Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
File: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft (raw, json)
Hash identifier: ju8ATK+rRwBsra5Pp6GdIVJ/xpyeeTXY6MfaLkgZWGI=
Subject key identifier: 11:1E:B6:21:84:6C:7E:0D:8A:95:97:07:47:DA:D3:A7:48:5D:76:AB
Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
Certificate issuer: /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Certificate serial: 01988356FFD65E0A880F46EBA84649EE62A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
Manifest number: 1295
Signing time: Thu 07 Aug 2025 07:02:53 +0000
Manifest this update: Thu 07 Aug 2025 07:02:53 +0000
Manifest next update: Fri 08 Aug 2025 07:02:53 +0000
Files and hashes: 1: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl (hash: sXVUSkp/T1Dx1Vfy0Ty6xn2pSXhJ92udNwHjMQvhOJU=)
2: jusxHEEIsrLZpxHa35fyPkAqK7s.roa (hash: ZFDdzLmEvnMxmWT9XlxYhopgvJv0aQjuJRSBRhLyOC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:ff:d6:5e:0a:88:0f:46:eb:a8:46:49:ee:62:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Validity
Not Before: Aug 7 07:02:53 2025 GMT
Not After : Aug 8 07:02:53 2025 GMT
Subject: CN=111eb621846c7e0d8a95970747dad3a7485d76ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ef:4d:36:32:3a:7d:5c:c9:d1:7d:d3:f8:e8:
62:9c:12:b6:52:bb:ab:39:f8:1e:55:be:0e:21:67:
4f:01:b6:63:69:4e:2d:5e:05:ab:d1:29:b6:1b:41:
f3:d8:e6:b9:95:86:e6:4c:6a:40:eb:b8:92:09:c5:
14:ab:50:cc:20:7a:de:a1:69:20:0c:16:e5:80:ea:
41:ed:25:75:16:72:cd:de:70:4c:a2:b0:2a:21:12:
de:2f:fd:e8:9f:c0:be:19:fe:9f:a7:49:f6:58:69:
c9:34:22:96:bc:7e:71:69:cc:18:4b:79:f2:ae:a8:
b4:8e:73:83:db:88:6a:43:10:a1:96:a2:33:73:5f:
9c:0f:b6:ca:4e:37:a4:1f:56:d6:f7:3d:85:30:f1:
04:d0:e5:77:fb:96:45:6a:43:43:8f:58:f7:6a:7e:
1a:4f:1e:40:82:0f:9a:00:fc:db:21:07:6e:e7:b7:
48:f4:ae:87:19:fa:72:17:ff:fb:b1:bb:a0:47:55:
fe:35:85:d4:93:c0:44:88:dc:56:09:cb:9c:65:f4:
ce:49:7d:88:42:ce:6d:ba:e0:b5:4d:98:0f:e0:c7:
15:bf:db:9b:1a:c0:61:7f:fe:a5:70:3d:f2:4d:36:
86:3a:2a:f1:71:b4:d3:95:b0:f3:21:06:3f:1b:c2:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1E:B6:21:84:6C:7E:0D:8A:95:97:07:47:DA:D3:A7:48:5D:76:AB
X509v3 Authority Key Identifier:
keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3e:40:56:b6:1d:90:27:97:fe:0d:de:31:af:94:36:16:c3:
0d:d3:e4:8e:2b:35:aa:bc:b1:8e:d4:ad:d5:85:58:52:10:2b:
b5:26:1f:30:61:d3:0a:54:8f:5d:47:b9:7d:9a:4f:b5:81:37:
83:4f:68:e9:ee:a8:48:f8:73:da:34:0a:dd:be:f8:8d:cd:b0:
60:22:3c:df:bb:85:c1:f0:fa:d4:bf:86:cb:b5:92:c4:0d:7e:
cf:a3:9d:f7:e6:b7:ae:72:aa:f2:43:09:51:02:25:6b:1a:f3:
5c:18:39:ff:32:d8:87:d0:28:22:3d:d7:42:e0:d0:a1:b6:ad:
d9:a1:71:a5:fb:0c:93:0b:ed:cb:8d:de:56:dd:ec:d8:ad:12:
72:ce:d7:7f:a4:17:db:6c:80:90:3c:08:b2:6d:85:84:88:d5:
1e:55:fa:9e:2e:d9:f2:10:03:36:e2:9d:c4:cf:04:2d:cc:f6:
31:ec:94:74:88:95:e3:a3:8a:84:62:d3:c5:27:35:83:f1:23:
76:2f:4b:58:1b:54:df:84:fc:0f:4b:2b:72:a9:33:b3:17:7e:
f2:7c:67:62:3e:30:3e:aa:b2:5e:b2:f6:94:d2:0c:c8:65:4e:
83:48:8a:3d:4d:70:19:29:b1:0f:89:20:bf:58:17:ca:20:fe:
df:d5:18:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:33:22 2025 by rpki-client