Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
File: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft (raw, json)
Hash identifier: ywsToOG86vv8Ls1G7tfSMRcOU32V73CDCKm70ZOU5TU=
Subject key identifier: 9A:04:38:7B:E8:75:A8:02:19:D4:39:2E:C8:A4:E6:9C:DD:BC:49:B0
Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
Certificate issuer: /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Certificate serial: 019A54BF95ABC33B252887ED270A0F131CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
Manifest number: 1386
Signing time: Wed 05 Nov 2025 16:00:33 +0000
Manifest this update: Wed 05 Nov 2025 16:00:33 +0000
Manifest next update: Thu 06 Nov 2025 16:00:33 +0000
Files and hashes: 1: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl (hash: I0hL7S1C6vh5hDC2zo5Mv5Xgj8IxYondmuzi24qz61s=)
2: jusxHEEIsrLZpxHa35fyPkAqK7s.roa (hash: ZFDdzLmEvnMxmWT9XlxYhopgvJv0aQjuJRSBRhLyOC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:95:ab:c3:3b:25:28:87:ed:27:0a:0f:13:1c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Validity
Not Before: Nov 5 16:00:33 2025 GMT
Not After : Nov 6 16:00:33 2025 GMT
Subject: CN=9a04387be875a80219d4392ec8a4e69cddbc49b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:24:ef:10:73:6d:da:77:11:24:63:0d:ad:3d:
e0:01:a0:27:68:48:0d:0e:66:f7:59:10:4a:08:fc:
33:42:bc:6d:42:52:07:f7:b3:7f:0c:8e:ad:76:d4:
c9:13:d6:4c:ef:d0:ab:33:07:a1:b4:12:b3:53:21:
76:ad:97:06:dc:f6:21:45:f6:a9:e8:d0:50:c1:85:
4d:7a:b9:ee:80:c7:b5:01:d2:b7:4c:65:df:11:4e:
ca:e4:d9:45:4a:f4:57:d1:33:ae:ed:5e:64:36:9a:
41:7d:a0:eb:ef:1d:c5:29:09:ee:df:06:e0:16:2a:
7b:21:eb:3d:f6:d6:c7:49:94:1c:0f:f5:71:05:71:
cf:fd:29:ce:61:b6:08:0f:dd:fc:28:b7:4c:2c:8a:
a3:a1:65:bd:3a:2b:2b:cc:60:22:83:a7:c3:b6:cc:
29:d5:f0:92:06:58:4e:41:75:25:22:88:80:f1:be:
58:79:31:aa:cf:26:70:bd:b0:d9:ba:f3:ca:b4:75:
b6:39:93:5c:90:fa:56:65:4f:9f:1b:96:11:59:e3:
e0:a7:a5:57:ef:5f:e7:25:64:4b:89:13:3c:cc:ef:
72:8e:c5:58:ad:a6:2d:c8:38:a8:8e:49:ca:b2:d2:
13:30:03:47:79:7f:89:61:24:1e:3c:b3:19:69:25:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:04:38:7B:E8:75:A8:02:19:D4:39:2E:C8:A4:E6:9C:DD:BC:49:B0
X509v3 Authority Key Identifier:
keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fa:c0:cc:42:9d:49:86:bb:ac:66:d8:9c:24:68:4a:7f:8e:
98:c9:e5:31:80:c5:3b:cb:12:14:04:4a:d4:0c:eb:af:32:91:
9b:45:e4:76:60:ee:00:f3:8b:cb:0d:a6:dc:6c:64:18:3f:d2:
22:88:e8:98:73:ce:9c:52:9d:ec:1d:29:fb:c6:d5:d2:86:25:
18:f0:03:d0:dd:45:16:2d:27:e0:22:e1:e5:10:0f:a9:c2:88:
d9:72:94:62:94:a5:e3:ea:e7:c2:c2:92:3c:db:f9:76:ea:a0:
68:1f:36:fc:2d:ac:12:53:f6:77:5f:1a:dd:95:1c:a7:46:32:
b1:78:d8:bc:cc:98:79:14:c6:e9:6c:66:8f:0c:aa:85:ea:7c:
84:d0:62:8b:7d:69:fd:f3:44:8a:8d:60:c1:9a:fa:7b:c0:71:
14:6f:63:0a:93:41:90:99:26:20:23:a8:2f:49:6c:d2:95:94:
42:7e:01:d6:df:f5:56:81:b2:77:84:09:fa:b4:65:e3:90:d6:
e7:54:c7:51:a9:64:58:51:60:32:6d:f0:42:5e:c8:f1:b0:ee:
be:69:9f:eb:da:85:2a:91:12:60:c4:55:ce:b0:20:5e:18:be:
a3:95:d1:f8:aa:6e:ea:7a:a1:a3:cb:37:b8:56:aa:7b:6d:aa:
0b:3c:b5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:46:52 2025 by rpki-client