Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: d9LsmxhjtuGI9zIuFdIkcDIHvRWua3Mq7ZEPNldTrt0=
Subject key identifier: 61:AD:0C:EE:B1:8B:A8:3A:0D:38:D3:A5:21:35:01:C4:A8:12:A0:1D
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 019747B11FE163E822083F4198A534ABEE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 00:01:19 +0000
Manifest this update: Sat 07 Jun 2025 00:01:19 +0000
Manifest next update: Sun 08 Jun 2025 00:01:19 +0000
Files and hashes: 1: 4to_68QAA5EZP6QVD93278mKQ9M.roa (hash: Din2sy8w9QJ69ucmdkg50bJdWrDL1O3pEtYdPufl40o=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: YB34vctxRRvvd5IeufTz9AD8fOtMJXvM47rl8y5e0uE=)
3: kA5bGRl5EHENPG-lFJ-KaUPwtEE.roa (hash: SCW2no/wqMGhhPF1PG24OTD/SWeQikiX3GB3gK0CJDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:1f:e1:63:e8:22:08:3f:41:98:a5:34:ab:ee:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Jun 7 00:01:19 2025 GMT
Not After : Jun 8 00:01:19 2025 GMT
Subject: CN=61ad0ceeb18ba83a0d38d3a5213501c4a812a01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:04:9e:78:7d:26:a0:3e:59:79:a5:ed:38:
2c:c4:a8:b4:e5:55:75:bb:61:ac:7c:2e:da:88:12:
30:62:3c:d2:ce:d0:2f:2c:9f:11:3b:54:00:13:51:
c4:25:4c:97:b8:21:a8:d6:08:b8:ba:54:c2:0b:4f:
94:cc:93:cf:ec:f7:34:c4:e6:4e:a1:11:24:82:43:
18:2a:1f:11:71:a4:96:78:f0:1d:f6:23:b8:c0:57:
12:b1:a6:f1:0b:79:42:d3:8c:65:9f:01:35:1c:4c:
be:65:9f:6e:fd:95:c0:51:7e:04:27:28:b4:b0:fe:
84:ea:61:7e:bc:dd:05:ed:4a:9e:9b:53:ae:1c:3e:
25:f1:41:a3:dd:2a:1a:2d:d1:e5:e6:1b:32:c8:92:
e1:84:18:ba:49:b8:69:32:31:a3:9f:40:e3:51:eb:
05:1e:02:a4:f3:35:0a:5d:8a:b7:d9:83:18:60:b8:
80:02:6e:17:f0:18:3d:6a:1f:bb:89:8c:f4:97:e4:
d6:bc:65:7b:3a:2b:a1:de:9c:81:07:2c:3c:52:13:
d3:3a:3f:2e:5d:a5:5c:c2:f0:58:f9:41:01:83:dd:
64:7f:4e:76:10:74:71:fc:d0:de:05:2a:c7:38:48:
5a:7b:28:d6:5e:a1:40:10:d9:f9:50:87:97:54:5b:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AD:0C:EE:B1:8B:A8:3A:0D:38:D3:A5:21:35:01:C4:A8:12:A0:1D
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5a:f9:83:27:da:e2:9e:d2:b3:2a:c0:35:6d:98:16:6a:ed:
cd:89:bb:c3:2c:34:31:67:a7:dd:ac:84:d4:cb:e4:96:0f:b4:
da:6a:d0:93:3c:1c:98:78:0b:75:6e:a7:90:79:02:32:c6:f0:
6b:78:fc:3b:38:f5:0c:d9:a7:16:d8:e5:2c:51:a2:5c:a2:42:
70:a9:4a:75:34:e8:0d:c6:7d:ac:8c:99:e7:d5:69:94:77:57:
41:18:4f:39:b4:d1:7d:f9:e2:6d:9c:0c:88:56:23:35:73:13:
77:f8:44:4d:2b:74:af:23:a6:a5:89:47:02:ff:76:3d:3e:c4:
d7:79:a3:0e:ce:d5:ac:81:52:71:20:d1:42:97:c0:ba:ac:e8:
eb:d4:10:8d:a5:9d:57:e3:69:c5:09:2b:ec:5d:15:77:b2:ef:
fc:7a:6c:80:e7:4e:de:21:c3:09:b3:e6:8c:73:de:00:cf:8b:
72:59:59:be:b2:a3:82:08:16:34:4f:ac:f2:ef:dd:b0:76:7a:
81:ba:c5:e0:b6:e3:a0:b2:ba:1c:50:e0:c6:b2:6a:5f:69:ea:
3b:6f:dc:a8:4d:d8:d8:57:c6:9d:1a:34:26:58:7e:2c:6d:cd:
19:83:1c:e5:61:25:0c:be:35:40:bf:41:03:5e:75:21:9e:90:
f8:49:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:02:59 2025 by rpki-client