Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: TVN60yJA/RzWlDIZZZpRckeeBPLy+Zs9emE9XMSWzIA=
Subject key identifier: 0E:3A:A3:3C:86:0A:10:03:DB:B2:F3:36:C9:B7:AA:59:19:BC:9A:A5
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 01988FC78E5BDFD4F505A35AC22A0B429C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 1301
Signing time: Sat 09 Aug 2025 17:01:16 +0000
Manifest this update: Sat 09 Aug 2025 17:01:16 +0000
Manifest next update: Sun 10 Aug 2025 17:01:16 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: KL0Oh+XyfTkmBl4z9OUieFpy/nz794Nh3UwoTY38Hrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:8e:5b:df:d4:f5:05:a3:5a:c2:2a:0b:42:9c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: Aug 9 17:01:16 2025 GMT
Not After : Aug 10 17:01:16 2025 GMT
Subject: CN=0e3aa33c860a1003dbb2f336c9b7aa5919bc9aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:68:3d:5b:0b:50:d3:f5:23:83:36:91:cb:
83:7f:f1:24:e3:8a:d3:c8:0e:a1:a5:f6:f7:3e:30:
ec:c7:37:c0:aa:5b:aa:f3:bb:18:ef:c8:21:58:f7:
56:a7:cd:41:2c:f5:4b:e6:04:67:53:b5:5d:74:b6:
3c:d9:64:eb:b6:b4:08:e6:c1:44:05:32:fd:29:8c:
df:06:71:c8:78:97:91:c6:95:ec:c3:8a:84:23:bd:
f4:2e:44:b9:a8:db:15:e2:50:36:7b:bd:4e:6a:f2:
95:b5:e0:0f:f6:53:53:a5:62:5f:23:63:72:d7:7a:
bd:65:a2:71:3d:e0:aa:f5:70:cd:d2:9e:5f:6e:cc:
24:a9:9d:c3:30:12:fb:02:46:1c:5c:0d:c8:7e:10:
5c:0d:ef:00:02:37:8e:83:ff:83:2f:c4:e1:ca:9e:
9a:c5:af:ff:ad:13:3d:3c:87:b4:08:fb:58:df:76:
d7:9e:4c:fb:44:48:17:4d:f4:40:0c:5c:c5:5b:22:
10:0b:e1:a8:8b:a0:f6:04:8b:b6:f3:66:07:d2:92:
a5:8b:20:21:bd:6d:58:50:81:c1:0c:70:56:6b:5a:
22:57:b7:a1:62:14:c3:86:85:bb:45:9f:3c:22:7f:
79:55:b6:8d:84:c6:cd:3f:3d:52:ae:e9:39:e9:00:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3A:A3:3C:86:0A:10:03:DB:B2:F3:36:C9:B7:AA:59:19:BC:9A:A5
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b0:ab:88:f6:5b:87:6e:41:a5:96:35:fd:2c:dc:9c:33:d5:
49:08:37:58:2f:51:57:43:fb:85:7a:51:fe:c8:88:a1:5f:f0:
97:fd:69:da:23:9e:98:c8:45:11:e1:13:1c:a9:8f:e7:76:d5:
d8:4a:a9:59:c5:cc:b8:43:c9:27:a4:ae:8b:ff:ae:8c:ed:9d:
6f:7c:bb:f8:8d:25:ae:1e:7a:ca:d2:a6:8a:bb:3d:b1:f1:8b:
cb:d5:bd:fc:99:51:cf:71:b0:14:52:f8:b5:86:fa:4b:3d:8c:
36:b7:0f:90:12:d5:19:34:33:e6:5b:4a:c8:5c:06:6f:f9:48:
40:21:25:75:7b:2d:bc:49:8f:ff:0e:01:a2:8e:c2:4e:85:2b:
c9:2a:72:99:f1:1e:11:89:56:bd:0e:72:cf:ed:bf:a7:95:46:
ca:be:12:40:af:f5:50:16:9e:d9:3b:43:b3:02:d9:b6:e5:71:
9a:85:eb:32:0f:88:d7:a9:ab:a5:87:41:68:33:63:98:2d:86:
87:aa:20:e3:c0:d3:e5:88:4e:23:ed:0c:86:de:89:39:45:e4:
7b:88:65:d5:f1:07:b8:a2:fb:7d:cd:60:3c:3a:78:65:3c:9f:
24:74:bc:b5:17:1b:a8:5a:26:8f:f6:8e:77:25:04:25:28:94:
4d:6f:1c:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPx45b39T1BaNawioLQpxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NGEwNTc0N2VmODhhMmViYzlmMmZhZWY2MjAxOWRjODdk
MWEyNTMwHhcNMjUwODA5MTcwMTE2WhcNMjUwODEwMTcwMTE2WjAzMTEwLwYDVQQD
EygwZTNhYTMzYzg2MGExMDAzZGJiMmYzMzZjOWI3YWE1OTE5YmM5YWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHFoPVsLUNP1I4M2kcuDf/Ek44rT
yA6hpfb3PjDsxzfAqluq87sY78ghWPdWp81BLPVL5gRnU7VddLY82WTrtrQI5sFE
BTL9KYzfBnHIeJeRxpXsw4qEI730LkS5qNsV4lA2e71OavKVteAP9lNTpWJfI2Ny
13q9ZaJxPeCq9XDN0p5fbswkqZ3DMBL7AkYcXA3IfhBcDe8AAjeOg/+DL8Thyp6a
xa//rRM9PIe0CPtY33bXnkz7REgXTfRADFzFWyIQC+Goi6D2BIu282YH0pKliyAh
vW1YUIHBDHBWa1oiV7ehYhTDhoW7RZ88In95VbaNhMbNPz1Sruk56QCc1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA46ozyGChAD27LzNsm3qlkZvJqlMB8GA1UdIwQY
MBaAFAhKBXR++IouvJ8vrvYgGdyH0aJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VvRmRINzRpaTY4bnktdTlpQVozSWZSb2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zMGE2OTAtY2QzMS00OWJiLWE5YTAt
M2JkM2UzZTRhNDBiLzEvQ0VvRmRINzRpaTY4bnktdTlpQVozSWZSb2xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zMGE2OTAtY2QzMS00OWJiLWE5YTAtM2JkM2UzZTRhNDBi
LzEvQ0VvRmRINzRpaTY4bnktdTlpQVozSWZSb2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebCriPZb
h25BpZY1/SzcnDPVSQg3WC9RV0P7hXpR/siIoV/wl/1p2iOemMhFEeETHKmP53bV
2EqpWcXMuEPJJ6Sui/+ujO2db3y7+I0lrh56ytKmirs9sfGLy9W9/JlRz3GwFFL4
tYb6Sz2MNrcPkBLVGTQz5ltKyFwGb/lIQCEldXstvEmP/w4Boo7CToUrySpymfEe
EYlWvQ5yz+2/p5VGyr4SQK/1UBae2TtDswLZtuVxmoXrMg+I16mrpYdBaDNjmC2G
h6og48DT5YhOI+0Mht6JOUXke4hl1fEHuKL7fc1gPDp4ZTyfJHS8tRcbqFomj/aO
dyUEJSiUTW8cuQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:33:57 2025 by rpki-client