Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier: gIinow1LEKacoYJMgTfEt7vewoUwHolw1De12oVuVns=
Subject key identifier: AB:36:BB:F2:7D:A2:CA:56:9C:A0:7F:E9:58:D2:B6:36:F8:C7:15:29
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 01988FC77F8C9B90C8F870E34D59F7ECC141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number: 0B43
Signing time: Sat 09 Aug 2025 17:01:12 +0000
Manifest this update: Sat 09 Aug 2025 17:01:12 +0000
Manifest next update: Sun 10 Aug 2025 17:01:12 +0000
Files and hashes: 1: nd2mEoM182MlqnyU97QFBEBtYLc.roa (hash: H4CTJi+dex4a2tP/U9S7boExXOmFzvTZ0iE52ANC1z0=)
2: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: 2cmEFn0F4FOK5vSg7OqoOGaDcAQE1KP22OcQV1INpWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:7f:8c:9b:90:c8:f8:70:e3:4d:59:f7:ec:c1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: Aug 9 17:01:12 2025 GMT
Not After : Aug 10 17:01:12 2025 GMT
Subject: CN=ab36bbf27da2ca569ca07fe958d2b636f8c71529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:7b:ac:a4:94:54:40:61:70:25:9f:c2:cc:
4e:b8:af:b8:4e:82:c4:d4:9c:ec:14:9d:f0:e1:25:
18:dc:84:8b:91:57:02:85:91:46:06:60:a2:7d:a1:
46:6e:db:63:88:87:27:c1:99:bd:11:d9:9a:3f:c2:
d3:e9:92:9e:e9:2d:6d:9f:36:f2:c2:d1:4f:8a:ce:
b7:fa:1e:d9:b1:51:cb:4e:65:ac:75:98:a4:80:93:
cb:ff:5c:be:e4:30:6e:1c:8b:08:65:9f:3e:f0:e7:
bb:ef:d6:9f:f1:dc:b9:11:c0:a5:d7:fd:77:67:50:
a2:13:8b:21:f0:dd:60:9e:74:52:6d:8c:03:d7:47:
28:ee:88:7a:f9:52:80:a0:73:a7:ef:2d:a9:70:fa:
28:eb:66:5e:a9:e7:a1:5c:8a:d7:43:1d:56:64:d1:
e2:ad:09:b6:32:3f:a1:5a:33:f9:30:54:1a:cc:31:
6d:8f:96:f9:b2:a4:a8:79:3a:b5:e4:51:d0:0c:64:
08:3b:d2:7f:25:bb:e4:3d:6e:78:61:f6:6a:88:bb:
79:99:95:95:fa:72:c8:05:28:f1:a6:59:8c:bd:89:
b7:8f:8f:20:5b:4f:b9:d5:4f:d9:62:17:2c:41:69:
5b:4a:91:86:47:4b:97:b2:d2:1f:06:92:ca:6c:05:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:36:BB:F2:7D:A2:CA:56:9C:A0:7F:E9:58:D2:B6:36:F8:C7:15:29
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e9:27:a9:15:12:79:e1:fc:51:00:0b:30:6d:f3:6c:01:63:
d5:88:3d:24:3a:1e:2c:73:00:78:47:57:11:8c:47:4d:b3:e9:
e1:ce:cd:e8:48:98:ed:42:9b:1b:b9:72:a7:c7:b6:74:0a:48:
fa:d4:f9:98:87:d9:13:f7:e0:bb:84:64:52:c3:20:22:89:3f:
a3:9c:9b:bc:79:7b:3e:4b:aa:35:d4:a4:c2:9d:ea:35:87:cb:
20:83:50:a7:05:7a:74:82:94:3e:61:59:51:76:29:fd:24:15:
75:3a:6a:5c:fc:42:fd:be:5a:86:f1:8f:84:af:46:0c:51:f2:
f0:c3:0e:c0:2d:35:1b:3d:13:0b:49:76:33:5d:c5:b5:4a:6f:
b0:56:f2:93:79:15:0c:6d:ea:ba:0b:70:ea:47:bc:af:7b:fc:
fa:9f:9a:91:73:2b:18:49:e4:f5:f6:c0:d4:0a:3f:f0:a7:88:
26:62:6c:67:76:ad:72:29:ec:97:2d:1d:9f:83:4a:75:65:4e:
37:86:26:fa:7c:7f:29:e8:b9:7b:42:fd:6e:fe:d5:0b:97:5f:
32:77:cc:01:db:bb:4a:fd:cd:38:75:b1:ba:6e:d9:c1:52:7d:
e0:ba:c3:ad:3b:08:5b:66:e4:bf:5a:29:1a:0b:ac:30:31:b3:
19:6c:e3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:35:22 2025 by rpki-client