Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
File: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft (raw, json)
Hash identifier: tYfvp3t7YPyQcnuBmTpJ71vmCpU6v2KPFiPPo3qDTzw=
Subject key identifier: C1:58:E2:F9:A3:82:60:AA:EB:5D:3C:8B:A3:D0:DD:6F:FF:6A:13:73
Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
Certificate issuer: /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Certificate serial: 0197488D02F4CAD3A4AC47F7DFBBF5E06DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
Manifest number: 11F2
Signing time: Sat 07 Jun 2025 04:01:30 +0000
Manifest this update: Sat 07 Jun 2025 04:01:30 +0000
Manifest next update: Sun 08 Jun 2025 04:01:30 +0000
Files and hashes: 1: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl (hash: wQwJRl/qxLPjlxn5E/DMmnmU9iNOFq+WfHry6MvOugU=)
2: jusxHEEIsrLZpxHa35fyPkAqK7s.roa (hash: ZFDdzLmEvnMxmWT9XlxYhopgvJv0aQjuJRSBRhLyOC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:02:f4:ca:d3:a4:ac:47:f7:df:bb:f5:e0:6d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Validity
Not Before: Jun 7 04:01:30 2025 GMT
Not After : Jun 8 04:01:30 2025 GMT
Subject: CN=c158e2f9a38260aaeb5d3c8ba3d0dd6fff6a1373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:30:32:f6:df:2e:c3:f6:67:6c:e3:06:2d:d5:
bf:06:14:4b:a0:52:33:50:27:73:11:8b:b1:ed:54:
34:19:ff:29:4b:f5:4b:ed:05:84:c9:99:7a:af:5d:
57:51:3e:98:02:39:80:e2:fe:d3:ec:5b:be:c9:78:
70:b0:bc:d8:94:9f:ac:53:4b:62:8f:3d:5a:17:0a:
9b:e0:36:84:f8:8a:0a:4c:35:71:0f:dd:53:5b:e4:
db:64:e7:85:cd:ac:06:ad:54:c5:ee:f1:fd:31:f8:
20:d3:c2:66:48:40:dc:5d:a0:a8:21:3e:da:a2:c1:
bf:00:d4:c7:00:6c:9a:fb:1b:87:bc:15:dc:c9:72:
6e:7e:de:af:e1:60:71:7e:dd:08:45:d3:29:fd:af:
ab:39:dc:67:32:5c:fc:e7:43:9b:e2:06:30:0b:ae:
4f:7e:20:3d:71:64:6d:99:87:c4:1d:26:8a:24:65:
dd:76:f6:26:51:87:62:48:ba:ca:86:43:7f:f6:92:
cd:81:b3:9a:33:be:59:b8:7d:82:d3:b1:41:65:11:
b3:4b:36:e8:fb:57:28:69:21:51:5d:70:57:bd:0d:
d6:09:3a:18:5c:55:91:c6:13:98:fb:17:57:d9:4f:
4a:00:7f:9a:0e:fd:46:0a:d9:9e:f8:6d:93:7e:dc:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:58:E2:F9:A3:82:60:AA:EB:5D:3C:8B:A3:D0:DD:6F:FF:6A:13:73
X509v3 Authority Key Identifier:
keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3b:cb:00:7e:79:9d:db:d4:e3:a3:93:a5:b8:c2:44:4a:e6:
56:5b:63:9a:b8:f5:2f:37:e5:78:15:9b:aa:14:c0:c1:03:76:
cc:9f:02:f3:dc:0a:5e:4f:a6:46:1b:26:b5:3b:02:a2:6b:fc:
35:83:75:59:fd:7a:fc:1c:6e:44:0c:b5:9c:46:22:08:78:f9:
de:aa:a3:78:fd:d3:ec:d6:da:8d:21:a1:02:58:59:e8:b3:46:
b8:b9:67:a5:1a:9e:2e:ba:14:cd:dd:ff:df:c1:46:41:63:de:
fb:13:ba:75:d9:e2:24:09:90:cc:9d:92:cf:00:81:62:43:e9:
54:64:13:ec:a1:07:a2:8d:4c:fc:64:68:9b:4a:cb:ae:dd:1a:
95:f9:3d:20:fa:e5:23:11:82:94:a2:ca:91:8b:d1:a0:39:ec:
a8:5a:b0:57:19:50:a9:06:c6:42:a2:35:6f:99:76:fe:c0:62:
52:e7:24:87:a3:21:dc:d0:11:74:97:bc:d5:d5:e3:5e:a6:bc:
05:03:04:28:7b:74:29:0f:95:10:58:ee:b2:73:ec:aa:37:61:
5f:d6:6c:ca:90:64:07:43:72:9e:f4:c9:03:0b:42:28:6e:60:
e5:ba:91:02:fb:a7:9a:45:ba:52:43:3b:17:ca:9c:54:46:e4:
00:ce:80:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjQL0ytOkrEf337v14G3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTRhOGQ2NzA2ZDlkMGY5YzEwOTFjYTY5OTUxZjRhYmQ1
OWQ0MmIwHhcNMjUwNjA3MDQwMTMwWhcNMjUwNjA4MDQwMTMwWjAzMTEwLwYDVQQD
EyhjMTU4ZTJmOWEzODI2MGFhZWI1ZDNjOGJhM2QwZGQ2ZmZmNmExMzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zAy9t8uw/ZnbOMGLdW/BhRLoFIz
UCdzEYux7VQ0Gf8pS/VL7QWEyZl6r11XUT6YAjmA4v7T7Fu+yXhwsLzYlJ+sU0ti
jz1aFwqb4DaE+IoKTDVxD91TW+TbZOeFzawGrVTF7vH9Mfgg08JmSEDcXaCoIT7a
osG/ANTHAGya+xuHvBXcyXJuft6v4WBxft0IRdMp/a+rOdxnMlz850Ob4gYwC65P
fiA9cWRtmYfEHSaKJGXddvYmUYdiSLrKhkN/9pLNgbOaM75ZuH2C07FBZRGzSzbo
+1coaSFRXXBXvQ3WCToYXFWRxhOY+xdX2U9KAH+aDv1GCtme+G2Tftzq7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFY4vmjgmCq6108i6PQ3W//ahNzMB8GA1UdIwQY
MBaAFAnkqNZwbZ0PnBCRymmVH0q9WdQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80N2ViN2ItYzNiYS00NzhhLTgxNzgt
NDA0ZDMxMjgwZTYxLzEvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80N2ViN2ItYzNiYS00NzhhLTgxNzgtNDA0ZDMxMjgwZTYx
LzEvQ2VTbzFuQnRuUS1jRUpIS2FaVWZTcjFaMUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozvLAH55
ndvU46OTpbjCRErmVltjmrj1LzfleBWbqhTAwQN2zJ8C89wKXk+mRhsmtTsComv8
NYN1Wf16/BxuRAy1nEYiCHj53qqjeP3T7NbajSGhAlhZ6LNGuLlnpRqeLroUzd3/
38FGQWPe+xO6ddniJAmQzJ2SzwCBYkPpVGQT7KEHoo1M/GRom0rLrt0alfk9IPrl
IxGClKLKkYvRoDnsqFqwVxlQqQbGQqI1b5l2/sBiUuckh6Mh3NARdJe81dXjXqa8
BQMEKHt0KQ+VEFjusnPsqjdhX9ZsypBkB0NynvTJAwtCKG5g5bqRAvunmkW6UkM7
F8qcVEbkAM6AyA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:31:32 2025 by rpki-client