Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: rmFN46CRwOQGWzWTB6CxTD8BHuiabLAwxJl8aAfWB1I=
Subject key identifier: 0A:12:8F:D1:98:87:CF:B9:24:BF:03:AE:7D:E6:89:F5:1E:4C:B6:F7
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 0198D5BB80B51BA83A8B29EC3A301F05A293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 0D56
Signing time: Sat 23 Aug 2025 07:01:31 +0000
Manifest this update: Sat 23 Aug 2025 07:01:31 +0000
Manifest next update: Sun 24 Aug 2025 07:01:31 +0000
Files and hashes: 1: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: 88wb+c+rRLObbweWQ/0CbRg9iWMsjKKttIqrSokglF0=)
2: dejiYWXpVyt-n4zSW5_bBe-6r0A.roa (hash: S+DqE/3RRz1xoArghf5VPCEdg1QAxwIn8VFz5upxaGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:80:b5:1b:a8:3a:8b:29:ec:3a:30:1f:05:a2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Aug 23 07:01:31 2025 GMT
Not After : Aug 24 07:01:31 2025 GMT
Subject: CN=0a128fd19887cfb924bf03ae7de689f51e4cb6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:d8:1e:5a:91:b8:f6:b9:1d:86:ba:66:1e:
bf:c6:2a:4b:b9:57:f2:45:3e:10:01:a9:76:25:df:
1a:a5:15:29:46:3e:de:05:05:e9:9d:b8:c2:b2:0a:
b0:e4:22:52:38:27:32:4e:4e:c0:a0:b0:42:ac:0b:
13:78:1a:f3:5f:f0:db:34:a2:d1:7a:cc:81:83:77:
dc:53:d8:6b:b2:ce:1a:17:64:59:4e:dc:00:1d:b8:
b7:16:29:58:0a:3c:c7:52:b8:6e:60:c3:63:a8:92:
1b:9f:13:c4:a0:2a:a4:99:0b:45:ff:cb:1b:21:5d:
9b:42:a7:c2:ce:ab:c0:ac:72:49:c3:2a:c7:8b:a6:
cf:91:c5:73:75:5f:0c:74:74:06:f5:8a:51:2d:5f:
23:26:03:8b:b0:f9:3a:80:9c:43:5c:2b:03:5f:7d:
82:08:d2:18:50:96:be:aa:79:68:0c:d7:9c:5e:0c:
49:b3:53:54:eb:bc:b4:e0:46:e9:9c:de:f9:ed:b5:
72:7c:f9:11:ad:44:6c:3b:c2:0e:8e:f6:61:24:a1:
0e:82:25:92:d0:62:9d:f0:08:e7:2c:c1:4b:e7:d0:
c3:ef:f6:6e:36:5b:db:20:ad:c1:1f:6c:b0:1e:20:
52:26:99:f9:11:3f:57:2b:12:8e:ef:9f:86:24:9c:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:12:8F:D1:98:87:CF:B9:24:BF:03:AE:7D:E6:89:F5:1E:4C:B6:F7
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f5:0e:76:4c:82:ff:50:12:7a:e3:9c:bd:60:9a:aa:6d:d3:
64:a0:e9:b3:a6:ec:9f:42:31:c4:06:c1:23:62:1e:3b:de:d9:
23:89:b0:c8:bf:93:1b:1b:70:e9:23:c3:63:44:a0:28:e2:d8:
ec:df:bf:1d:5a:bd:5e:ef:6e:0a:c5:da:32:3e:46:6c:3d:1d:
5d:fd:53:21:ac:81:ff:ff:34:59:3c:83:c6:42:43:dc:a1:73:
9e:b0:52:16:84:f0:ae:cd:40:7a:ec:d6:b3:6e:ce:8e:6c:82:
0c:3c:cf:9e:7e:b3:cc:b9:1e:29:35:fc:b7:c9:50:07:64:b0:
6f:2b:3e:3b:a9:8b:1d:66:ae:87:ab:63:6a:e1:2d:35:b6:c9:
ec:bd:a8:bc:65:c4:92:ab:28:1d:15:6b:5b:92:3d:8a:d3:f5:
51:f5:b1:a0:24:a7:9e:ad:57:df:e0:ac:5d:a6:8e:7c:cc:21:
ae:49:eb:15:b3:4a:88:fd:fb:6c:f7:77:fa:80:ba:a9:85:46:
1c:da:ae:db:db:ff:ec:4c:84:aa:6c:f6:c7:8e:5c:68:90:70:
8f:69:f7:42:5a:ab:2c:98:96:0a:69:4e:98:96:75:8d:94:0d:
17:3d:c1:3a:dd:14:1e:4d:e6:ed:8d:9a:84:2a:8a:18:e6:78:
c9:5e:b8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:52 2025 by rpki-client