Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: ZCRfD20CxPRAIVFrhnQ1srak8jV8hJ7FAIjM9XZA2Ss=
Subject key identifier: 78:2B:28:20:D1:EF:BF:41:4E:35:0C:CD:D9:D3:3C:08:5C:C9:AE:A8
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 019A4E188501D7B35328D1C1DF5A50984041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 09:00:21 +0000
Manifest this update: Tue 04 Nov 2025 09:00:21 +0000
Manifest next update: Wed 05 Nov 2025 09:00:21 +0000
Files and hashes: 1: 4to_68QAA5EZP6QVD93278mKQ9M.roa (hash: Din2sy8w9QJ69ucmdkg50bJdWrDL1O3pEtYdPufl40o=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: bdnNX4mlg5GvmopmW7MUmXJuYN+l4BK9vazNvGjHfdY=)
3: kA5bGRl5EHENPG-lFJ-KaUPwtEE.roa (hash: SCW2no/wqMGhhPF1PG24OTD/SWeQikiX3GB3gK0CJDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:85:01:d7:b3:53:28:d1:c1:df:5a:50:98:40:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Nov 4 09:00:21 2025 GMT
Not After : Nov 5 09:00:21 2025 GMT
Subject: CN=782b2820d1efbf414e350ccdd9d33c085cc9aea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:a0:34:cb:b7:86:40:35:05:b3:c1:43:5a:
fb:75:a1:f2:df:91:10:e5:54:91:f3:32:0c:25:a6:
9c:14:19:8e:f3:3e:30:46:01:62:61:d5:23:89:63:
fd:af:95:bc:20:5e:56:f9:27:5a:06:a1:db:0c:13:
bf:06:00:09:ba:16:1f:b7:e4:a5:48:b0:5d:94:b8:
0d:c7:c6:32:db:a4:5f:eb:12:6c:b5:a6:32:e1:01:
48:47:f9:a7:8e:e5:fc:39:fc:a3:93:1e:b6:25:cb:
bd:80:f7:d9:3d:f7:65:ce:2b:f7:c1:1e:11:3c:37:
1b:4b:50:f2:17:b5:a9:65:b8:c4:6e:60:91:7c:1a:
0b:68:1a:4f:07:a6:22:8d:da:1a:bd:73:e9:aa:36:
50:9a:87:7b:51:ae:be:fc:77:9e:37:06:24:a8:7a:
05:0e:c9:31:d6:e6:57:a9:f7:9d:54:5b:f7:ae:ce:
f1:77:b6:d2:36:5c:a4:50:24:39:85:56:bb:eb:89:
b8:81:2c:04:34:bd:3c:21:fd:e8:6b:6b:b0:84:17:
13:0d:a9:61:5c:68:c6:e4:89:d3:fa:40:69:13:6b:
bb:2a:ed:56:e6:fc:65:5e:83:fe:ba:fa:0b:c7:7f:
dd:c9:d9:06:41:f3:26:87:42:08:68:0e:f5:14:c8:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2B:28:20:D1:EF:BF:41:4E:35:0C:CD:D9:D3:3C:08:5C:C9:AE:A8
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:2b:0f:09:d6:5d:26:81:a3:0d:cc:c3:c3:da:b9:df:c3:6f:
a9:30:52:16:de:18:4c:4f:1a:e4:28:57:d2:3b:2c:a7:ec:db:
a5:a5:f5:2f:41:83:0a:4e:82:bd:6c:b1:6a:90:91:64:85:68:
62:60:d3:6c:93:85:60:26:4f:9f:a6:25:cd:b2:c6:62:e6:02:
91:47:34:f1:c6:df:12:3f:1e:f0:76:55:34:79:b1:31:15:61:
f0:e4:7a:e6:f9:82:2b:12:af:4a:91:bf:dc:e5:d1:93:f7:9e:
d1:6f:d9:01:0a:a5:a2:0d:c9:fe:52:d4:06:a4:56:16:a3:a3:
08:10:c1:12:c5:ef:52:de:4a:58:d4:9e:47:6d:a7:80:3b:81:
7a:c2:cc:74:b5:52:30:e1:8a:4f:50:46:a6:50:3d:a2:43:a7:
7a:bf:19:e3:c2:a5:0b:54:1c:16:e8:86:e5:56:79:dd:a6:a6:
28:a6:e3:4f:04:46:72:ae:94:a9:c8:1d:50:47:ff:6f:eb:81:
0c:54:07:70:95:05:81:dd:e1:83:8b:4f:ff:3e:02:e9:5f:43:
9c:ad:c3:14:5c:47:24:20:82:d7:d1:ad:0c:3b:56:04:62:d1:
26:ae:11:f5:32:23:75:43:b2:55:9a:38:01:cb:27:b7:76:2c:
f3:c0:79:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:19 2025 by rpki-client