Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: M5T4RDFT3qywDXq+o9JOR5jIXTB8vOI8Gt5Ptt1Ud5A=
Subject key identifier: 01:E9:4A:52:95:8D:73:7F:22:D0:A9:54:4D:72:72:4C:77:4C:D4:B7
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 0198C9EDBA38BD87462860FBC944BED4FC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 164A
Signing time: Thu 21 Aug 2025 00:00:56 +0000
Manifest this update: Thu 21 Aug 2025 00:00:56 +0000
Manifest next update: Fri 22 Aug 2025 00:00:56 +0000
Files and hashes: 1: 4to_68QAA5EZP6QVD93278mKQ9M.roa (hash: Din2sy8w9QJ69ucmdkg50bJdWrDL1O3pEtYdPufl40o=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: OqZh8pNjV/TYqnezJss2o3xVoh+M5R4ltgBlMtbq0RQ=)
3: kA5bGRl5EHENPG-lFJ-KaUPwtEE.roa (hash: SCW2no/wqMGhhPF1PG24OTD/SWeQikiX3GB3gK0CJDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:ed:ba:38:bd:87:46:28:60:fb:c9:44:be:d4:fc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Aug 21 00:00:56 2025 GMT
Not After : Aug 22 00:00:56 2025 GMT
Subject: CN=01e94a52958d737f22d0a9544d72724c774cd4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2a:9d:b9:91:db:13:ec:03:d6:be:58:c2:d4:
e9:ca:17:17:23:28:5b:61:c3:a7:91:79:21:44:c4:
0b:7a:4a:db:82:cb:c6:40:bf:f6:af:a1:99:a7:3d:
b1:4f:67:4f:60:10:90:d9:ea:44:dc:79:ab:a9:c1:
c2:52:78:e8:b9:90:34:6b:7f:86:57:c2:a1:f3:fd:
00:9f:3a:8a:d3:0d:4c:8c:d4:81:f8:6c:b1:d2:28:
64:27:b0:3c:85:fb:2a:f3:e4:4d:05:f5:50:2d:c5:
a6:41:31:05:5b:4e:d7:e4:a5:1d:83:ab:5b:93:50:
6b:16:f0:60:4f:4f:b6:39:15:71:e8:fb:a2:9e:d7:
17:f5:92:01:41:f3:8d:cf:a5:5a:e9:29:6d:4b:38:
67:1c:5e:86:49:e2:5f:f0:84:45:fe:41:0a:af:3d:
44:0a:5e:39:84:d0:49:4d:87:b2:7a:09:73:8f:fa:
19:da:98:14:40:0c:31:51:5c:53:5e:81:e9:b0:8e:
f2:1a:6d:92:d1:e1:5e:be:cc:98:cc:05:1a:6e:4b:
d0:43:b4:8c:ab:2b:70:d9:9d:8c:07:3f:f7:b0:44:
49:cb:eb:9d:0f:00:7a:46:e6:25:32:35:45:ef:70:
04:e5:cb:a1:25:fd:b9:53:41:d8:0b:ca:ed:42:4e:
c7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E9:4A:52:95:8D:73:7F:22:D0:A9:54:4D:72:72:4C:77:4C:D4:B7
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:db:36:c5:bb:86:b5:4f:34:7d:a2:b1:fc:75:3e:ff:fa:6c:
16:60:f2:c2:7e:bc:91:c2:99:b6:d3:a8:32:92:7e:41:df:38:
14:76:39:bc:f8:3d:78:dc:9f:5f:25:88:62:ff:89:ce:05:7d:
52:e0:00:00:1c:07:79:7b:cc:cc:ec:18:29:d2:1a:0a:13:f5:
2e:3c:01:d9:b6:5b:97:da:53:48:b3:df:9a:24:d3:f8:ad:6d:
bd:38:69:f2:02:60:3e:e4:e7:70:82:77:9b:b7:eb:49:04:a6:
61:0d:fa:04:a7:cb:5e:81:e9:21:5f:ac:78:92:d0:e2:f5:a1:
07:ed:c9:73:81:ca:8c:9f:c9:56:5e:64:55:b4:99:0d:cb:5e:
4b:16:bf:1d:4d:54:6f:a8:be:67:7c:b6:29:1c:b3:3d:2d:f5:
61:e9:ab:be:dc:82:2f:a4:ef:d2:a6:a5:52:42:99:56:36:e0:
bd:86:3a:85:96:1a:1e:2d:dc:40:90:d7:4d:12:77:90:53:bb:
32:d7:ca:83:f5:b5:9b:81:9d:0e:22:f4:c0:6f:9e:ce:83:db:
81:41:ff:5c:e8:97:db:5a:ae:8d:11:9e:d0:a2:85:4a:16:28:
2f:57:06:ee:c6:5d:6c:ae:b1:fb:c5:cf:90:b8:6e:7f:66:a3:
dd:53:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:15:11 2025 by rpki-client