Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: sIkZaMkPiqdv48TDuxKkgjezQmBRWHHPUWyZUX5orKI=
Subject key identifier: A9:E1:04:30:61:D6:40:DF:18:FC:22:98:FD:E7:7B:C2:E1:A3:82:9D
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 019A4F9909029202315D93BBB25549FCD6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 1104
Signing time: Tue 04 Nov 2025 16:00:20 +0000
Manifest this update: Tue 04 Nov 2025 16:00:20 +0000
Manifest next update: Wed 05 Nov 2025 16:00:20 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: 6YtwPTVtOHyJAZzlB01b+n/wDlwoYt482WRLdT5Z+Pg=)
2: ZzkiDwtBZqtMUNkcvV7d7s_Jt5k.roa (hash: pTGPYQviSOj1ZFFzCCHZK/34uo5urkjZrgwZdrFPiTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:09:02:92:02:31:5d:93:bb:b2:55:49:fc:d6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Nov 4 16:00:20 2025 GMT
Not After : Nov 5 16:00:20 2025 GMT
Subject: CN=a9e1043061d640df18fc2298fde77bc2e1a3829d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:85:04:6f:b6:9e:31:1b:60:15:0b:1e:a1:
0f:46:35:49:00:09:93:9a:41:46:62:86:97:a1:66:
5c:7e:3b:05:83:06:1c:d2:65:61:df:23:71:cb:da:
74:0c:51:d5:e0:11:60:e0:f5:84:1b:a2:03:6a:fe:
15:cb:62:16:58:a1:15:e1:34:86:8d:0f:ba:4c:52:
6d:88:14:fb:32:2c:a7:49:0f:21:47:ec:10:0e:d9:
f5:9b:b1:22:f4:59:0d:11:05:06:ce:e8:db:7a:40:
34:14:25:61:d8:e7:47:c7:22:a3:ff:73:74:0f:cd:
5d:f0:fa:6a:7d:a8:da:1f:52:59:9a:cf:63:f0:fc:
3e:6d:a6:21:d1:b8:e7:63:85:ac:ff:28:75:88:ab:
30:18:af:3b:37:25:1f:2e:27:ca:08:54:66:47:e4:
bd:a8:cc:e6:ea:93:a2:95:28:64:8d:45:01:ea:bd:
7d:8e:a1:f4:d1:d1:6d:a7:69:87:43:82:bb:d9:e8:
24:62:54:71:40:8f:34:3a:e6:e5:2c:93:9f:1d:79:
b1:d8:8d:f6:a1:7c:dc:01:3a:0a:a6:74:5d:6d:6c:
8c:49:fb:b5:c4:43:c8:03:d1:17:81:ab:be:bd:04:
f8:2d:25:e7:00:44:55:e1:8d:18:59:88:e3:21:c3:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E1:04:30:61:D6:40:DF:18:FC:22:98:FD:E7:7B:C2:E1:A3:82:9D
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9e:04:4c:e5:b1:9f:ec:f9:50:c5:5f:4f:68:68:2b:c6:8c:
79:52:dd:16:33:00:35:22:5d:c8:d6:7f:55:ae:a5:4b:b7:72:
25:36:be:7b:e4:78:98:30:a0:47:7a:83:3e:7c:71:05:c6:ab:
4b:d5:b3:24:70:3b:cd:84:2b:f4:8a:d8:99:35:53:5f:d5:82:
d5:91:e0:78:ed:df:ac:3f:2b:21:d9:b1:e9:ff:3d:95:27:ef:
73:eb:3c:ea:73:8b:27:7b:52:18:f0:52:b6:42:28:af:4b:0b:
a5:b1:62:4b:84:8a:85:fd:de:1b:cd:c4:3c:7c:a2:2b:55:5f:
60:23:7c:29:25:31:65:3d:36:f5:d6:65:6f:68:d1:47:df:1f:
a1:16:30:e4:f8:fd:aa:6f:e5:63:5f:ed:bc:b2:05:af:c5:57:
8c:f4:99:95:48:4a:7d:81:83:fd:59:eb:5d:c6:50:c7:59:4f:
1c:3e:0a:68:d5:10:e4:e1:c7:f4:a9:06:79:6a:c6:5d:66:e2:
a0:a0:ca:8c:4b:12:f9:e7:89:72:25:bc:22:d5:89:af:48:2a:
a7:f1:ed:ca:6f:4e:f8:d4:02:8c:b8:13:a4:b5:d7:65:b2:17:
1a:69:a0:f5:88:22:34:f9:db:3d:cb:d5:ee:59:2a:e8:3a:1d:
95:f1:8d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:46 2025 by rpki-client