Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: M0XNlIfsWv99vkHKmKk1WuiKwI0cfEMv4VPi/kV3Eck=
Subject key identifier: 79:45:BF:FE:46:65:A3:1A:42:EE:B2:02:7D:DA:00:E6:D3:04:6F:90
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 01976C9906960FA63B2AC4739F5631641140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 0C9B
Signing time: Sat 14 Jun 2025 04:00:57 +0000
Manifest this update: Sat 14 Jun 2025 04:00:57 +0000
Manifest next update: Sun 15 Jun 2025 04:00:57 +0000
Files and hashes: 1: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: sqpjSAi9TWErn7iDYhHfESiT71xvuj27GL5sJ1YMymc=)
2: dejiYWXpVyt-n4zSW5_bBe-6r0A.roa (hash: S+DqE/3RRz1xoArghf5VPCEdg1QAxwIn8VFz5upxaGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:06:96:0f:a6:3b:2a:c4:73:9f:56:31:64:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Jun 14 04:00:57 2025 GMT
Not After : Jun 15 04:00:57 2025 GMT
Subject: CN=7945bffe4665a31a42eeb2027dda00e6d3046f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:79:d2:5c:3f:8e:7a:20:94:d6:07:2d:18:02:
47:a8:84:11:85:b3:b9:5c:2d:c2:a3:63:c8:c5:02:
10:78:05:22:0a:6b:cf:3e:c3:04:96:c3:e0:ce:a4:
b6:ba:6a:71:3a:7a:cb:88:24:c9:20:2b:02:73:1e:
c5:d9:4c:72:ad:b4:75:9a:df:dd:d8:75:b7:03:b7:
9a:38:47:e3:2f:8f:4d:f5:fc:a7:a6:9e:e1:72:65:
1e:f0:7b:44:43:7c:2d:a9:1d:ac:fc:0a:45:08:27:
50:14:19:5a:77:e1:1e:36:a0:2d:ea:cc:b0:ee:ac:
5c:80:d6:61:79:68:85:19:ae:fb:7e:17:99:76:f2:
f5:3a:72:00:9e:04:bd:4a:fa:d5:93:b8:a1:cb:bb:
bc:59:56:ea:7c:84:86:c6:2d:1d:5c:35:e1:91:e2:
20:ad:4d:a8:28:05:63:f2:45:cf:1e:c4:9e:6c:b2:
84:63:1e:00:2f:d8:b1:0a:fd:3f:05:81:ae:c1:91:
02:27:9e:85:76:89:e3:f1:70:c7:c0:a4:b7:3b:3e:
e7:38:4f:4c:0e:f0:f2:b7:0f:c8:84:7a:74:98:78:
e9:17:c0:fb:53:0f:29:97:dd:6f:5e:97:68:7f:5c:
b3:f6:28:4a:ed:fb:f6:cc:cb:79:6b:32:76:a0:24:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:45:BF:FE:46:65:A3:1A:42:EE:B2:02:7D:DA:00:E6:D3:04:6F:90
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c7:b5:8e:ed:86:25:d4:78:90:d6:ee:bd:60:ec:1f:8c:0b:
39:ca:c6:f3:4e:ac:ed:f3:6a:f5:27:9b:ab:fa:aa:80:54:7c:
52:89:cd:2e:c4:6c:3e:b5:04:f1:a8:c5:f0:1e:67:c8:e5:58:
39:b8:2a:1d:15:37:59:8b:83:5a:69:b7:bd:85:98:5b:de:25:
8e:96:8e:03:23:69:3c:52:6a:bc:00:46:74:fd:8c:44:86:46:
26:fc:2a:43:75:a9:52:26:b5:0d:55:1c:f1:44:bb:0e:b3:36:
da:59:d4:4e:92:2e:67:4c:c7:e8:69:ed:86:6a:e1:cb:86:8d:
8e:a7:dc:f1:84:1b:73:bf:ba:c9:c4:1a:67:17:15:aa:e1:a4:
4d:b5:a8:41:8f:ce:04:c9:a4:92:d1:fd:c1:4d:7d:36:74:5e:
d1:44:b4:e2:f5:b0:33:85:a8:88:55:05:91:3b:82:be:0b:1f:
5e:77:b5:3d:6d:fd:eb:89:2b:5f:78:70:d7:46:88:c7:07:c1:
76:4c:6d:2c:c0:15:ed:94:5d:b0:f9:a2:62:ae:36:e3:1d:08:
33:48:d8:3c:c0:4a:f4:90:02:51:08:e1:66:68:1f:9f:c6:04:
dc:e7:4d:68:df:e5:cb:57:36:11:52:64:17:65:16:62:3b:f0:
8c:24:20:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:47:33 2025 by rpki-client