Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier: VsqX8Xhx2hEJUnogC5W5MzeneaPZIRwl0ShlxGgr6Mk=
Subject key identifier: 0B:81:AA:4D:BF:52:9F:52:FA:26:38:9E:A4:4C:FE:2D:F0:13:76:9D
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 0196771F22360114E3BDA9BB418BAAD2B2BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number: 04AB
Signing time: Sun 27 Apr 2025 12:00:51 +0000
Manifest this update: Sun 27 Apr 2025 12:00:51 +0000
Manifest next update: Mon 28 Apr 2025 12:00:51 +0000
Files and hashes: 1: 3JlcQxD2NXWLaEj6J42YSdi1quE.roa (hash: ZFdShZLQiri1BeTMte27QBSxcmd4A78sb6jnkkO6l9s=)
2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: AE93YMYtIepFG19ymgukyrE+qIdYcfwdPBWifpFoFjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1f:22:36:01:14:e3:bd:a9:bb:41:8b:aa:d2:b2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Apr 27 12:00:51 2025 GMT
Not After : Apr 28 12:00:51 2025 GMT
Subject: CN=0b81aa4dbf529f52fa26389ea44cfe2df013769d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:d7:6f:77:39:3d:56:f3:db:41:47:23:78:
27:26:47:40:12:f5:67:7b:76:6a:cf:40:68:aa:66:
46:48:9f:73:61:ce:b8:44:61:c5:f0:76:c2:3e:62:
f9:c0:22:d7:05:f0:b3:a1:65:f5:4e:98:e1:70:44:
82:a4:83:4c:4b:7f:a2:19:88:20:87:e5:fb:68:97:
58:73:31:33:44:ea:0a:af:5a:1c:71:22:65:5c:a3:
f3:54:4f:cd:90:35:12:a3:64:9d:99:97:fc:5e:8e:
06:24:b0:34:f3:ab:39:ef:90:59:9f:69:ea:c9:95:
fb:88:bb:a2:ef:5b:e8:9a:19:af:3b:8f:9e:5c:65:
cd:63:ff:e7:10:67:32:41:9a:a2:be:08:d2:34:ab:
f3:3b:d3:c9:1c:5e:a9:2e:6b:40:6b:57:09:c5:3f:
62:08:e1:d2:f2:7f:f9:d0:4e:6a:26:05:c3:12:98:
d7:c1:ac:73:7a:c4:37:bb:17:8c:46:4a:cf:b6:17:
47:b0:c3:26:2e:c0:8b:83:68:9c:cf:fd:ad:13:50:
10:38:20:0b:f1:b1:94:da:13:bf:dc:56:77:68:25:
c7:fc:f9:d4:b3:c1:d7:a0:66:f0:b9:ae:47:ae:f8:
85:02:87:5b:ef:6a:b9:da:55:4a:31:e9:92:ea:f5:
02:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:81:AA:4D:BF:52:9F:52:FA:26:38:9E:A4:4C:FE:2D:F0:13:76:9D
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:36:6f:61:3b:e3:07:67:29:e0:95:dc:b0:4a:f8:85:bc:fe:
f5:cc:77:47:c8:17:5b:a2:3c:9d:23:33:c1:df:d0:01:b9:06:
a0:d4:39:2c:99:9c:ab:8b:16:5b:0a:45:cb:62:ea:bc:1e:61:
5b:f4:4a:3f:fe:89:8c:a9:5e:b8:cb:0a:10:87:04:7e:a5:77:
61:ca:86:12:8a:a5:a2:1b:82:79:a2:50:34:12:da:43:41:ec:
c1:56:df:3e:4a:f7:f2:86:40:c9:cb:bc:2f:21:6d:c2:ff:d1:
cc:ab:e8:68:4c:ff:9a:d5:81:fc:11:f1:f3:a5:b9:d8:5a:85:
2f:e4:e6:68:66:42:bd:ed:d5:99:52:c6:26:d7:71:a1:58:88:
a5:c5:f5:c4:28:3e:7c:2e:03:b0:1e:1a:ad:86:51:69:ad:d3:
81:bd:e5:83:9e:55:5a:69:57:e3:b4:55:85:55:36:bb:2f:4f:
6c:e0:35:fe:20:7d:37:3c:ef:37:e6:9b:1d:b5:0c:30:73:bf:
ba:b9:12:d6:5f:87:a9:93:05:78:d0:ba:de:eb:a3:23:ef:30:
37:61:ec:29:9e:63:bf:91:02:bd:8a:45:76:f7:a5:05:37:ac:
c3:2a:57:03:69:2e:de:ed:2d:e9:ec:85:fc:d9:fa:ca:8a:29:
21:17:29:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:57:13 2025 by rpki-client