Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier: ml1qV/r0joYyMpSzdU5UMHbrhyb1KczQkIgp166I3zQ=
Subject key identifier: 91:F6:E4:EE:2C:6B:82:43:B7:46:44:05:42:7F:79:23:AF:4D:F1:A4
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 019A50074A6E7401455C0789A23925E9A6B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number: 06A9
Signing time: Tue 04 Nov 2025 18:00:46 +0000
Manifest this update: Tue 04 Nov 2025 18:00:46 +0000
Manifest next update: Wed 05 Nov 2025 18:00:46 +0000
Files and hashes: 1: 3JlcQxD2NXWLaEj6J42YSdi1quE.roa (hash: ZFdShZLQiri1BeTMte27QBSxcmd4A78sb6jnkkO6l9s=)
2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: ++OkIkUIiXWrPivsqlQ4SVOXzEwyK/a11W3eNKAREpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:4a:6e:74:01:45:5c:07:89:a2:39:25:e9:a6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Nov 4 18:00:46 2025 GMT
Not After : Nov 5 18:00:46 2025 GMT
Subject: CN=91f6e4ee2c6b8243b7464405427f7923af4df1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:39:ba:23:d4:2a:ac:48:ef:de:a1:24:9b:
b6:f9:af:1b:12:bb:6f:92:93:9b:d0:a2:f4:f7:79:
c2:49:64:c8:58:67:f1:b4:39:5d:61:6d:76:55:7e:
61:f7:59:26:4e:0f:47:15:a5:1c:8c:8c:22:bf:4f:
cc:90:a6:31:7b:cf:d8:5f:5b:eb:c6:2c:9a:0e:e7:
ac:10:7a:d5:67:d9:d6:aa:bd:d2:15:1c:bb:5d:9f:
dc:7d:34:f1:0b:96:e4:9b:d7:b3:e2:8f:b2:81:be:
c3:22:fb:99:aa:74:89:20:27:ea:96:f0:31:57:6c:
68:af:1a:d8:d8:b8:49:56:91:4b:d9:16:a3:e5:6d:
6f:0d:28:08:28:9e:0d:74:bd:e7:06:0a:ee:2f:87:
88:98:a6:9d:d5:d5:f2:49:3a:67:dc:35:c8:e2:0e:
5f:2b:0e:53:21:89:71:90:b7:d6:93:bc:61:af:61:
2e:04:55:52:58:df:79:05:e5:f8:ac:af:a4:b8:8b:
49:4f:32:31:11:e5:06:10:90:24:1d:69:9f:a5:8a:
2f:93:2e:96:95:bc:ec:58:f1:56:78:96:b6:80:6b:
97:92:85:8b:c0:90:2f:46:a0:19:ab:88:63:d4:46:
ad:07:e3:d7:68:0f:aa:da:27:99:84:05:b0:0f:1c:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F6:E4:EE:2C:6B:82:43:B7:46:44:05:42:7F:79:23:AF:4D:F1:A4
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:01:44:81:2f:6e:02:44:d4:98:c1:1e:92:a1:61:c7:b4:f2:
2a:01:5b:83:53:66:a1:16:cb:97:fb:01:13:be:54:33:d2:b2:
a3:ae:4f:e3:48:a3:75:6b:a5:60:8f:b1:0b:00:8c:0c:1b:c7:
af:8f:95:3c:05:a8:69:1a:f3:c0:ea:74:fe:ec:e1:05:6a:24:
64:3d:35:a7:30:4a:15:3d:4c:8d:b9:b4:ee:f3:da:45:b1:19:
29:ee:e4:78:d9:57:64:e4:f0:90:5e:9e:c9:20:67:75:4c:1e:
81:87:c3:0f:b4:9a:e1:b7:e4:38:95:1e:e5:3f:6c:99:77:f8:
3d:31:3e:96:6c:68:37:7a:57:4e:54:48:86:85:44:c2:2e:fb:
44:c7:c2:b6:17:51:b2:a2:90:7b:0a:1d:e3:ca:e3:f4:7f:72:
22:db:b7:ab:49:43:ba:59:53:6c:cd:af:8a:1b:43:b6:9c:30:
a2:d4:b2:e8:bd:41:a8:e4:65:52:a4:a4:69:7a:39:ae:f0:4c:
93:40:cb:1d:c2:fc:16:68:76:73:c6:b7:b3:12:06:4d:b2:66:
70:c1:02:45:7a:1f:e9:20:a9:ca:b6:63:04:33:51:17:fd:21:
b9:e2:77:ef:1d:90:14:f6:14:23:49:8e:05:84:7a:28:99:a4:
4e:5a:47:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:19 2025 by rpki-client