Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
File: CEIhaO2oQjBU2C6wGMOD4tvor98.mft (raw, json)
Hash identifier: pMfRu7G6etuSZAx2g3qCQCRyI3kRutZYqpXS8MmFhvc=
Subject key identifier: D1:E8:A1:5E:DB:9A:65:E4:3B:46:0D:A2:70:46:87:8F:35:89:2F:93
Authority key identifier: 08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
Certificate issuer: /CN=08422168eda8423054d82eb018c383e2dbe8afdf
Certificate serial: 019897B73DB9E45EA2C4E1753B4664F53525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
Manifest number: 1353
Signing time: Mon 11 Aug 2025 06:00:25 +0000
Manifest this update: Mon 11 Aug 2025 06:00:25 +0000
Manifest next update: Tue 12 Aug 2025 06:00:25 +0000
Files and hashes: 1: CEIhaO2oQjBU2C6wGMOD4tvor98.crl (hash: YziMMv6gIKMonPeqSekwtHVqKh76KpsG57OpVSuPQ5k=)
2: ESQpVAiSLlfE8UMM75aY_vsPDNc.roa (hash: ubyXNF+odFgCxSHtSbasAdaDvs7x7Wh5p2HTa/QrZgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:3d:b9:e4:5e:a2:c4:e1:75:3b:46:64:f5:35:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08422168eda8423054d82eb018c383e2dbe8afdf
Validity
Not Before: Aug 11 06:00:25 2025 GMT
Not After : Aug 12 06:00:25 2025 GMT
Subject: CN=d1e8a15edb9a65e43b460da27046878f35892f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:f4:3c:4f:6d:9a:c9:17:e5:ca:bf:fd:36:
f2:d3:46:84:4a:01:cf:b2:01:ec:74:f8:97:43:dd:
f1:0a:27:fb:30:fa:1c:d0:c7:10:97:54:ea:7a:9f:
e3:df:56:b3:f2:d5:d1:86:ec:94:fe:fd:a1:1a:84:
88:b3:e7:a1:10:9b:b7:84:ee:dd:3c:63:9b:80:c3:
f6:68:04:97:9d:1b:8b:93:8d:ac:3c:77:f0:9e:b9:
68:23:6e:c4:35:f8:8c:ad:27:b9:ee:f8:cd:d4:10:
f9:40:23:e0:c3:e7:72:71:3f:1c:d3:03:89:8d:90:
a3:22:9d:69:73:3f:3d:9e:38:7c:1f:58:8e:e6:20:
91:10:15:6c:7e:30:ae:98:18:ae:d2:95:a1:78:10:
ca:b4:5c:4c:fa:70:06:1b:5f:46:ad:de:11:ea:4d:
fa:66:2a:7c:d1:ee:bc:58:91:68:30:5e:29:21:27:
56:53:67:d8:16:07:b0:fd:e6:ea:ca:b2:e5:50:14:
83:3c:6f:bd:97:83:a8:9b:32:b3:e3:f5:6c:07:68:
85:48:95:18:c4:38:2a:3e:3c:2f:e5:0e:cb:99:a5:
c7:10:d8:54:7c:c2:57:46:19:1e:7d:82:da:c1:a9:
63:aa:d9:e6:89:c7:b2:14:12:3c:d1:3b:ce:0d:cf:
a3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E8:A1:5E:DB:9A:65:E4:3B:46:0D:A2:70:46:87:8F:35:89:2F:93
X509v3 Authority Key Identifier:
keyid:08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:05:04:d8:7f:7d:7e:05:da:6e:5f:1c:e8:83:f2:73:db:dc:
cf:f8:8b:21:b5:77:b8:80:01:3e:6a:dc:33:3e:66:84:7f:64:
0f:b9:77:78:de:e5:1c:d0:e9:be:7f:95:50:17:d4:e8:bd:09:
0a:e8:18:05:48:92:8d:26:60:33:b4:12:8b:d6:2b:66:d0:42:
bf:01:6b:22:63:90:1a:17:74:2c:ef:97:ea:9f:52:bc:45:02:
9a:5c:85:c8:20:7e:49:28:a7:be:93:b5:bb:2e:a3:4e:01:24:
e5:be:bc:63:e6:c7:72:17:d3:0c:ea:ad:26:a9:53:29:4e:0f:
81:37:0d:ad:50:88:47:7a:99:9a:fb:67:5a:4a:d8:da:6a:f5:
ea:cb:8d:87:2b:c9:a7:a9:f0:ec:07:86:9f:1c:ab:d1:b8:63:
7e:15:3e:7c:c4:7d:d3:70:e9:6f:8e:f8:b8:72:34:22:07:2c:
85:d0:74:b8:bb:b1:fe:54:a2:67:cc:f8:86:76:58:ea:fa:b9:
4d:d5:01:97:9e:f6:b9:29:80:2a:ae:05:c9:c8:d1:3e:03:ef:
b4:66:de:86:3a:fc:a7:76:fc:81:f5:be:e9:36:e6:1d:e6:87:
48:26:ee:00:88:fe:fa:33:bf:22:3d:e6:18:53:72:e4:ad:5f:
5d:f4:3b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:40 2025 by rpki-client