Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: KYFMzW1eX8QhKU6Hzi0qVybdIfSxxGASfQu0m4LMEaw=
Subject key identifier: 93:62:14:E0:8C:D7:8F:E0:9D:15:B0:86:AE:11:F1:B8:C5:CB:17:97
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 019776E5AB8EDA11E159761ACC55CD555DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 0287
Signing time: Mon 16 Jun 2025 04:00:52 +0000
Manifest this update: Mon 16 Jun 2025 04:00:52 +0000
Manifest next update: Tue 17 Jun 2025 04:00:52 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: ClV47sgtADL0MMD39YbC5oi6A5So0qCCr8aiXbmner8=)
2: oDzw6scHjTvVUxNbd-QUot4DsM0.roa (hash: wtt4piWURYUGaUVkeFPj0sScj6sbR4E+qyw2r+vT/ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:ab:8e:da:11:e1:59:76:1a:cc:55:cd:55:5d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Jun 16 04:00:52 2025 GMT
Not After : Jun 17 04:00:52 2025 GMT
Subject: CN=936214e08cd78fe09d15b086ae11f1b8c5cb1797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:9f:40:cf:d6:34:d6:a8:0c:8e:88:b7:dd:
3f:b3:01:cf:11:01:9d:69:12:f9:37:bc:bb:81:3c:
cc:7a:1f:de:9e:70:d5:96:71:23:bc:4f:a7:a5:1c:
c8:71:75:d4:8d:2c:97:67:fa:6a:53:f4:47:0d:ca:
3d:d5:05:a0:38:73:68:f3:71:f3:96:c2:8c:f9:9d:
c0:60:ef:dc:3b:e3:ab:64:b7:85:da:e6:ac:da:3f:
80:cf:54:1b:f7:29:b1:c2:69:a0:2d:c0:34:c6:e8:
62:3c:18:84:3f:8c:da:86:d6:83:da:3a:68:82:8f:
0c:39:96:c3:55:48:7e:0a:9c:85:dc:bd:86:1e:db:
79:5d:88:d6:65:e4:e7:1c:75:c3:20:eb:99:35:6a:
63:0e:2f:94:5c:94:a1:8c:2b:47:c0:7b:13:b2:88:
00:b4:03:ec:ef:3e:ca:bf:59:30:3d:22:f0:05:b3:
c3:d3:16:d3:03:19:96:2a:59:a7:8d:ae:df:ec:52:
d4:16:9d:98:9f:b8:96:57:61:10:77:e0:79:ad:2e:
74:ce:22:20:2c:1a:10:a3:41:50:c9:46:12:16:ae:
11:82:e7:08:7f:1f:c9:9e:2b:58:78:d7:9e:ed:66:
6b:77:59:37:aa:c7:74:a9:cd:86:0a:ed:34:51:49:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:62:14:E0:8C:D7:8F:E0:9D:15:B0:86:AE:11:F1:B8:C5:CB:17:97
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:60:e2:24:6a:66:0f:0a:84:af:37:4b:62:03:95:32:7e:ef:
62:72:2a:f8:e3:05:2f:3f:49:81:5c:bb:73:6b:03:0b:0f:c6:
5a:10:c2:6a:ba:15:e5:26:22:3e:e5:17:ac:ab:6b:e5:76:f8:
df:49:9d:b9:38:a7:67:99:6a:18:46:df:b8:2c:6c:8c:6d:94:
86:74:12:5b:ca:d0:72:33:db:58:7f:a8:cd:5b:10:70:c9:a3:
e3:af:2b:b9:f8:6e:d9:4e:0a:d7:a0:bd:b2:eb:4c:cb:6b:ea:
cb:ae:b2:2d:39:f1:05:aa:47:d9:16:6a:4d:83:15:60:63:1a:
ac:6e:34:2f:eb:1f:b8:59:29:b0:96:e4:bf:49:5c:62:95:1d:
bd:0c:94:37:d7:38:2c:9c:10:e4:69:57:4d:ea:d1:eb:1f:ed:
92:ea:8e:7d:38:9f:71:fe:34:ee:99:e9:e8:7c:49:f1:f3:ea:
f1:ed:b9:5c:c4:1f:10:e6:c1:cd:2e:1a:a8:00:a7:67:6a:aa:
c4:85:2e:b7:46:6b:5c:f2:e8:53:d3:79:cc:b5:30:d6:ac:d9:
18:43:47:56:48:b1:56:42:11:e4:5c:03:17:9e:e8:2c:e3:3e:
7d:84:90:6d:c7:4a:3d:8a:83:13:ee:2a:12:14:a7:7c:ee:45:
2b:97:1f:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd25auO2hHhWXYazFXNVV2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWYwYjhlNWJiYWIyOWExMzMwZmEwZTc0OTNmMmExNzk4
NDdiYjIwHhcNMjUwNjE2MDQwMDUyWhcNMjUwNjE3MDQwMDUyWjAzMTEwLwYDVQQD
Eyg5MzYyMTRlMDhjZDc4ZmUwOWQxNWIwODZhZTExZjFiOGM1Y2IxNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JGfQM/WNNaoDI6It90/swHPEQGd
aRL5N7y7gTzMeh/ennDVlnEjvE+npRzIcXXUjSyXZ/pqU/RHDco91QWgOHNo83Hz
lsKM+Z3AYO/cO+OrZLeF2uas2j+Az1Qb9ymxwmmgLcA0xuhiPBiEP4zahtaD2jpo
go8MOZbDVUh+CpyF3L2GHtt5XYjWZeTnHHXDIOuZNWpjDi+UXJShjCtHwHsTsogA
tAPs7z7Kv1kwPSLwBbPD0xbTAxmWKlmnja7f7FLUFp2Yn7iWV2EQd+B5rS50ziIg
LBoQo0FQyUYSFq4RgucIfx/JnitYeNee7WZrd1k3qsd0qc2GCu00UUmvMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNiFOCM14/gnRWwhq4R8bjFyxeXMB8GA1UdIwQY
MBaAFAnvC45burKaEzD6DnST8qF5hHuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80MDU0M2UtMTk1YS00MzMyLWE4ZWQt
MzczNzRlMzk2YzdkLzEvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80MDU0M2UtMTk1YS00MzMyLWE4ZWQtMzczNzRlMzk2Yzdk
LzEvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2DiJGpm
DwqErzdLYgOVMn7vYnIq+OMFLz9JgVy7c2sDCw/GWhDCaroV5SYiPuUXrKtr5Xb4
30mduTinZ5lqGEbfuCxsjG2UhnQSW8rQcjPbWH+ozVsQcMmj468rufhu2U4K16C9
sutMy2vqy66yLTnxBapH2RZqTYMVYGMarG40L+sfuFkpsJbkv0lcYpUdvQyUN9c4
LJwQ5GlXTerR6x/tkuqOfTifcf407pnp6HxJ8fPq8e25XMQfEObBzS4aqACnZ2qq
xIUut0ZrXPLoU9N5zLUw1qzZGENHVkixVkIR5FwDF57oLOM+fYSQbcdKPYqDE+4q
EhSnfO5FK5cfoA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:20:44 2025 by rpki-client