Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: ttA70cyk2IHDnB4gmw4acokmMH9yBB4hKqnVs7Hjcu0=
Subject key identifier: 28:FE:C3:4C:C8:2F:8A:0C:4A:70:E5:F2:14:3C:3B:67:A4:A7:FC:38
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 0198887BB16F9D1E47F1B097D9FE58D6660A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 0D2E
Signing time: Fri 08 Aug 2025 07:01:04 +0000
Manifest this update: Fri 08 Aug 2025 07:01:04 +0000
Manifest next update: Sat 09 Aug 2025 07:01:04 +0000
Files and hashes: 1: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: TznEYfU2acoIR2MiM4DF0n0E7hvI+TtkLPdTvUSwcxg=)
2: dejiYWXpVyt-n4zSW5_bBe-6r0A.roa (hash: S+DqE/3RRz1xoArghf5VPCEdg1QAxwIn8VFz5upxaGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:b1:6f:9d:1e:47:f1:b0:97:d9:fe:58:d6:66:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Aug 8 07:01:04 2025 GMT
Not After : Aug 9 07:01:04 2025 GMT
Subject: CN=28fec34cc82f8a0c4a70e5f2143c3b67a4a7fc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:4c:99:b7:1d:8b:1a:38:27:b1:77:88:ff:
49:5f:c4:05:b7:16:b9:fb:b6:30:74:8a:43:0b:e7:
2c:a0:78:76:bc:65:4e:cb:0b:6c:e2:5d:9c:c6:7b:
03:d7:df:00:d5:c1:59:1d:64:5a:c9:a2:f3:18:73:
67:56:46:64:f6:7c:ac:88:1c:48:45:db:a9:85:52:
f1:d4:f7:0c:b1:93:32:3a:13:f7:9d:e3:8c:b3:7a:
2e:80:3b:57:4d:ba:c5:24:c1:b6:43:83:c9:15:1a:
e7:9c:81:03:f8:ea:24:3a:6d:86:09:40:14:2c:38:
cb:47:39:1e:1f:37:7e:3d:4e:f7:ea:1d:51:4c:02:
9d:52:e5:fb:33:a5:8c:ab:06:7d:b1:a5:b3:eb:ea:
95:b3:19:3d:e9:22:c6:fa:ff:2d:8b:ad:cf:c7:9b:
fb:81:c4:e2:5b:69:f7:bb:0c:3c:c9:09:64:a6:ae:
78:f5:70:0b:a5:a5:64:b4:33:9b:3d:40:96:a5:7f:
56:e5:a1:3c:14:a5:96:68:9d:75:ee:8b:75:2e:ad:
54:2e:04:d5:85:3b:33:06:3f:27:52:c0:d2:fc:62:
78:18:b7:a4:0e:fd:07:7d:d0:5b:71:5d:a7:88:f2:
62:66:b4:b1:50:8c:f9:1b:a7:18:24:9f:e7:5a:2f:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FE:C3:4C:C8:2F:8A:0C:4A:70:E5:F2:14:3C:3B:67:A4:A7:FC:38
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f2:f0:2c:e3:5a:1e:1e:a3:9e:98:ee:29:8d:f7:f4:00:49:
5c:f0:93:17:ed:90:2b:e4:a4:21:6d:75:c1:26:a0:d6:dc:62:
e2:d5:63:39:86:c8:2f:56:e6:52:88:6f:32:13:a2:58:ea:7c:
b5:3e:0c:8a:9c:16:24:c8:e8:45:5a:e6:ec:4a:82:2e:10:a1:
57:1f:0c:0a:44:9e:50:f5:87:54:f0:84:c8:d3:30:71:82:af:
b6:2e:b1:0c:f4:c5:62:08:fa:72:da:37:a0:c5:29:44:4d:1b:
76:de:09:9b:72:42:f7:ec:b7:53:f0:4e:30:61:8d:bf:34:e8:
9a:4d:37:1e:cf:21:bb:6c:da:da:b6:ae:5a:93:02:06:64:3c:
b9:aa:04:18:74:88:a7:a7:60:20:cb:5b:f2:9f:f6:b5:c8:c2:
be:11:ee:a8:18:8e:21:8d:92:86:4c:64:e4:94:8b:0c:d4:0f:
c9:36:2d:15:69:fd:fc:ee:30:01:2b:94:d8:38:02:64:37:2f:
96:8f:0b:13:b5:ff:dd:56:f2:9a:1f:59:71:64:70:3d:fb:b9:
dd:81:a3:fb:48:69:3f:f5:fd:d7:a8:b3:64:0b:c8:3a:02:d8:
92:5c:47:4b:cf:21:24:e8:ac:5b:52:59:71:d8:9e:0c:d2:fb:
cf:ec:e2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:07 2025 by rpki-client