:17:9d:71:7c:0c:40:
d5:70:12:54:fd:06:e2:94:0b:18:6c:97:51:9e:75:54:b9:fa:
89:a8:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:46 2025 by rpki-client