Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier: +MevKVyPA6TQqXNr4Dy1B3EENqNTdPKcpCptiR5dCb0=
Subject key identifier: C8:D1:20:F3:2B:6F:C9:D6:C2:05:85:EA:EB:89:4F:8B:BE:7F:B7:96
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 019A337D3227ABFAE59E281B1C43D1985BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number: 0847
Signing time: Thu 30 Oct 2025 05:00:34 +0000
Manifest this update: Thu 30 Oct 2025 05:00:34 +0000
Manifest next update: Fri 31 Oct 2025 05:00:34 +0000
Files and hashes: 1: 5OdHvHOcZkrao-9cj9p2twVtXj0.roa (hash: XE/cbPsbZGNTjgltCjh6PwbFsSQa/FeH5vMG4ogZQBU=)
2: BxevXOZBdFUOOljteOuO-Rxt-CY.roa (hash: 3iKh9PQRS6dYBM+vLpV5Vh4W7QUExMRDQ5j2EO0fnVo=)
3: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: XeTI1I6qCmRhE4rRwA/YYzjD3h5hr+zDYOxPnMaXDnw=)
4: dxDHiWZSI0UaIHekmjGJ3sxW6wY.roa (hash: miwDVBoTIblNIC6j43ewfXiSRHSZo0go2veqU8bISQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:7d:32:27:ab:fa:e5:9e:28:1b:1c:43:d1:98:5b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Oct 30 05:00:34 2025 GMT
Not After : Oct 31 05:00:34 2025 GMT
Subject: CN=c8d120f32b6fc9d6c20585eaeb894f8bbe7fb796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:cf:a1:8f:05:85:f0:1c:c9:6f:c8:41:1a:
e6:67:9c:f4:fa:82:c0:e2:fe:54:96:6c:b3:a2:d0:
0f:a3:f6:1e:9e:d0:27:04:7c:ac:3c:2c:f0:f5:c9:
fd:b2:f0:7f:a8:3d:ca:71:bd:71:d7:90:93:14:7d:
cd:80:27:eb:ef:dd:24:02:80:8b:84:72:b7:5e:9c:
61:90:4a:b6:ae:63:2a:cc:85:96:63:69:8b:1c:c7:
33:7f:bc:d9:99:b6:91:53:3e:ea:2a:06:1b:8a:ac:
cf:a3:16:88:bb:31:6a:56:d6:f2:58:c8:4d:74:45:
c4:4d:f7:6d:5d:aa:c3:e3:94:57:04:f4:fc:0f:16:
4c:f9:f1:d1:53:03:83:04:11:2b:cc:d6:20:08:8f:
d2:c9:a7:a7:25:4f:77:25:ba:5b:ba:86:aa:e9:86:
51:6a:3d:91:3f:e2:a4:30:ce:3d:37:0a:dc:74:72:
94:68:3c:3c:24:4f:45:3d:3f:4a:8d:f3:64:cf:4e:
ca:40:a5:02:a1:0a:d8:8b:cf:fc:fd:b2:e9:8e:8e:
9e:e9:a5:9a:00:4c:18:3e:0c:18:05:39:1c:52:35:
aa:4c:66:68:d4:6d:f1:42:28:87:5d:06:5c:c7:40:
fd:89:dc:47:7e:09:b8:8f:f1:c0:92:ea:8e:09:bd:
d3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D1:20:F3:2B:6F:C9:D6:C2:05:85:EA:EB:89:4F:8B:BE:7F:B7:96
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:39:eb:f2:ff:d6:bd:c0:f3:70:5c:a3:e7:b8:b7:0f:79:33:
f7:0b:9f:cc:e8:b1:d8:4d:db:3d:f5:59:29:6a:54:da:a6:9e:
9d:96:a0:2e:38:4b:19:7a:a4:72:0f:e0:e7:15:e8:27:b2:2a:
3f:9c:96:03:04:8b:cd:20:aa:46:34:ad:9e:6d:24:bb:9f:80:
e8:ac:e2:38:61:16:55:54:5b:29:f5:18:fb:2e:29:2e:79:83:
80:3b:20:51:4d:54:ec:7b:25:01:98:be:a6:4b:66:a2:c3:73:
6c:f8:fa:19:a1:0e:1e:e5:e1:a0:3a:ed:f4:00:4b:0b:d5:c1:
d4:40:01:3f:ac:bd:c6:e1:3a:2b:c4:6c:0b:1d:05:fa:3b:76:
1b:7b:23:e6:b4:4e:77:5b:9a:75:cd:a2:10:f6:63:5f:de:62:
14:3c:1a:24:6a:5c:71:3b:98:64:66:d0:e8:ea:c9:fa:61:c5:
94:2b:97:d9:cf:8a:0f:8a:bb:c5:f2:05:81:52:39:60:af:fe:
94:24:ed:bb:11:a9:91:38:cb:c0:c8:c9:37:1d:8e:85:31:e7:
6c:c6:d1:43:a7:f3:0e:e2:b8:ee:4d:72:06:a5:bd:ed:6a:38:
af:45:19:4c:9b:4f:05:e3:49:11:cb:1f:4e:2f:80:3a:79:1d:
26:ad:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:27:57 2025 by rpki-client