Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier: e9aJP0NW6A2b3sToOyzfjtFerH9d6B5z/IeMO4P7xWM=
Subject key identifier: 86:3B:B6:6A:67:78:10:03:81:DB:84:82:46:8C:5D:8E:ED:68:62:3A
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 0197722D34AE07E9A815D305E562F12A62FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number: 052D
Signing time: Sun 15 Jun 2025 06:00:54 +0000
Manifest this update: Sun 15 Jun 2025 06:00:54 +0000
Manifest next update: Mon 16 Jun 2025 06:00:54 +0000
Files and hashes: 1: 3JlcQxD2NXWLaEj6J42YSdi1quE.roa (hash: ZFdShZLQiri1BeTMte27QBSxcmd4A78sb6jnkkO6l9s=)
2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: WwbelhobFjdsHO4oXj5o8I4q0wLmUC87JYErEZ5SHw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:34:ae:07:e9:a8:15:d3:05:e5:62:f1:2a:62:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Jun 15 06:00:54 2025 GMT
Not After : Jun 16 06:00:54 2025 GMT
Subject: CN=863bb66a6778100381db8482468c5d8eed68623a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e0:69:2e:ec:59:43:bd:90:49:84:91:42:f1:
82:05:01:ac:9c:1d:ad:78:a6:ed:b3:e5:62:17:de:
c9:70:c3:c9:b6:48:c7:f7:0d:b4:b4:5e:3f:d1:75:
b5:0d:cc:75:36:32:1c:b6:46:42:02:9d:0a:a9:7a:
7f:cc:74:c3:66:8b:0c:2f:dd:36:57:f9:82:10:03:
ec:f1:43:0b:2a:bd:97:e9:98:5e:f1:d6:01:a9:a2:
6e:65:9b:13:45:97:a5:9e:5e:6f:f9:2b:81:df:60:
fd:7e:fa:f1:98:9e:ad:ab:f0:6f:79:78:6f:fa:40:
83:34:35:8e:f6:16:47:1f:7e:41:c9:73:e0:fc:99:
25:3b:82:08:18:ab:5d:17:f4:15:66:10:51:e2:03:
30:d9:47:47:3f:0f:3f:01:58:9b:15:74:d2:bd:93:
cd:dc:34:bc:e1:66:e3:df:a3:31:7b:bf:45:79:c0:
78:c0:20:d2:14:f0:50:50:47:c7:b6:b4:8e:9b:af:
75:75:94:c7:dc:2a:90:b9:0f:e3:3a:fb:ec:0d:18:
82:80:e9:9c:78:26:00:c9:41:ea:a0:b4:69:0e:79:
2e:12:6d:c3:c2:ff:98:56:35:ee:bd:d7:63:1a:38:
49:60:3a:7c:0c:ba:22:3a:39:7f:46:59:42:c5:a4:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3B:B6:6A:67:78:10:03:81:DB:84:82:46:8C:5D:8E:ED:68:62:3A
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:27:b2:8d:87:6e:10:93:a1:f0:6f:f4:f5:0f:6d:9e:7f:7a:
df:02:41:f1:0d:95:9e:4a:21:ed:9c:ad:3e:20:49:ac:4d:2f:
14:7c:cf:e6:ee:8c:52:32:b9:f3:c9:be:b1:68:a5:26:29:0f:
fc:76:75:5c:cd:8f:00:86:19:e5:a0:39:fa:58:45:64:fe:20:
67:3d:19:19:f6:84:11:02:b3:3e:34:85:b0:57:cc:38:08:96:
b8:94:20:0e:79:5b:45:c5:71:23:f0:6e:43:e8:b3:86:e1:43:
89:6a:05:7a:d0:fb:1e:b1:76:96:f5:f6:a3:c8:fb:28:a4:cd:
f2:7a:95:26:33:b3:18:76:c9:3b:f4:c8:f0:21:0c:10:8b:9e:
7e:52:86:8b:69:3a:54:2c:8d:1d:f1:35:68:a8:5e:d2:4e:c1:
b2:b1:70:41:1b:b4:20:ae:33:31:80:b7:26:5e:ae:16:88:3a:
68:b0:94:d6:ec:70:13:9e:c3:f0:e1:0d:03:a0:b7:51:2d:2d:
9e:ef:80:25:7e:bc:ce:60:42:8b:68:b4:33:f6:9a:3e:1a:28:
bc:f0:d7:9e:c9:cf:f9:f9:5c:4e:9d:e2:93:d4:20:57:57:15:
a0:09:b6:4f:fc:64:08:93:62:2d:f4:5a:3e:ca:76:cd:74:bd:
3e:cb:e8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:22:39 2025 by rpki-client