Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: zk2QWQazf/I8z+BklTW05HC4eqlmlX7Pel/XcEf0HyE=
Subject key identifier: 81:E5:F7:62:3D:8B:E8:F0:9A:23:93:62:15:93:EC:D9:E2:9A:63:17
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 019873E2012DE0F1B3CC60331D7CE541EA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 030A
Signing time: Mon 04 Aug 2025 07:00:47 +0000
Manifest this update: Mon 04 Aug 2025 07:00:47 +0000
Manifest next update: Tue 05 Aug 2025 07:00:47 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: pvSm9oun1agJauA2v8UMXV4DUZzZiZe39rAfOHAsAmU=)
2: oDzw6scHjTvVUxNbd-QUot4DsM0.roa (hash: wtt4piWURYUGaUVkeFPj0sScj6sbR4E+qyw2r+vT/ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:01:2d:e0:f1:b3:cc:60:33:1d:7c:e5:41:ea:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Aug 4 07:00:47 2025 GMT
Not After : Aug 5 07:00:47 2025 GMT
Subject: CN=81e5f7623d8be8f09a2393621593ecd9e29a6317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:83:61:13:75:c6:f2:d0:98:c2:7b:aa:87:
39:7b:b3:0f:a6:64:07:13:c0:50:01:9b:04:c4:6a:
03:91:95:f5:0c:c5:8a:be:74:9f:83:58:67:09:4e:
6a:3f:d5:8c:30:7d:68:d6:8f:04:58:6b:92:55:18:
f4:bf:21:d5:7a:26:20:bd:f5:31:34:0a:a4:2d:05:
a4:64:84:0d:47:49:17:24:d3:8e:60:d4:78:d5:62:
69:e9:c1:5d:8c:3d:d6:bd:ab:e6:b4:b9:7f:4f:cd:
60:c7:b9:e1:12:31:f1:6a:bc:07:c0:21:b2:53:5f:
24:a4:5f:56:53:f2:3f:df:79:3f:bf:b4:68:39:ad:
47:f6:eb:27:85:93:26:4a:c8:0f:ac:f0:df:1b:60:
1c:c5:64:31:34:dc:de:c0:3e:19:ff:ae:e9:b3:46:
3d:72:96:d7:cc:f1:df:4d:f2:3d:14:d2:82:b7:56:
44:73:bb:b3:9b:0a:8b:01:8e:e1:ff:36:57:cb:31:
0b:06:37:3d:cb:d5:f0:b7:83:28:a3:b9:04:cb:e8:
88:f7:33:8b:30:21:67:51:07:bd:1a:c0:93:cc:83:
38:fd:22:5a:83:c8:70:a7:e6:60:bf:58:02:79:cf:
d3:99:64:3f:94:2c:0b:25:c1:5b:11:89:73:a8:62:
5e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E5:F7:62:3D:8B:E8:F0:9A:23:93:62:15:93:EC:D9:E2:9A:63:17
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:59:b7:f3:2b:1a:38:14:5a:c6:e5:16:c8:52:af:52:3a:8e:
5f:61:ef:c4:f2:71:44:f5:cd:93:f0:7c:80:8e:bc:50:57:60:
a5:6f:19:51:89:7d:60:99:32:b2:5a:7e:10:eb:56:57:61:0f:
03:26:ed:2e:bc:0d:b3:5b:34:bd:c8:bf:ac:d6:a7:3d:d5:d6:
0e:3b:e5:0b:9f:d0:6c:e5:41:03:33:c0:cd:b7:c6:ac:3e:eb:
94:f0:38:d6:9d:f9:17:fc:1a:37:09:70:74:60:4b:08:ed:18:
76:48:32:fe:19:41:9e:6c:e0:bd:9f:7c:a9:75:a3:f3:d6:9f:
bf:bc:93:54:72:94:4a:f2:b1:fb:86:37:d3:e4:28:78:2e:69:
b2:11:db:b0:b1:9c:10:13:5b:d8:6e:ae:c9:79:57:4d:59:49:
a2:46:c8:bd:51:db:c9:e1:24:f3:0c:91:26:04:43:2e:8e:e4:
77:ee:e0:6b:7f:01:6f:7b:1f:af:86:79:13:23:80:e6:82:67:
be:ef:65:8a:d0:be:ac:a8:c6:50:88:13:85:5d:f4:8c:44:9b:
ad:79:0e:0d:3d:ae:8e:4d:a5:d4:0d:1c:fb:10:73:86:47:96:
c8:d9:f8:71:a7:50:c4:f3:a2:29:ab:51:6e:ac:42:e0:37:cb:
a3:d2:06:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:53:07 2025 by rpki-client