Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: lA06ZmGWoUN85mOqHIGRgHbDTYmN8DEnJEwyKnYisc0=
Subject key identifier: 89:2B:C6:2B:08:E6:1D:F2:31:6E:42:7C:3D:EC:3D:E5:84:D9:08:B5
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 019A236545DD7F3DEE9F7C13240693CC0ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 02E7
Signing time: Mon 27 Oct 2025 02:00:30 +0000
Manifest this update: Mon 27 Oct 2025 02:00:30 +0000
Manifest next update: Tue 28 Oct 2025 02:00:30 +0000
Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: wappCaEXMEpEbYf5s2HhAGC6nfVj2geN2DuFsiCb9TU=)
3: J_7nGvX3BZw4FXXIO0TsrEmgd2Y.roa (hash: jqcFlSNVRG3Aj3N9s1+X70XYoSNVkY4OIWxwZDb7oHY=)
4: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:45:dd:7f:3d:ee:9f:7c:13:24:06:93:cc:0e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Oct 27 02:00:30 2025 GMT
Not After : Oct 28 02:00:30 2025 GMT
Subject: CN=892bc62b08e61df2316e427c3dec3de584d908b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:46:87:01:ef:3f:5a:b1:91:23:33:3f:e3:
27:d7:cd:96:bd:d2:2f:15:dd:7b:e9:67:eb:f6:40:
32:52:46:53:93:a8:a0:f9:7d:c5:5b:ba:04:bb:d8:
96:65:d4:c3:ad:c3:1e:46:54:76:6d:75:64:b5:63:
49:97:dd:83:c2:3d:38:c9:56:e5:1b:ba:86:b3:6b:
f4:7d:59:34:ea:c9:4c:60:da:f7:c3:63:de:dc:b4:
bb:50:bf:31:d3:2a:cf:58:a3:ae:ae:e1:90:d6:6f:
1e:bf:58:b2:9e:d8:d5:06:10:c1:7e:21:c3:a6:22:
e4:ac:b2:d0:dc:22:54:75:82:9b:3f:4f:2e:4a:ef:
19:8e:52:0c:cd:76:49:a1:db:2b:2e:c0:ab:73:80:
af:dc:bf:e3:51:91:fd:01:76:02:3b:6a:0c:dc:21:
9f:23:10:fe:69:e4:4b:b5:0f:3f:b7:3e:9a:75:71:
25:bb:92:ab:5d:78:3b:37:3d:e1:5f:c5:d6:b8:10:
20:b3:67:d9:8a:5f:b0:af:46:c6:0d:c2:56:e7:68:
c0:19:c0:b7:7f:af:1e:42:7f:86:15:e0:e7:8d:25:
95:78:24:ec:89:a4:6a:5d:f4:3c:9e:b0:55:81:a3:
08:69:f2:37:20:bc:c1:e9:9b:ed:88:7d:31:78:b1:
eb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2B:C6:2B:08:E6:1D:F2:31:6E:42:7C:3D:EC:3D:E5:84:D9:08:B5
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:69:df:d8:de:38:c5:56:15:b8:a6:44:ea:e9:47:62:7f:1d:
d1:33:79:b9:61:4a:f0:f7:9f:0e:da:2f:b8:df:f8:ab:c3:a7:
b5:a5:67:78:26:07:23:ec:7e:e8:da:5e:f1:dd:1e:9f:1b:74:
2b:35:11:fc:e2:d4:69:70:76:73:64:2b:6a:19:d0:a5:64:79:
79:87:16:15:88:7f:a3:8b:8a:af:97:c5:f1:1b:7c:81:c6:2e:
d7:a8:50:54:38:2b:05:ad:06:76:8e:b8:78:bf:50:63:c3:58:
15:b9:11:a6:91:bc:94:4c:be:09:3e:9d:be:49:f7:74:99:ce:
08:a7:ef:2c:b3:ba:da:0b:34:50:8b:f6:6e:7a:ed:4b:c5:91:
6a:ff:3e:a6:4d:de:03:35:cb:ce:a8:b3:89:70:83:ea:b8:2f:
69:d1:ee:8c:22:de:66:32:4b:2d:ae:dc:70:72:d9:ef:0d:7e:
cd:7b:04:66:3c:6c:5e:10:3c:2f:4a:76:68:38:b3:cb:61:6d:
93:c6:72:87:09:c7:87:df:6a:7d:a9:bb:21:63:a8:5c:f8:4a:
24:fe:88:83:f1:45:dd:6d:6e:3b:d3:86:3f:39:6d:9d:ff:bd:
d0:5d:e8:3c:1f:3b:6c:81:6f:9e:d9:ae:f3:9f:bb:8b:eb:5b:
1d:45:2d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:59:50 2025 by rpki-client