Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
File: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft (raw, json)
Hash identifier: tUKkqwIOaBxU+edN9gKfjUQmfty1zGy0HvgApz//IZo=
Subject key identifier: 9C:A9:A5:F4:AE:54:21:28:F6:EA:F8:81:C2:3A:5E:66:7C:DB:56:40
Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
Certificate issuer: /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Certificate serial: 019A71B7BAA2D79BD4C01ACC0643D0D29B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
Manifest number: 1395
Signing time: Tue 11 Nov 2025 07:00:57 +0000
Manifest this update: Tue 11 Nov 2025 07:00:57 +0000
Manifest next update: Wed 12 Nov 2025 07:00:57 +0000
Files and hashes: 1: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl (hash: XZbDthtUyO38U1WENfVhgsMahPyHhhrFpV5aysmj7gs=)
2: jusxHEEIsrLZpxHa35fyPkAqK7s.roa (hash: ZFDdzLmEvnMxmWT9XlxYhopgvJv0aQjuJRSBRhLyOC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ba:a2:d7:9b:d4:c0:1a:cc:06:43:d0:d2:9b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Validity
Not Before: Nov 11 07:00:57 2025 GMT
Not After : Nov 12 07:00:57 2025 GMT
Subject: CN=9ca9a5f4ae542128f6eaf881c23a5e667cdb5640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:89:14:02:c9:ba:99:c5:9f:d1:e5:98:1f:
d8:04:b6:17:a0:c0:1c:5b:7d:29:00:2c:85:69:88:
8a:90:6e:26:e1:e9:a8:aa:c8:0c:b8:dd:4f:76:5c:
94:e7:46:e8:40:8e:75:be:d4:8d:06:8e:10:83:9e:
a9:da:03:13:13:f4:a4:41:93:08:87:87:e2:f6:4d:
18:a7:72:17:4a:cd:92:1a:79:7f:43:0a:76:b0:6c:
2f:27:09:5a:b9:71:9c:c5:72:12:a4:15:a3:32:c8:
24:65:c3:4f:f3:85:7a:6c:7c:04:5b:97:ad:6a:a2:
04:34:b0:db:95:ea:d6:82:71:56:ad:9d:42:3f:99:
1c:95:db:4a:97:4a:3e:03:c8:ea:cc:e1:f1:58:f7:
2b:39:2b:2e:85:99:3d:8c:66:d9:a3:f1:ce:b7:1d:
dc:7a:e3:18:30:d0:a8:75:8d:47:b4:46:ae:fe:30:
05:e5:56:ba:40:08:90:09:82:20:ec:29:c9:ae:ce:
20:5c:fb:37:d4:ae:93:43:8e:cb:b1:23:65:b1:ca:
c0:24:da:22:9f:83:34:fb:13:97:6a:d2:a4:45:49:
eb:c8:6c:77:3e:1d:06:36:d9:c1:b6:97:47:59:2b:
d9:d5:85:11:99:8d:66:ce:5d:d0:98:a6:55:1d:80:
0c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A9:A5:F4:AE:54:21:28:F6:EA:F8:81:C2:3A:5E:66:7C:DB:56:40
X509v3 Authority Key Identifier:
keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b5:c4:52:d6:26:bf:e3:0a:af:55:47:5d:17:79:32:6b:cb:
8a:52:e9:fb:c0:fe:36:7f:44:1a:0e:df:f0:f2:0b:b0:75:98:
e2:23:8b:5b:cf:ef:da:03:3c:1d:ca:83:56:20:e3:21:4a:25:
b0:87:cb:13:cf:96:e6:a5:e4:8a:c2:68:2b:69:63:7c:df:9e:
03:d4:ed:86:0e:21:2f:78:20:fd:32:ff:65:b9:29:cd:12:86:
1c:30:22:a4:a6:b8:b8:b0:03:cb:31:82:10:02:17:4b:f3:11:
20:6f:bd:a9:b7:ea:db:4c:ce:d6:9f:ef:82:e1:38:09:f2:20:
86:34:4e:4d:3a:b2:71:c0:6c:e9:24:4c:ee:8d:d1:4d:f0:8b:
f0:a0:52:71:a3:40:27:30:f6:e7:10:0e:b7:4f:b6:a7:dc:f3:
bc:59:11:dd:50:7c:a7:cd:b7:9f:72:e3:d8:3a:a3:a8:38:a5:
34:2e:f7:52:22:7e:68:49:82:4f:2b:78:bc:fe:75:9a:ff:f1:
c6:71:d6:a1:90:c4:02:65:b7:e2:a3:fe:45:71:50:61:90:57:
8b:15:82:a1:03:22:ed:ad:e8:62:3c:c8:48:d0:b1:5c:46:09:
a5:8f:d9:06:c2:03:d0:fd:4c:59:1c:6a:4e:48:a3:b8:d0:50:
f5:61:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:47 2025 by rpki-client