Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
File: CeVm4OteXiEQflX8lg-x7iGHRHQ.mft (raw, json)
Hash identifier: lTS48XKgn1UqoAz8Kbo+T83FlGh1/5mmTOHQVH1x7ck=
Subject key identifier: 8D:0C:D1:29:81:95:B6:74:E4:13:51:F6:BB:EE:38:7E:82:3A:8D:B1
Authority key identifier: 09:E5:66:E0:EB:5E:5E:21:10:7E:55:FC:96:0F:B1:EE:21:87:44:74
Certificate issuer: /CN=09e566e0eb5e5e21107e55fc960fb1ee21874474
Certificate serial: 01987D8A92A86F49DFCCED5A3FD0E3812314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
Manifest number: 1463
Signing time: Wed 06 Aug 2025 04:01:30 +0000
Manifest this update: Wed 06 Aug 2025 04:01:30 +0000
Manifest next update: Thu 07 Aug 2025 04:01:30 +0000
Files and hashes: 1: CeVm4OteXiEQflX8lg-x7iGHRHQ.crl (hash: vd9Zmse05RCOlusIMghJIhF9e5LEdjUdqybA4lKCzLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:92:a8:6f:49:df:cc:ed:5a:3f:d0:e3:81:23:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e566e0eb5e5e21107e55fc960fb1ee21874474
Validity
Not Before: Aug 6 04:01:30 2025 GMT
Not After : Aug 7 04:01:30 2025 GMT
Subject: CN=8d0cd1298195b674e41351f6bbee387e823a8db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fe:df:78:bc:c6:99:78:c2:6a:5d:1f:2d:77:
cd:38:b6:b8:72:5e:c7:8d:30:89:f5:bc:8b:52:00:
34:3e:14:d4:1e:3a:7d:cc:55:6e:ad:f4:98:e5:a6:
8c:c1:92:fb:a7:84:90:f8:a0:a3:fa:e1:56:a3:df:
b1:b5:73:4f:d4:d6:e8:e0:e1:17:9e:9c:c2:c4:0f:
26:4c:93:c6:33:b1:71:ad:de:50:ab:2c:e2:63:63:
ba:89:81:74:f0:68:d1:d8:e5:2d:ae:d3:38:a8:24:
7e:c5:68:d0:bf:1f:31:92:de:22:3a:33:f5:ba:cd:
63:a3:49:5a:ea:8c:b6:2a:7b:b7:9c:f2:34:2e:4a:
48:c3:a1:ec:54:81:a0:63:2d:e2:bc:57:bf:87:cf:
b2:ef:86:0a:d5:e1:4a:e7:3b:7e:e2:17:7b:19:e2:
de:d1:eb:ec:74:1d:f8:e1:50:f8:3e:a7:ad:ee:e4:
f5:0f:c1:9d:26:0d:30:50:53:7d:8f:cc:60:fc:b1:
3a:b0:48:79:ec:7e:fc:eb:7e:0d:5b:94:aa:52:bb:
72:43:d9:31:51:7c:2f:6e:51:66:a8:b1:ad:03:c9:
79:84:69:66:7a:9c:e6:b8:6a:d0:aa:fc:93:0d:06:
09:f6:27:a2:e4:20:84:95:6c:d6:e3:81:c6:b5:f9:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0C:D1:29:81:95:B6:74:E4:13:51:F6:BB:EE:38:7E:82:3A:8D:B1
X509v3 Authority Key Identifier:
keyid:09:E5:66:E0:EB:5E:5E:21:10:7E:55:FC:96:0F:B1:EE:21:87:44:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b8:20:3d:65:8d:c6:ff:14:10:9f:11:c0:10:60:21:67:47:
5a:5b:d3:37:85:f8:dd:98:32:99:24:76:87:21:4c:18:3c:eb:
1f:6e:c8:53:72:43:bf:08:87:97:79:95:a6:9a:87:38:8b:c9:
b4:f6:d4:83:dc:fc:12:11:6a:af:72:e3:a8:7c:21:64:96:5e:
8a:0e:1f:59:fd:76:af:7a:3f:e9:51:bf:ed:96:a5:8e:80:4a:
ad:93:b8:45:3f:9c:2c:59:00:79:7f:75:34:8e:36:c0:48:74:
1c:44:4a:fa:ca:17:4a:ae:bb:4f:64:48:c8:e3:29:d4:65:34:
3b:b0:74:63:6e:dd:88:71:c4:39:64:58:5e:c1:64:c0:19:88:
f5:57:72:7c:79:18:e7:70:e3:e6:74:c8:1a:a6:8b:ea:d9:4e:
f1:ee:08:61:38:ad:f5:92:61:86:06:5a:65:6a:42:29:5e:e5:
df:6a:5e:60:8e:ad:12:bc:6c:2e:10:41:61:da:99:58:31:46:
23:49:22:d7:1f:a0:04:ac:1c:68:ce:00:a3:ea:02:8f:ea:50:
92:d4:d2:bd:5b:d4:36:2a:29:42:ad:c8:10:4a:e1:af:c0:ee:
1c:36:d3:0d:57:3b:18:5b:6c:77:92:3f:84:1f:5b:8f:b9:5c:
88:ad:35:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:39:28 2025 by rpki-client