Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: sTRVREFtS7yMw+XV30B3Xwh2C6o33h1wJhb+EeB3+8Q=
Subject key identifier: 11:97:BE:44:0C:20:B6:0B:AB:C5:6A:93:6B:52:25:6F:C0:30:64:70
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 0197C1921425C8C1CA2447C6010E91F15AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 0CC7
Signing time: Mon 30 Jun 2025 16:01:05 +0000
Manifest this update: Mon 30 Jun 2025 16:01:05 +0000
Manifest next update: Tue 01 Jul 2025 16:01:05 +0000
Files and hashes: 1: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: kSss1p5kVaOTqSxPDAKYiAhzZ57LxBYj1OlwXKkwliU=)
2: dejiYWXpVyt-n4zSW5_bBe-6r0A.roa (hash: S+DqE/3RRz1xoArghf5VPCEdg1QAxwIn8VFz5upxaGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:92:14:25:c8:c1:ca:24:47:c6:01:0e:91:f1:5a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Jun 30 16:01:05 2025 GMT
Not After : Jul 1 16:01:05 2025 GMT
Subject: CN=1197be440c20b60babc56a936b52256fc0306470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:55:db:f7:a3:d1:44:64:ed:f7:f8:5f:82:
a7:fc:dc:47:f5:fd:09:66:50:04:b7:38:61:fa:10:
37:b3:26:db:9f:e7:2c:ae:a3:ee:37:09:69:92:38:
4d:81:bb:d0:0d:01:fc:fa:c0:d4:d6:3d:e1:9a:38:
48:32:12:46:57:2a:79:5e:45:2f:68:1c:fe:7d:11:
ef:5e:17:da:6b:e7:f8:ea:0f:28:43:38:0a:15:88:
2a:d6:7b:8f:2b:f9:62:29:e7:b6:31:a7:56:ab:ae:
6a:14:88:a4:61:10:03:0d:68:ad:a0:31:20:1f:21:
6c:99:84:45:bf:dc:94:0a:d2:b2:72:36:90:03:33:
21:9f:cb:ef:9f:91:bf:19:04:12:ef:66:28:b5:7b:
5a:11:c3:f6:7f:d9:f5:65:e2:cb:2e:ae:11:89:8f:
aa:07:35:a7:a6:70:66:13:bb:65:0f:bb:a8:d0:dc:
c9:4b:16:40:8d:13:a7:33:1b:18:a7:33:93:ad:53:
56:45:76:83:59:0d:8b:95:1d:38:dc:ef:e5:7c:84:
a2:8f:bd:65:bb:e7:2d:95:c2:eb:e3:fd:37:4b:36:
28:ee:fd:91:38:a6:cb:bc:f7:2d:15:df:5c:a8:68:
4f:ef:79:dd:0e:0f:4d:ad:89:5a:49:e1:f9:c8:cd:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:97:BE:44:0C:20:B6:0B:AB:C5:6A:93:6B:52:25:6F:C0:30:64:70
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fb:1e:2a:ac:68:e1:47:d1:29:44:61:3c:97:3a:59:b3:f2:
5d:69:fd:ad:b8:d4:5d:31:b0:77:ae:a8:7d:55:bf:02:e1:f3:
d8:9c:b8:77:2f:46:4e:04:a4:3c:97:28:2b:54:d3:4e:04:59:
93:40:ec:77:c4:6e:f1:dd:f7:50:b0:99:ab:40:80:55:4a:1f:
5b:df:d7:d2:05:ee:b5:80:4d:43:e7:2a:8f:73:68:27:38:8a:
f2:8f:b6:39:30:f5:65:23:fd:bd:69:27:c9:39:78:32:06:e4:
51:25:0b:9e:b9:e3:f3:63:a9:b5:7b:c4:48:da:38:db:f6:dc:
30:c8:7b:2e:18:a7:6f:11:57:75:bb:1a:4c:98:f6:a4:ce:ba:
14:12:b1:8e:92:21:0f:1b:57:ee:d4:eb:de:7e:2d:37:d7:0b:
40:7f:a7:67:c6:10:ec:e8:4a:d1:98:3b:5f:ba:62:a6:51:ff:
81:bb:e9:ef:a5:92:40:81:e3:ef:15:bb:3f:12:fa:ca:6d:21:
ae:2b:63:88:f6:77:19:82:b7:f2:6f:cf:cb:20:be:f4:b3:e6:
f3:b8:12:b5:7f:e6:55:1e:b9:c0:0f:63:b7:f5:62:7d:27:f6:
08:e0:65:f4:7f:51:5b:64:7c:1e:39:b1:f9:86:f5:4e:53:5c:
6c:86:e1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:25:03 2025 by rpki-client