Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: IIt5U2K492CYjmYdrmnVcIAL48DjGzJkVYhcXvj93yY=
Subject key identifier: 63:13:9D:B5:AF:47:13:29:BD:59:EF:1C:2C:F7:DD:62:77:DC:88:F9
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 0199621077064CBD875B338CE1A9073E0EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 1089
Signing time: Fri 19 Sep 2025 13:01:10 +0000
Manifest this update: Fri 19 Sep 2025 13:01:10 +0000
Manifest next update: Sat 20 Sep 2025 13:01:10 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: IWC4/uGMqIViyEbJC3F27IZr86V+ZN35I+tg1yTc9oc=)
2: ZzkiDwtBZqtMUNkcvV7d7s_Jt5k.roa (hash: pTGPYQviSOj1ZFFzCCHZK/34uo5urkjZrgwZdrFPiTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:10:77:06:4c:bd:87:5b:33:8c:e1:a9:07:3e:0e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Sep 19 13:01:10 2025 GMT
Not After : Sep 20 13:01:10 2025 GMT
Subject: CN=63139db5af471329bd59ef1c2cf7dd6277dc88f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:51:cb:d2:58:ee:16:47:98:b0:0f:c9:bb:
ea:51:85:79:a1:e1:0c:98:4b:44:5b:7a:f0:53:41:
1f:6d:e2:4c:c0:07:6e:6b:cd:57:0e:f5:ea:75:7d:
3d:bf:e3:0a:d5:23:aa:c8:da:43:64:ea:7a:5f:35:
d0:e3:b5:9b:90:df:26:27:36:6b:64:33:7d:33:2a:
ed:08:0f:aa:1b:0b:39:0f:a9:0e:e1:0c:21:d9:a0:
0a:42:06:04:a8:68:a6:96:f0:49:0e:be:49:7b:f3:
c5:80:50:88:f4:8d:fe:95:ba:a4:a8:f4:eb:d6:3a:
9f:e1:23:09:e7:a9:04:23:b2:a8:37:bf:e2:cf:59:
b8:60:3b:f0:14:54:ff:32:48:a2:45:3c:12:21:f8:
9f:4c:e6:8b:f1:e5:63:3b:0d:f9:dc:5b:a8:a7:1c:
46:c0:97:5d:10:8f:df:01:eb:39:71:8a:be:bb:47:
19:74:1b:2c:74:fe:2b:a2:f8:db:13:ee:f5:b6:0d:
1e:ec:c2:9e:e8:cb:d2:28:e2:c9:b5:68:b4:53:61:
05:c6:72:a0:84:26:1a:41:34:bd:23:05:51:8b:13:
9c:ac:13:b6:4d:dd:46:a4:e7:c0:22:19:e6:5c:49:
1e:77:ee:c5:38:fa:63:a1:c6:7a:08:05:4a:6b:f1:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:13:9D:B5:AF:47:13:29:BD:59:EF:1C:2C:F7:DD:62:77:DC:88:F9
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:38:21:86:f2:8d:a3:65:84:7a:4d:2a:6b:c2:64:8e:c5:ee:
e3:03:93:e5:68:cb:ce:cc:9d:2a:9f:92:4d:57:b0:ee:32:a2:
f6:cb:fa:e9:e6:c2:76:92:4f:09:bb:0f:9b:2e:36:30:78:3c:
18:f8:1e:aa:02:75:99:a4:21:eb:13:41:cc:97:54:7f:a6:b3:
50:a4:02:90:ab:3f:ca:95:ca:1f:28:58:95:cd:77:be:a6:20:
c2:84:e3:3a:63:f1:9e:a5:fe:af:6a:1a:4d:7f:11:b6:bf:15:
ea:64:8b:2a:80:1c:29:76:cb:f7:b0:31:43:66:95:30:62:d8:
56:95:79:6e:49:39:a9:ac:18:cc:1b:10:da:84:b7:67:12:62:
a3:4c:db:62:1b:c5:74:d3:17:9c:a1:cf:b1:9a:33:40:af:c8:
a8:8b:9a:27:2c:c8:33:3f:5b:22:11:14:7a:52:df:1b:28:97:
79:09:9c:da:40:d2:e7:d4:5c:10:85:5c:dc:a1:8d:a9:82:b4:
c8:9c:27:0a:14:d2:12:56:76:6f:a3:24:9a:23:10:12:d3:b7:
49:24:e5:b2:2c:de:d9:7f:cf:c5:d5:c2:c1:22:60:1b:83:12:
67:3f:88:11:cc:9b:96:f9:39:46:77:ac:0d:f5:1b:b1:f3:ce:
c9:36:bd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:39:04 2025 by rpki-client