Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier: 9jSYQyGzalykAY/tRbXJseYAEidKMRSM8xZpzUsFB18=
Subject key identifier: FE:C5:2D:B1:5F:7F:83:FF:82:EC:1D:F3:37:56:5C:49:10:FA:BE:6F
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 01976CCFAD2F49C2366738CD09A34516831A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number: 06D7
Signing time: Sat 14 Jun 2025 05:00:38 +0000
Manifest this update: Sat 14 Jun 2025 05:00:38 +0000
Manifest next update: Sun 15 Jun 2025 05:00:38 +0000
Files and hashes: 1: 5OdHvHOcZkrao-9cj9p2twVtXj0.roa (hash: XE/cbPsbZGNTjgltCjh6PwbFsSQa/FeH5vMG4ogZQBU=)
2: BxevXOZBdFUOOljteOuO-Rxt-CY.roa (hash: 3iKh9PQRS6dYBM+vLpV5Vh4W7QUExMRDQ5j2EO0fnVo=)
3: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: /OT/DJpC0vDw7KRNQsxjv0FIcyWOkfSuWyeRcyvdXUE=)
4: dxDHiWZSI0UaIHekmjGJ3sxW6wY.roa (hash: miwDVBoTIblNIC6j43ewfXiSRHSZo0go2veqU8bISQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:ad:2f:49:c2:36:67:38:cd:09:a3:45:16:83:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Jun 14 05:00:38 2025 GMT
Not After : Jun 15 05:00:38 2025 GMT
Subject: CN=fec52db15f7f83ff82ec1df337565c4910fabe6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:b4:cb:1e:87:51:bf:2e:41:f9:47:fa:d5:
3e:8b:68:e0:34:5f:7a:40:17:9c:c4:93:32:30:41:
39:7d:27:26:a3:b9:35:dc:c4:29:75:3b:2c:c0:71:
a1:72:ba:f9:6b:f0:2b:73:05:17:eb:46:9e:f3:3b:
77:d0:7e:0c:1e:fc:1a:29:2e:ac:92:65:62:29:b9:
a6:5d:f6:3a:8d:d2:03:d8:d4:64:01:0a:35:ca:7d:
d0:3b:17:eb:87:bc:bb:78:29:a4:c9:4b:67:eb:87:
58:c7:6c:5c:02:1f:24:ee:62:88:ce:ab:d5:89:be:
06:1a:4c:e4:54:8f:86:81:91:b8:8b:71:c5:d1:95:
b6:37:7a:e5:85:fb:aa:4c:be:1c:00:f0:d7:45:04:
6f:0d:52:4a:93:6f:c7:ba:d4:83:85:b2:80:df:65:
db:12:ac:7b:28:08:ae:75:f9:5a:20:d3:28:b3:a8:
ee:7c:af:3a:d1:96:61:d1:85:0e:e6:b7:84:7b:96:
e4:69:16:81:58:9d:7d:c5:8e:7b:8e:f1:26:6a:b0:
64:1c:fa:eb:de:35:de:4a:a3:33:83:b1:6c:96:2e:
de:c7:ba:e7:9b:ec:9a:dc:c6:1f:22:13:5e:b0:52:
65:7a:01:a1:42:02:1f:eb:ca:0c:74:8d:99:30:94:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C5:2D:B1:5F:7F:83:FF:82:EC:1D:F3:37:56:5C:49:10:FA:BE:6F
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bf:8c:68:df:b5:d7:4c:dc:8e:7c:de:49:35:2c:e9:3a:11:
74:89:94:c6:a8:6d:74:b0:5e:72:78:de:37:5e:5d:cd:71:92:
f6:59:e8:36:35:0b:77:0c:16:bb:79:6c:c1:69:3e:06:a0:67:
45:a5:3c:c1:21:6f:e5:4b:9c:5a:7d:2e:ad:0d:ec:4f:4b:d1:
bb:82:90:0d:0b:91:3d:49:20:13:7b:44:d4:31:20:31:7d:c2:
bd:7f:de:99:9b:5a:92:0b:dd:f2:e9:ad:55:a4:95:ac:0c:be:
a3:25:b7:60:bc:53:57:03:7d:7b:55:da:05:ad:5b:fb:d4:65:
42:8a:86:ba:24:e9:8b:77:10:8a:61:0a:0f:db:ba:7f:da:30:
ef:96:20:26:db:28:22:9f:78:78:f6:a6:f3:ea:4f:ac:50:25:
2e:56:fb:9b:03:d8:0e:08:cc:6a:f0:53:93:26:d8:a5:6f:3c:
80:3a:4f:1b:fc:be:9c:86:e2:65:b3:49:7e:9d:89:fc:96:8c:
26:67:89:e2:e3:93:88:77:eb:09:b0:e6:4e:32:f3:a2:4c:c6:
2d:f0:cf:dd:b0:59:80:45:2b:5a:16:0c:d8:50:ed:87:d4:e7:
79:d1:6a:54:3c:7e:3d:22:b0:e5:18:cd:fd:ea:4f:00:7d:fd:
8c:34:73:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:19 2025 by rpki-client