Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
File: cegLwpz58rQKwwJOD3I126LVelQ.mft (raw, json)
Hash identifier: II03cfPPdiQy9yddnIfScoblG1SbJoaIToSdzCwt8Y0=
Subject key identifier: 36:FE:DA:FA:75:6E:9F:BA:DA:4E:BD:D8:EE:8A:56:55:2F:35:BD:BB
Authority key identifier: 71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
Certificate issuer: /CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Certificate serial: 019771BF898C4F37DD08F4C7598974E5AC25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
Manifest number: 04E0
Signing time: Sun 15 Jun 2025 04:01:07 +0000
Manifest this update: Sun 15 Jun 2025 04:01:07 +0000
Manifest next update: Mon 16 Jun 2025 04:01:07 +0000
Files and hashes: 1: cegLwpz58rQKwwJOD3I126LVelQ.crl (hash: 3xqdQ2y0/gY/nnvAG8j1wgaixIewawxHNMZSkYqHrIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:89:8c:4f:37:dd:08:f4:c7:59:89:74:e5:ac:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Validity
Not Before: Jun 15 04:01:07 2025 GMT
Not After : Jun 16 04:01:07 2025 GMT
Subject: CN=36fedafa756e9fbada4ebdd8ee8a56552f35bdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:02:de:ca:88:ab:13:d3:61:d1:31:e4:05:
13:f6:b3:bf:50:bc:ae:d8:ad:bf:b8:44:a5:ff:a1:
b5:ce:fa:d9:90:eb:74:06:cd:0c:fa:85:97:f3:16:
0e:8a:54:1a:e1:c5:4a:c0:68:40:24:d1:64:4d:ab:
df:1d:a7:fb:93:51:07:84:5b:10:7c:89:47:a1:5d:
a6:b7:b8:2c:b8:f5:f2:19:18:30:fe:d8:9f:d6:e6:
fa:58:df:83:1a:26:22:bc:ae:de:5b:cc:03:73:c4:
35:7f:cb:73:dc:87:75:21:0a:96:51:92:9c:e5:27:
4a:e2:85:12:2d:47:06:ce:16:87:c2:f8:4e:81:99:
bf:23:12:3e:bb:de:e3:a9:77:0e:7b:30:d4:dc:1d:
2d:76:ef:40:aa:a7:5d:d6:81:b6:13:44:73:d8:ba:
65:50:8b:cf:98:dc:71:56:55:32:49:02:04:c5:77:
29:dd:63:4f:4c:d7:d9:04:c2:bd:d9:de:10:c9:93:
3d:1a:10:95:9b:43:75:c4:ae:05:40:b1:55:d2:73:
95:62:4f:de:cb:bf:25:da:9c:7a:31:be:73:65:7a:
e6:74:e2:83:f0:b2:21:03:4d:06:48:f5:89:36:b4:
09:88:20:58:fe:35:57:3f:01:44:50:e1:2d:f8:93:
13:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FE:DA:FA:75:6E:9F:BA:DA:4E:BD:D8:EE:8A:56:55:2F:35:BD:BB
X509v3 Authority Key Identifier:
keyid:71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:67:b5:85:fa:3b:ce:42:31:03:13:b3:cb:7d:09:bb:1e:fc:
6b:ff:1c:34:db:cf:3d:10:3e:80:40:57:1c:b7:85:2f:4c:93:
ce:ba:31:1b:6d:02:6a:bd:af:96:cf:2b:17:52:09:2a:04:d1:
e7:f1:33:ab:fb:14:a4:7b:82:91:70:86:53:2a:80:ae:32:10:
7a:0e:15:d6:a3:34:cb:4f:78:e7:d4:07:db:fd:4e:ce:bc:62:
12:62:9f:8d:c6:f5:82:89:fd:17:fc:a0:b5:7c:fc:9a:11:93:
56:6b:0c:2e:41:77:c0:e7:79:77:26:14:24:a9:c0:59:89:10:
a1:d6:5d:8d:61:d0:49:a2:6c:32:30:dd:48:9f:a4:10:7b:4a:
de:5a:ff:95:45:c7:e4:dc:e3:c4:45:4b:57:ab:51:a5:54:bb:
6f:4e:1c:e6:f4:6c:31:28:d8:42:1a:54:cb:e9:9d:fa:ba:c1:
04:38:10:11:17:a5:12:91:61:31:41:d8:cf:b0:f4:ac:9b:1a:
25:d1:21:5b:56:f9:27:34:f5:60:ae:5b:4e:5e:26:e8:e3:97:
8d:a0:cf:88:e9:7d:5c:aa:1f:0b:1a:a6:34:d3:ee:d9:47:75:
8c:ad:45:9a:75:ca:47:3b:e2:28:ff:e9:42:96:5c:e0:05:a3:
f1:0c:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:33:58 2025 by rpki-client