Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
File: CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft (raw, json)
Hash identifier: Rhj6J5kSEzyf1uvYhXa1nv64RyTdrhLPfMuH+cGLKBE=
Subject key identifier: FA:FC:CF:9C:6D:02:D9:78:90:8F:29:68:42:03:FE:9D:02:E1:53:31
Authority key identifier: 08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
Certificate issuer: /CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Certificate serial: 01987B2D9EC222C828AA4D201272080E145D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
Manifest number: 161F
Signing time: Tue 05 Aug 2025 17:00:43 +0000
Manifest this update: Tue 05 Aug 2025 17:00:43 +0000
Manifest next update: Wed 06 Aug 2025 17:00:43 +0000
Files and hashes: 1: CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl (hash: J0e+y0aVwnLWGvAA8luTmNv3Qx/d/l+JSIbNKF0JyuU=)
2: vAZb7s6D6Fuq3D4AHtKSkcv7tbk.roa (hash: dNxWOWstiC1jdikcIMTYHaBFr6iCMFTRh+rrcRXQbJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:9e:c2:22:c8:28:aa:4d:20:12:72:08:0e:14:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Validity
Not Before: Aug 5 17:00:43 2025 GMT
Not After : Aug 6 17:00:43 2025 GMT
Subject: CN=fafccf9c6d02d978908f29684203fe9d02e15331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:90:b9:3e:5f:32:16:d7:79:1b:3b:23:fb:
53:69:6a:2d:74:a7:71:95:af:3b:f7:2b:62:92:9e:
4c:72:95:c9:f6:db:68:0b:6a:42:1d:38:72:20:56:
88:fd:1f:e7:f1:eb:73:2f:dd:4a:12:47:f2:53:20:
f2:70:35:6d:64:6a:fb:c9:82:aa:42:9e:9e:50:14:
6f:a4:bc:ab:24:c1:93:8d:c5:8b:55:d7:4b:8a:4a:
aa:d4:e0:c4:cf:c5:e8:68:cb:72:e6:13:8e:d1:a0:
9a:05:fa:4a:29:4b:fb:20:3a:eb:59:26:97:ae:c4:
dc:6d:4c:3e:39:95:72:1b:71:83:aa:95:d0:2d:cf:
75:49:8b:fc:13:aa:cd:ca:de:a1:5c:56:7c:34:25:
1e:94:b0:59:28:c9:1c:9e:e0:49:ae:90:fd:64:b3:
1b:d2:a9:f7:bd:1c:4b:49:3c:b0:8a:3a:a6:e7:72:
01:b3:27:25:ed:46:ce:b0:8b:31:47:01:df:b1:73:
eb:1d:48:26:84:08:e6:f9:22:33:eb:2b:a2:f6:f0:
76:99:7b:07:2c:0c:34:14:28:d5:eb:81:74:5f:58:
06:a6:3e:4d:0e:78:51:00:a7:a3:2b:87:b4:5b:e4:
61:d5:2e:dd:aa:42:a0:86:54:56:11:5d:69:e1:1a:
78:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FC:CF:9C:6D:02:D9:78:90:8F:29:68:42:03:FE:9D:02:E1:53:31
X509v3 Authority Key Identifier:
keyid:08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:e7:23:39:8d:c0:26:ea:dd:d7:09:5d:09:34:af:4d:dc:86:
be:a3:1d:87:56:18:51:ef:b3:7a:af:13:0c:a4:4e:2d:23:cd:
0e:65:ea:52:6f:b6:5f:1b:f8:d7:b7:68:ac:f3:70:c5:5e:94:
f5:28:ed:1b:b1:5f:b0:38:6d:4d:71:8b:7c:c3:c7:2c:f6:86:
e2:49:66:8b:de:50:95:20:7e:5b:a0:c5:ac:b2:9c:94:e8:f6:
1b:44:6d:54:9e:a3:ba:93:ed:1f:e0:90:db:4c:c9:b8:e4:cf:
df:ba:58:86:99:f5:3f:ff:a6:2a:87:64:f1:6e:ff:28:f2:d0:
ec:e9:2d:c4:1c:66:b7:27:aa:55:24:db:63:14:a6:b9:49:8f:
7c:30:3b:8c:e8:01:08:11:48:23:c0:bf:50:d4:3a:65:59:30:
b5:bf:2d:b1:e6:00:9c:e3:9b:e9:6f:3a:27:e9:0f:f6:03:7c:
ec:22:bb:9e:63:82:b6:0b:2b:2e:1f:3e:04:f6:96:a6:c6:e9:
e5:c3:f7:3d:cf:a6:10:96:b4:da:ef:f1:a9:09:06:10:c6:ed:
63:d5:2a:3c:a9:b1:4f:4f:7f:b3:aa:b6:5f:4b:4f:ec:89:0f:
8e:eb:de:02:54:01:ff:08:34:5e:35:1c:74:67:cf:f8:5d:c5:
01:34:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:59:57 2025 by rpki-client