Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier: tvDwayies/6mVpMq6w1sm3ucaCIxyvmRtI88kKlqyko=
Subject key identifier: 24:A0:B3:0B:AE:35:25:51:35:FF:0D:D2:B1:41:EE:12:C9:B9:95:24
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 01987CAE091F306811D725827B01F02F4674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number: 05B7
Signing time: Wed 06 Aug 2025 00:00:37 +0000
Manifest this update: Wed 06 Aug 2025 00:00:37 +0000
Manifest next update: Thu 07 Aug 2025 00:00:37 +0000
Files and hashes: 1: 3JlcQxD2NXWLaEj6J42YSdi1quE.roa (hash: ZFdShZLQiri1BeTMte27QBSxcmd4A78sb6jnkkO6l9s=)
2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: CliGEZ5jnDgsncrlIHtd0d5wEc6yyTeBOYqTDtACXnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:09:1f:30:68:11:d7:25:82:7b:01:f0:2f:46:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Aug 6 00:00:37 2025 GMT
Not After : Aug 7 00:00:37 2025 GMT
Subject: CN=24a0b30bae35255135ff0dd2b141ee12c9b99524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:71:e6:f0:0a:7f:84:4c:05:11:c6:51:2b:
42:c7:1c:7e:bc:9b:93:7e:70:4d:85:de:a6:79:a2:
20:6e:02:34:d5:74:e7:b1:22:89:10:35:4d:b0:f4:
a7:3d:1d:0e:14:b0:85:2f:27:6c:85:9c:be:30:86:
5a:99:21:63:ec:00:e4:96:3f:08:db:5b:eb:aa:da:
73:b3:31:b7:fd:66:82:c1:0f:0d:c0:5b:60:9b:9d:
0e:b3:3d:a0:47:4b:9e:31:62:58:b5:f0:73:0e:9e:
e1:bb:55:9b:82:e2:d0:6e:06:00:34:be:83:5f:a7:
3e:b2:e9:78:13:5e:29:3b:56:75:7b:f2:16:cf:cc:
c4:2f:90:2f:f9:05:01:26:fe:1a:d4:d5:6c:d3:14:
79:82:70:b5:08:83:0f:91:bf:d4:d9:d9:1c:0f:e4:
1b:02:70:59:19:95:9a:fc:c7:41:66:0c:17:13:4b:
e6:a4:6f:c4:b0:a5:94:1f:5b:06:3d:1e:5f:42:42:
59:95:81:0c:22:92:ad:7e:cd:91:3b:53:4c:a8:d7:
68:4f:9f:ce:3d:41:1f:d5:5d:df:f3:03:29:ef:e4:
c7:87:fe:a8:22:99:8a:aa:2c:9b:c4:e0:84:d4:ce:
4a:19:b3:94:fe:2c:a1:55:38:4b:85:ee:51:43:6d:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A0:B3:0B:AE:35:25:51:35:FF:0D:D2:B1:41:EE:12:C9:B9:95:24
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:24:ea:ab:23:e6:43:a1:bb:fa:0a:0d:c2:6b:45:b1:c4:be:
82:c2:48:67:dc:84:35:31:c6:d1:0e:06:c4:d6:37:8d:22:6e:
6e:2c:2f:28:9a:67:a4:35:f0:09:41:fc:14:ed:35:27:e4:bb:
e9:f6:c7:2a:73:1f:6c:33:d9:62:8d:b4:ea:d5:cd:86:3c:c0:
c5:30:61:01:40:1e:5a:2c:01:f9:e5:fe:71:61:9a:dc:f8:43:
6d:71:aa:f7:15:b3:82:23:cb:e1:f9:9b:d3:ed:aa:51:e5:d1:
60:97:2b:4c:1d:ad:45:fd:2c:a0:97:fd:83:62:f8:28:db:61:
6f:1c:d8:6b:3f:2f:0d:3c:ff:13:2c:a4:42:ab:b2:58:ed:91:
d2:f4:e3:7c:d6:96:0f:f1:e1:07:c6:04:e4:b0:48:f0:d3:4c:
8f:bf:cf:f3:e5:ec:7b:4b:7e:5a:bd:96:95:5b:0c:13:39:ac:
04:53:9a:c9:80:63:17:38:ca:b4:4e:75:e8:cc:02:cd:1d:82:
13:0e:3b:75:9b:b2:3a:df:24:2a:a1:ac:a7:66:2a:81:c6:6c:
e7:28:57:fe:5f:12:5b:c7:63:0d:ea:39:b4:3c:e4:45:2d:a0:
df:7b:2e:04:56:11:a1:4e:e2:12:c7:d2:8d:00:79:09:53:80:
05:c2:c5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:20 2025 by rpki-client