Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: t4p1b8Al9sVlmactKQQhy7Lnl10KySTTcmzm6PGUvSk=
Subject key identifier: E1:B7:FF:A9:DB:A2:64:08:86:D7:E1:49:BD:36:69:4D:FE:A5:E8:DB
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 019A4DAB1C8EB319F2E509A027C4C0763971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 1103
Signing time: Tue 04 Nov 2025 07:00:50 +0000
Manifest this update: Tue 04 Nov 2025 07:00:50 +0000
Manifest next update: Wed 05 Nov 2025 07:00:50 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: Slp368mptr4+3cYEOLr5AcmqhyE6CiN2zykeIstX0zU=)
2: ZzkiDwtBZqtMUNkcvV7d7s_Jt5k.roa (hash: pTGPYQviSOj1ZFFzCCHZK/34uo5urkjZrgwZdrFPiTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:1c:8e:b3:19:f2:e5:09:a0:27:c4:c0:76:39:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Nov 4 07:00:50 2025 GMT
Not After : Nov 5 07:00:50 2025 GMT
Subject: CN=e1b7ffa9dba2640886d7e149bd36694dfea5e8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b1:f0:a9:5f:d9:7c:a7:a5:34:e5:9d:18:30:
7a:58:4b:81:98:a1:cf:99:91:ff:c8:91:16:a5:4f:
87:fb:a5:b5:b1:f9:03:7c:ae:14:84:97:01:26:3c:
89:46:f6:46:99:39:e2:78:3a:b1:83:5d:04:51:46:
26:24:64:ae:0c:44:29:b6:34:39:18:7b:c6:49:6f:
d7:26:2f:90:de:d4:ec:8a:9d:8a:bc:42:d7:0d:54:
8f:30:5f:93:9f:b1:7e:89:da:aa:30:e3:63:03:54:
2f:6f:53:08:50:97:c5:e9:86:f0:ba:f5:17:2c:dc:
e8:58:7e:59:b8:8a:88:e1:9e:b3:3c:88:5a:a1:78:
96:e8:c6:4f:67:85:ce:6c:e5:f2:dc:cb:e0:cc:c8:
b7:c2:2f:51:f5:16:d9:79:09:e7:90:23:d1:ae:26:
e1:1d:16:67:85:61:ca:a3:27:ba:26:6a:52:6c:1f:
eb:9d:62:2f:aa:43:d9:f8:6d:ec:a4:68:65:4f:1d:
f8:d2:f2:c9:bd:40:27:0e:ba:66:e9:4d:1f:35:e8:
5c:3a:36:01:e7:51:f5:b6:ba:42:ee:da:7e:11:aa:
33:42:0e:ac:9f:af:32:de:43:31:ec:72:dd:1a:aa:
c7:69:d2:0b:01:a7:68:11:bb:06:77:bc:aa:35:50:
dc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B7:FF:A9:DB:A2:64:08:86:D7:E1:49:BD:36:69:4D:FE:A5:E8:DB
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2c:0f:66:14:a4:43:c9:f2:e0:3b:5f:1b:03:34:58:ff:ae:
dd:d7:d8:b3:fa:7a:4f:39:48:ef:21:ce:1a:02:35:85:f5:f8:
87:27:4b:5c:87:ae:e5:b7:b8:75:f2:1d:16:32:8f:b5:42:43:
2a:26:aa:a4:ce:33:d6:fe:e4:3e:bf:c2:ad:f3:b4:85:ed:00:
bf:34:9a:94:a9:69:9c:90:c7:bd:06:b9:75:fa:dd:2e:f9:7d:
d8:17:08:21:aa:ba:d4:a8:e6:73:d8:3f:b1:4e:c8:a9:88:32:
c4:0e:45:a4:e4:8c:bb:b5:94:8d:23:00:94:61:e8:25:73:a2:
9b:78:ed:9e:ec:31:1a:55:35:22:f5:67:c0:a6:fa:80:10:ee:
2c:23:fc:2c:ed:3b:40:ff:0b:4f:fb:7b:4a:a8:ac:e3:43:75:
b6:3e:f4:79:c4:ec:ed:bc:28:da:2a:fb:24:77:d5:bb:ec:2d:
9b:68:42:75:4f:c8:c6:88:fd:b7:18:a3:b6:7a:46:08:56:6f:
40:61:af:70:33:3d:e2:2e:d9:4d:e9:3d:83:24:7a:07:47:f6:
7b:cc:a3:e1:7f:b8:d0:b8:0c:57:cd:c8:a7:d0:45:20:8d:03:
09:34:e5:42:df:79:71:e7:15:9b:82:1f:88:19:6f:99:8e:6e:
16:2b:44:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:11 2025 by rpki-client