Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: 167NW0Dj8X94q/bYnM/h74iKsiLTvpq0rGUr7lIichI=
Subject key identifier: 39:A5:45:75:40:29:33:B5:89:2C:4C:99:CD:B3:0A:78:DA:52:37:32
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 0196BAED55136AE8E59AFA53A42CA4825517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 0C3F
Signing time: Sat 10 May 2025 16:00:37 +0000
Manifest this update: Sat 10 May 2025 16:00:37 +0000
Manifest next update: Sun 11 May 2025 16:00:37 +0000
Files and hashes: 1: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: 612XkYKQ2cKJk0Hi+Zgh1s9NJiYTU4hcg/Q8bypUspM=)
2: dejiYWXpVyt-n4zSW5_bBe-6r0A.roa (hash: S+DqE/3RRz1xoArghf5VPCEdg1QAxwIn8VFz5upxaGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:55:13:6a:e8:e5:9a:fa:53:a4:2c:a4:82:55:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: May 10 16:00:37 2025 GMT
Not After : May 11 16:00:37 2025 GMT
Subject: CN=39a54575402933b5892c4c99cdb30a78da523732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:8b:86:88:5e:08:d0:2d:0d:34:59:84:a1:
9d:1b:15:db:35:a4:fb:17:c8:d3:d2:c6:50:64:72:
31:1f:18:7e:25:b6:e5:f0:c0:e4:c3:c1:53:b0:b8:
67:aa:0f:1c:52:0c:07:00:a3:8d:8e:ca:d5:ee:51:
28:4f:be:b2:b5:a3:c6:83:22:ee:82:74:52:8d:6f:
92:98:c9:9a:b1:d4:c0:14:3f:a5:29:e8:43:13:fd:
42:5b:77:48:00:5d:90:76:36:75:7d:70:cf:8e:d2:
4d:3f:b4:00:89:91:8a:7e:43:4a:0f:75:3e:90:b1:
ad:f8:6f:32:62:dc:a5:6b:2b:8b:93:c0:51:c8:95:
5c:94:5d:8b:7d:43:e1:d5:32:99:26:bd:20:3a:11:
99:78:9f:c8:bf:76:c1:c7:c9:ea:44:48:0e:7a:81:
83:d9:79:c2:56:d5:96:dd:11:27:55:0e:ad:ea:81:
e5:a9:ee:44:f1:30:1c:65:1d:0c:47:ab:01:bf:6d:
f2:78:7f:05:e5:53:69:d5:64:17:50:6e:72:2d:30:
e2:72:e8:5a:93:d9:cd:51:4c:6e:4e:71:1e:34:b9:
d6:b9:32:fd:2a:e1:f8:07:4d:35:c0:84:9f:ed:05:
c1:7c:a0:97:5c:5d:2f:7f:69:72:33:f6:41:b7:7e:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A5:45:75:40:29:33:B5:89:2C:4C:99:CD:B3:0A:78:DA:52:37:32
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ad:70:71:45:11:02:3b:8b:be:69:7b:8f:3e:eb:59:7d:58:
1b:7e:c1:86:cd:12:ed:b4:47:d5:93:8e:ce:37:a0:d2:d9:8d:
02:23:d4:50:10:da:d7:df:7b:70:0d:74:8c:db:7a:38:12:bc:
87:10:ba:57:fe:d6:48:df:d6:e7:14:00:24:4d:2e:da:ed:67:
29:17:29:2f:8d:8b:f7:25:b9:f8:13:2e:3f:36:18:7b:aa:10:
68:af:7b:ca:5a:6a:b2:94:e9:19:6d:1e:17:4b:94:b8:ad:da:
13:b2:39:1c:d6:a0:29:49:35:ad:57:5e:28:da:f8:73:3e:89:
e7:00:45:bb:57:2a:19:df:6c:70:a0:1b:7a:46:7e:c1:b5:fd:
89:f1:ab:a8:c9:92:71:4e:c1:1c:83:3d:88:c3:55:cc:56:cc:
35:66:33:8a:25:a6:d9:3e:9e:34:7a:c1:b7:36:37:6d:d3:a9:
ce:50:39:af:e1:cf:2c:6e:05:09:37:9a:b1:db:82:c0:bd:e6:
d2:71:75:c9:c7:12:5e:59:38:4f:04:f1:cf:e6:6b:fe:66:2d:
94:59:be:e9:a9:15:89:28:e8:81:8f:e7:7c:83:0d:8c:34:64:
d5:09:5e:e6:30:b5:ab:50:8a:bc:85:dd:b6:d2:4e:c3:1c:a2:
87:f2:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:30:39 2025 by rpki-client