Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: 0KYj0cmINxDfphznVzrdo5MMIwIoIt18gM+6CzStihg=
Subject key identifier: 1C:3C:DB:F6:8F:03:B2:29:85:E4:78:63:01:35:F8:CC:5A:20:89:03
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 019A4EF41EB2603484C169CA696FF29452FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 0400
Signing time: Tue 04 Nov 2025 13:00:12 +0000
Manifest this update: Tue 04 Nov 2025 13:00:12 +0000
Manifest next update: Wed 05 Nov 2025 13:00:12 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: b1gI5AHUrvRCkEDmYDxmHnxIL87hCm5om1yXyTa8K9Q=)
2: oDzw6scHjTvVUxNbd-QUot4DsM0.roa (hash: wtt4piWURYUGaUVkeFPj0sScj6sbR4E+qyw2r+vT/ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1e:b2:60:34:84:c1:69:ca:69:6f:f2:94:52:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Nov 4 13:00:12 2025 GMT
Not After : Nov 5 13:00:12 2025 GMT
Subject: CN=1c3cdbf68f03b22985e478630135f8cc5a208903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:34:f3:6b:fa:ea:ed:54:72:ba:2f:99:a5:54:
06:11:3e:ad:7b:0c:43:bb:b1:4e:87:79:75:b2:21:
b5:10:2b:34:4f:bf:07:87:4f:c3:03:0f:2d:38:cd:
af:19:8a:c1:84:5d:27:10:07:83:b2:38:b0:e2:2b:
a3:ef:91:1b:bd:ce:3d:43:16:18:3e:00:bc:a8:23:
82:43:16:86:84:4a:e4:59:e2:c7:8a:47:0f:90:31:
a9:33:7a:13:a1:d0:a2:25:ca:d0:50:3c:f7:4c:f5:
98:8f:b0:c9:b4:cf:04:54:c7:f6:74:c1:27:3c:f7:
60:c4:94:6f:03:fa:6e:45:58:38:98:32:98:74:e3:
b0:b0:81:53:6a:0b:a4:66:9d:a8:c7:76:1c:67:b4:
71:32:fb:38:2b:3b:3d:43:be:60:85:a9:39:7f:c2:
e7:46:f9:37:50:8b:f6:e6:69:01:f0:46:ba:94:da:
ad:54:e0:87:23:cf:39:e1:de:91:fd:1b:34:d9:6e:
c1:2f:20:3e:6d:2f:bd:8b:4a:0d:56:ff:33:01:3d:
95:28:40:cf:a7:c7:2f:d3:34:19:05:fd:9e:83:b1:
af:18:b8:db:0d:90:ff:7d:62:e1:99:63:5b:5b:c7:
8d:84:df:96:a2:77:83:f4:dd:5b:76:9f:1c:15:ca:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3C:DB:F6:8F:03:B2:29:85:E4:78:63:01:35:F8:CC:5A:20:89:03
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1c:e5:ba:2d:c9:ab:31:9a:55:ae:36:bb:43:9b:78:5e:ff:
4f:3b:00:da:97:e2:2a:e2:f9:b7:24:ea:e1:2a:ee:24:2c:77:
f0:be:9d:16:04:d1:33:b0:05:d0:e3:31:ce:2a:81:85:6c:cb:
85:17:0a:5a:a3:5f:f9:97:fc:cd:71:23:7c:9e:cd:5a:4c:e9:
4e:f6:80:12:04:44:b8:9a:a2:f8:4b:5b:f4:e4:39:bd:31:f1:
cf:9b:bd:b8:65:b8:39:cb:38:62:0d:a6:23:bc:a4:79:57:5a:
3b:aa:fc:04:95:02:7e:89:69:84:57:f5:66:14:ae:7d:d8:02:
bf:c0:39:37:a1:49:56:34:74:4b:ea:ce:14:8c:9b:03:19:29:
b7:a5:64:63:ff:57:36:e4:ef:c6:09:0f:12:47:cb:ad:2b:75:
29:43:10:24:58:c3:d4:93:da:de:3a:e5:bd:20:73:da:a7:f6:
2a:f3:d2:f5:68:f8:07:97:88:5f:0d:ce:94:f3:c8:bd:81:b7:
8f:a6:5a:3e:d2:b2:e6:3c:51:e7:92:3e:d6:23:5a:8f:77:95:
bb:4d:84:eb:49:29:56:e5:eb:0c:b3:68:30:ca:3c:6d:7c:fd:
ba:cf:d7:d1:da:38:26:31:73:76:45:5b:d2:f9:7c:43:cd:b0:
02:7e:dc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:19 2025 by rpki-client