Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
File: cegLwpz58rQKwwJOD3I126LVelQ.mft (raw, json)
Hash identifier: 21f5Ljc6EZ01UJmyeMtTOOcFMrUriwCk3VNpgf3Zd+A=
Subject key identifier: A2:A5:E9:10:29:19:90:DC:4A:8C:47:56:54:95:76:47:9B:5D:E2:19
Authority key identifier: 71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
Certificate issuer: /CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Certificate serial: 0198D70629E0E2D569773082F34DEBFCEC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
Manifest number: 0599
Signing time: Sat 23 Aug 2025 13:02:42 +0000
Manifest this update: Sat 23 Aug 2025 13:02:42 +0000
Manifest next update: Sun 24 Aug 2025 13:02:42 +0000
Files and hashes: 1: cegLwpz58rQKwwJOD3I126LVelQ.crl (hash: I7m462+okk6Uo2RIx/mIHwcdNtXxuSynsgm3hDAiAdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:29:e0:e2:d5:69:77:30:82:f3:4d:eb:fc:ec:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Validity
Not Before: Aug 23 13:02:42 2025 GMT
Not After : Aug 24 13:02:42 2025 GMT
Subject: CN=a2a5e910291990dc4a8c4756549576479b5de219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:47:9f:27:44:fb:2e:8f:6b:15:b2:35:98:
74:c5:34:33:35:ff:ec:35:03:e9:54:e2:84:89:d2:
f3:95:4b:bf:8a:de:fb:44:f5:11:ae:c5:45:87:f5:
62:94:85:5a:da:09:6c:1b:71:41:c3:58:31:b4:be:
1c:d9:eb:ec:35:79:2c:b0:6a:05:15:03:1f:91:c0:
96:a6:9a:5f:d3:42:f2:33:b3:77:42:ce:fe:68:8f:
07:92:b1:87:0e:ed:42:76:fe:94:1e:b9:62:88:10:
2b:20:7a:b7:41:8c:9e:e7:87:9a:f0:32:32:24:0d:
41:62:a4:66:c7:81:f5:3b:88:49:22:b0:9b:2f:bc:
8b:7a:bb:ac:4a:cd:e2:ae:7a:30:de:d1:29:69:34:
db:7f:95:67:41:b1:93:bc:26:6a:57:ab:9f:81:9d:
4d:b6:f7:0e:6e:3a:e1:43:56:95:1e:fe:0f:44:67:
4a:22:39:25:ad:41:92:d9:2e:bd:da:d5:f7:9e:2c:
6d:cd:ce:ba:dc:dc:cf:cf:5c:b2:10:ce:78:16:46:
24:24:42:1c:a9:31:f9:31:8f:be:bb:94:b2:a9:a9:
fc:42:29:2d:9a:2d:e5:82:90:99:e4:20:1d:e5:2f:
23:5f:48:dc:f3:56:f1:b7:f6:c2:d2:31:45:a6:eb:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A5:E9:10:29:19:90:DC:4A:8C:47:56:54:95:76:47:9B:5D:E2:19
X509v3 Authority Key Identifier:
keyid:71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e6:a7:24:15:6e:59:11:d4:9f:98:74:0f:cf:b8:b4:0f:27:
31:b3:2b:9e:8f:06:79:c0:55:e3:74:51:a8:17:fb:6e:ad:6a:
c8:14:60:54:62:6a:c9:ab:4f:45:b0:23:99:e4:02:f8:39:7d:
c7:28:95:95:ef:3a:29:81:e4:b9:7e:13:6a:2d:28:e9:c7:43:
07:8a:41:cf:d1:19:c4:f1:89:74:96:78:e0:44:45:b7:d3:97:
aa:8e:07:cb:6a:95:1d:5a:25:90:3a:50:47:9e:97:2c:90:0d:
ef:78:0b:25:a8:8c:c6:38:73:ee:13:03:82:a5:5f:49:da:2a:
97:b0:5e:8d:d7:ca:27:94:fc:ce:9f:90:f6:8e:2f:40:02:11:
32:50:da:39:4e:d1:49:77:36:f6:3f:2c:fa:ad:f2:da:17:88:
ee:b5:b6:9f:60:b0:d3:c9:d8:91:ca:95:81:d5:c3:38:0c:fb:
e1:17:d3:c4:c6:91:e6:53:48:a2:24:1d:16:74:8c:eb:21:14:
fd:74:85:3b:78:0c:22:14:2b:eb:fd:f0:13:ad:fa:d4:06:a4:
71:2f:f2:72:af:1c:84:aa:05:59:c0:9e:20:3b:f1:e1:c2:31:
a5:df:dc:d7:af:70:64:ea:13:47:05:95:d7:c6:fe:07:3f:9c:
33:13:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:08:02 2025 by rpki-client