Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
File: CEaS7DDzfffcteR600auvetx_DA.mft (raw, json)
Hash identifier: V5DxO8nTiQE8uijDJUuystNAHsuXFIu26fYf5FVdIJ4=
Subject key identifier: 24:19:26:1D:D6:A6:9E:51:89:74:AE:13:80:88:C8:6E:2F:65:12:4E
Authority key identifier: 08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
Certificate issuer: /CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Certificate serial: 019A7225F1C03D6AEB096243CA7C7B611CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: CEaS7DDzfffcteR600auvetx_DA.crl (hash: 7V2jyYm6vufThDuaXvmNtjbYNt5qae7jm1HJmlALyeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f1:c0:3d:6a:eb:09:62:43:ca:7c:7b:61:1c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=2419261dd6a69e518974ae138088c86e2f65124e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:c0:22:25:ee:a6:60:97:69:99:29:6a:a4:
71:d1:c7:c9:04:21:4a:3b:b5:92:77:45:f2:77:1a:
d0:22:44:b7:52:9e:05:01:38:8f:76:cd:09:0e:1c:
ee:89:b0:b7:4c:67:f8:12:09:51:cf:35:67:ac:fa:
4e:62:4a:a6:ba:fa:9a:8f:3e:a2:62:80:68:51:03:
91:7f:9d:96:28:e7:e2:c5:be:bf:24:68:33:5b:16:
30:2b:c7:53:61:ee:83:2b:6b:1f:b9:8d:9e:60:2f:
ab:98:8a:20:76:e9:1c:13:b3:64:ee:ec:04:60:6a:
73:d4:96:c9:0c:3f:7a:6a:0c:07:b6:04:d2:2b:97:
02:35:d5:51:bc:6a:a5:f5:49:94:a9:c6:49:29:20:
f9:f7:aa:de:96:4c:dc:ab:4e:b0:48:53:6d:a1:15:
69:31:af:17:40:e1:df:de:bb:d0:28:b9:7a:47:de:
4f:72:c3:b3:7d:bc:12:2f:57:66:cd:53:e1:45:0b:
0e:d3:5c:68:d4:49:29:ce:05:88:5e:4d:09:0f:a6:
ac:bf:f0:b3:cc:36:2c:ab:b9:b9:74:47:3e:31:0d:
0f:6a:61:99:f0:53:41:f3:e4:c6:4a:ea:43:49:94:
9e:44:b2:71:d1:93:c7:4a:cd:ac:8a:ef:5a:14:56:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:19:26:1D:D6:A6:9E:51:89:74:AE:13:80:88:C8:6E:2F:65:12:4E
X509v3 Authority Key Identifier:
keyid:08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:85:c8:00:18:c9:bc:0f:a4:83:a1:62:f6:27:42:26:14:69:
87:38:9a:38:51:2a:1c:f8:11:e4:2f:5f:5c:91:6e:e4:a0:d2:
50:a4:1c:19:2f:28:75:09:d9:a1:90:2d:4a:1a:4c:53:ab:d4:
5b:38:48:8b:ef:59:1b:a5:3c:dc:25:b6:e2:b6:ed:8d:1b:6b:
e3:40:a2:ad:2b:bb:fc:92:50:01:24:8a:d3:bd:ed:b4:bf:fb:
36:21:53:90:ba:1e:84:e2:0e:fd:a5:d3:72:8e:b2:54:bd:6c:
78:42:6b:1a:ca:49:be:1b:5e:ef:cf:3f:7b:57:e3:f1:0e:98:
dd:4e:97:ea:bb:ce:51:93:3e:38:4c:53:a0:9a:54:92:1b:57:
57:18:5e:a0:b6:fd:6c:9b:b1:b5:35:1c:09:0c:16:5a:4b:12:
b0:98:9b:53:b7:ed:79:75:2d:dd:ac:e4:e8:31:9e:9c:d9:16:
2a:f1:fe:b5:03:f7:99:b5:4f:c0:e7:3b:8e:bb:4d:b1:18:fd:
55:31:b9:fd:6b:2f:dc:38:9b:5e:0f:81:bd:16:1b:6a:d7:30:
34:b5:0a:c4:e9:6f:19:6f:aa:47:a2:c4:10:7f:f2:06:46:5d:
d3:0b:d8:d4:17:ce:88:65:62:46:c0:4c:75:76:ba:f1:78:7e:
7f:10:11:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:56 2025 by rpki-client