Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: APiVWXINlvCsK6l8aq5kRSKUxHD2dThVB4FYEEEAjpc=
Subject key identifier: 63:CA:15:6A:D0:3F:43:DC:34:30:02:E9:7A:E0:CD:D7:E3:72:A8:E0
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 0198748742B65DBAD38CB610040D6C48B06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 100E
Signing time: Mon 04 Aug 2025 10:01:18 +0000
Manifest this update: Mon 04 Aug 2025 10:01:18 +0000
Manifest next update: Tue 05 Aug 2025 10:01:18 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: uOtSSYA5/xFVRGqdyh8cHsAektXpklJ2uIWDQGlvEUk=)
2: ZzkiDwtBZqtMUNkcvV7d7s_Jt5k.roa (hash: pTGPYQviSOj1ZFFzCCHZK/34uo5urkjZrgwZdrFPiTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:42:b6:5d:ba:d3:8c:b6:10:04:0d:6c:48:b0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Aug 4 10:01:18 2025 GMT
Not After : Aug 5 10:01:18 2025 GMT
Subject: CN=63ca156ad03f43dc343002e97ae0cdd7e372a8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:b2:29:95:66:73:f4:d3:5d:a2:d0:13:43:
d8:8a:74:c8:9a:f1:5e:69:36:14:85:0f:fd:5d:bb:
36:eb:f5:f2:af:35:80:79:7c:dc:6b:b1:6f:ce:45:
c6:71:f6:27:29:76:de:98:26:1b:55:2a:f7:ac:44:
d5:a9:be:a1:93:80:f2:57:40:fc:2f:97:95:26:06:
15:41:3a:20:72:35:51:ab:5f:71:f2:74:3f:71:f5:
bf:27:ab:56:ee:e6:bd:fb:c0:b7:d5:ef:6a:04:ae:
82:a5:05:78:74:b9:ea:a6:98:dc:67:29:0d:c5:e1:
9c:74:9f:f3:fb:f8:a6:60:25:bf:f7:48:bd:e6:f8:
05:b4:09:e7:d5:e1:64:ef:2e:33:98:f2:52:f3:0c:
c8:44:42:f1:9e:31:09:8b:6f:ca:44:31:e7:e1:8c:
40:c3:0b:0e:39:69:a2:78:69:ae:0e:77:69:c3:d8:
fc:c6:ec:ff:f6:33:a7:ff:00:45:a2:10:cf:ef:24:
86:30:3d:0b:25:3a:3e:2c:ff:18:91:09:cd:ef:30:
27:3b:43:d8:47:99:20:9e:07:22:af:8a:56:63:f0:
fd:71:21:c5:14:0f:35:fa:11:4d:f0:f8:42:20:11:
90:7a:4d:a9:87:14:d6:55:8f:58:05:d1:6c:bc:0d:
c1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CA:15:6A:D0:3F:43:DC:34:30:02:E9:7A:E0:CD:D7:E3:72:A8:E0
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a4:d9:64:24:f7:32:22:e8:e8:96:03:1c:50:e2:cb:71:50:
97:f7:69:21:47:9f:48:92:0d:c8:71:eb:b3:6b:ba:a4:03:b8:
26:f0:9d:b0:80:90:08:4b:ca:70:8d:08:40:1a:ed:db:60:cf:
bd:e6:6b:13:d1:28:8c:34:00:ab:bc:19:ab:81:ad:21:03:16:
34:aa:40:1a:f4:57:6f:28:4b:91:fe:87:6c:ed:d0:a6:6a:bf:
e6:db:a6:de:ba:a2:c5:50:c8:c3:1b:66:2e:46:f9:af:f5:8c:
55:43:c3:ec:ee:69:27:6f:f4:40:d4:46:6e:a4:cb:43:9a:05:
b2:df:6b:d9:a6:b0:ac:12:95:6c:0a:39:f2:c0:28:69:79:bd:
24:d4:2a:0b:17:aa:c7:19:9b:1f:f0:5a:67:79:f9:ae:03:ed:
7b:2c:a7:74:13:14:68:a8:80:60:92:40:11:47:c5:79:24:35:
5d:83:04:14:f3:a4:25:ac:23:9c:4b:4e:2f:e7:87:79:48:8c:
ea:a4:ae:cf:72:0d:ff:fb:46:da:74:17:d7:23:e7:fe:a0:ec:
a8:79:6e:60:c7:7f:96:f7:74:93:5d:3d:48:82:0b:ca:b1:a5:
eb:12:cf:eb:63:6c:a5:9a:e0:18:6f:12:92:bd:8c:53:7a:6c:
26:14:43:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0h0K2XbrTjLYQBA1sSLBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTU1MThlNjg0NjdiNDI5MGMzNTA5MjY4YjZkNmQ2NjQ5
NjJjODYwHhcNMjUwODA0MTAwMTE4WhcNMjUwODA1MTAwMTE4WjAzMTEwLwYDVQQD
Eyg2M2NhMTU2YWQwM2Y0M2RjMzQzMDAyZTk3YWUwY2RkN2UzNzJhOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGWyKZVmc/TTXaLQE0PYinTImvFe
aTYUhQ/9Xbs26/XyrzWAeXzca7FvzkXGcfYnKXbemCYbVSr3rETVqb6hk4DyV0D8
L5eVJgYVQTogcjVRq19x8nQ/cfW/J6tW7ua9+8C31e9qBK6CpQV4dLnqppjcZykN
xeGcdJ/z+/imYCW/90i95vgFtAnn1eFk7y4zmPJS8wzIRELxnjEJi2/KRDHn4YxA
wwsOOWmieGmuDndpw9j8xuz/9jOn/wBFohDP7ySGMD0LJTo+LP8YkQnN7zAnO0PY
R5kgngcir4pWY/D9cSHFFA81+hFN8PhCIBGQek2phxTWVY9YBdFsvA3BSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPKFWrQP0PcNDAC6XrgzdfjcqjgMB8GA1UdIwQY
MBaAFAnlUY5oRntCkMNQkmi21tZkliyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUt
ZTc0NTk0ODk4M2VkLzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUtZTc0NTk0ODk4M2Vk
LzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKTZZCT3
MiLo6JYDHFDiy3FQl/dpIUefSJINyHHrs2u6pAO4JvCdsICQCEvKcI0IQBrt22DP
veZrE9EojDQAq7wZq4GtIQMWNKpAGvRXbyhLkf6HbO3Qpmq/5tum3rqixVDIwxtm
Lkb5r/WMVUPD7O5pJ2/0QNRGbqTLQ5oFst9r2aawrBKVbAo58sAoaXm9JNQqCxeq
xxmbH/BaZ3n5rgPteyyndBMUaKiAYJJAEUfFeSQ1XYMEFPOkJawjnEtOL+eHeUiM
6qSuz3IN//tG2nQX1yPn/qDsqHluYMd/lvd0k109SIILyrGl6xLP62NspZrgGG8S
kr2MU3psJhRDcA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:35:41 2025 by rpki-client