Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier: xi0r+69eraVYad2Y709+gDtfCSkOKWuA9OR99jvAJVA=
Subject key identifier: 3F:80:3B:4C:A5:05:D5:61:B3:ED:EB:38:05:5C:EE:EE:F9:ED:78:5C
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 0196A9C30FAB8DC3763683EB48567BDA841F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number: 0672
Signing time: Wed 07 May 2025 08:00:55 +0000
Manifest this update: Wed 07 May 2025 08:00:55 +0000
Manifest next update: Thu 08 May 2025 08:00:55 +0000
Files and hashes: 1: 5OdHvHOcZkrao-9cj9p2twVtXj0.roa (hash: XE/cbPsbZGNTjgltCjh6PwbFsSQa/FeH5vMG4ogZQBU=)
2: BxevXOZBdFUOOljteOuO-Rxt-CY.roa (hash: 3iKh9PQRS6dYBM+vLpV5Vh4W7QUExMRDQ5j2EO0fnVo=)
3: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: i/0K+vsKbe6PqmUwuPCguOUX5AjW+phvRKfytUR0BHA=)
4: dxDHiWZSI0UaIHekmjGJ3sxW6wY.roa (hash: miwDVBoTIblNIC6j43ewfXiSRHSZo0go2veqU8bISQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:c3:0f:ab:8d:c3:76:36:83:eb:48:56:7b:da:84:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: May 7 08:00:55 2025 GMT
Not After : May 8 08:00:55 2025 GMT
Subject: CN=3f803b4ca505d561b3edeb38055ceeeef9ed785c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:f6:c3:6d:70:79:f8:5c:82:6c:9a:d0:20:
85:5b:3d:58:d6:2a:57:55:ff:3a:4c:06:c3:dd:df:
46:38:eb:dd:4e:03:9d:51:53:10:2c:d7:1a:e6:49:
c2:6d:d0:ca:bd:dc:42:4b:35:f3:db:56:13:ed:2b:
69:dd:06:9b:3f:94:15:2a:7d:6d:af:9f:9b:d7:3e:
0c:fc:c2:5d:46:b7:78:cf:55:00:8b:3c:d0:ba:26:
6e:c6:62:54:72:6b:cf:cd:65:91:ef:ea:8a:d8:d2:
ff:66:e6:f6:4b:85:b1:ae:90:3b:72:84:f9:1c:bf:
ff:51:50:9d:aa:6d:77:12:fd:1d:1c:08:af:0a:a7:
f9:d9:c6:b0:1f:77:60:32:8c:df:5e:82:91:fa:e9:
0a:85:7a:1c:4b:43:7c:9e:40:70:ea:d4:00:bd:b0:
8a:53:8e:ed:68:44:e3:23:dc:5e:2e:37:cd:8b:45:
92:a6:d7:74:db:32:3b:e7:86:44:e6:a6:19:80:6f:
24:91:2b:c7:38:06:17:6f:c7:49:6e:d4:4c:c6:e7:
e3:66:14:96:21:e2:f4:bf:bd:8b:d9:2a:25:73:1e:
ec:bc:72:d4:1f:ee:04:06:c7:e2:00:23:c1:4a:fd:
97:de:ff:57:5f:2e:df:cf:f6:90:76:19:f7:8c:d9:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:80:3B:4C:A5:05:D5:61:B3:ED:EB:38:05:5C:EE:EE:F9:ED:78:5C
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c7:0a:6d:5e:05:f5:c2:99:d5:c2:ac:fd:e6:4a:a1:f6:e0:
8b:e2:67:99:48:4b:70:8e:0a:5e:7b:5d:37:08:bf:04:00:0f:
8b:89:2f:64:11:0f:b4:70:ee:f0:9f:78:7a:af:7d:15:27:d1:
41:20:6f:3f:12:f9:9d:c4:21:ba:77:3d:8f:b9:d2:3c:71:03:
fc:2a:fd:5e:a7:3c:42:bc:20:56:4b:9f:e0:c4:32:e3:b4:1c:
4b:cd:98:18:9b:cd:62:11:4d:33:1b:93:97:e1:e0:e9:62:18:
cf:2c:4e:28:7b:23:0c:3b:a8:0b:c1:9c:67:0c:6c:67:c5:4b:
b2:ff:c8:7c:92:e0:33:cb:83:31:b3:61:2c:98:ec:84:dc:bb:
03:a8:61:b1:b4:14:0c:a4:42:e0:bf:ea:a4:5f:ae:40:88:c4:
60:7c:28:60:e8:c5:cf:24:f1:2b:12:52:0c:f5:29:1c:00:fd:
2f:10:5f:43:d3:b9:3e:54:a5:36:a2:be:12:93:15:b6:63:00:
e7:60:00:55:38:58:93:56:e6:04:13:3e:77:c3:20:84:d2:31:
af:77:42:6a:92:a8:e6:ea:7b:78:5b:44:4f:30:ff:8e:3d:4a:
34:f0:af:2d:07:2a:76:02:b5:79:54:99:75:e6:9c:ff:56:ae:
c8:04:29:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:46:23 2025 by rpki-client