Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
File: CEGOlpDQ-3Eavzh04cUApidpPAo.mft (raw, json)
Hash identifier: rgP8usKhXK0QeSZNeJPYW+/Cek/insoaCsUr6HgMDpM=
Subject key identifier: 7C:97:2C:42:A2:51:B8:BF:21:61:E5:B2:79:E2:E5:DA:37:2A:73:65
Authority key identifier: 08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
Certificate issuer: /CN=08418e9690d0fb711abf3874e1c500a627693c0a
Certificate serial: 0197B7B369EE13BAA70097751599DD3740C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
Manifest number: 0EC9
Signing time: Sat 28 Jun 2025 18:01:17 +0000
Manifest this update: Sat 28 Jun 2025 18:01:17 +0000
Manifest next update: Sun 29 Jun 2025 18:01:17 +0000
Files and hashes: 1: CEGOlpDQ-3Eavzh04cUApidpPAo.crl (hash: MLTnhIf6IWj2oVoalvsZ6Mm0fTl5G2wqkIVqsxPrqac=)
2: WXokG7cKriDfqWoaHraaATikOZM.roa (hash: l03IsJpcA1hZ2SxrPxTFFWqboVv9JIckV/GXuLQrkcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:69:ee:13:ba:a7:00:97:75:15:99:dd:37:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08418e9690d0fb711abf3874e1c500a627693c0a
Validity
Not Before: Jun 28 18:01:17 2025 GMT
Not After : Jun 29 18:01:17 2025 GMT
Subject: CN=7c972c42a251b8bf2161e5b279e2e5da372a7365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:82:50:1e:23:27:5a:de:19:09:6f:0e:0e:81:
6f:ad:15:3f:95:f7:aa:d8:c1:9f:a4:7e:26:aa:23:
ca:a0:f3:cd:49:99:9b:d3:9a:eb:7e:c9:26:2c:1d:
b7:a8:ea:71:56:49:d7:7c:f0:1a:18:79:dd:58:2a:
33:5d:c5:7b:86:75:76:f1:a3:1d:77:e8:b2:a3:d1:
6f:e0:9f:07:10:79:e4:de:5d:d1:69:d5:85:91:f3:
62:93:61:05:49:a7:be:61:4d:cc:b5:cb:8d:2d:9f:
6c:b7:15:c0:4a:a3:94:a3:b2:14:b3:56:40:a0:fb:
a4:75:f8:a4:92:51:82:6f:85:99:0d:2c:0e:be:b4:
14:b3:db:e8:88:d9:19:ee:80:d6:dd:99:09:76:ad:
40:d4:d9:d6:00:3c:8e:67:cc:d8:4d:37:79:de:ba:
bb:03:3d:a0:26:74:30:fa:35:ea:47:74:8a:cb:c5:
46:f5:b8:46:84:83:55:39:af:7e:0a:8d:cc:3d:39:
51:ca:ea:77:13:bd:ae:35:1a:6d:38:99:fe:57:b3:
e2:95:d8:18:0c:ae:63:04:8d:da:4d:70:54:e9:98:
f3:8c:4e:da:1b:f0:b0:89:3a:05:63:e7:dd:e2:64:
e4:d6:0c:dd:9f:ac:16:04:72:dd:7a:b9:e6:03:0a:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:97:2C:42:A2:51:B8:BF:21:61:E5:B2:79:E2:E5:DA:37:2A:73:65
X509v3 Authority Key Identifier:
keyid:08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:00:3c:c5:ee:1b:3a:cd:29:42:86:0f:52:f3:19:ec:a3:70:
d5:e3:a9:38:83:ed:d8:e1:a3:56:42:e9:0b:c5:f4:a3:7a:8b:
ad:02:76:f9:70:99:63:51:3e:bf:81:6e:95:7c:72:a0:58:09:
63:e1:1e:04:bb:92:45:d5:fc:e7:9a:07:7a:68:79:05:07:e8:
50:9c:fd:1c:7e:05:9c:c3:12:36:a7:1e:cd:49:dd:32:7d:a6:
af:35:10:e2:cc:1a:43:a0:5d:38:28:74:e3:43:5d:c0:f9:c2:
3d:9e:52:06:d1:94:3b:f9:1d:e3:65:47:a7:e0:6b:a0:bc:b1:
a3:c8:89:50:07:d9:bc:a7:6e:10:4f:6c:a1:75:52:c6:55:f9:
82:68:20:fd:56:31:30:80:2a:22:2e:f7:f4:eb:e5:fc:74:d3:
58:f1:d3:dc:80:1c:41:f0:d3:76:28:b8:9e:59:c2:bf:51:18:
db:40:af:b6:ec:55:99:13:1c:53:5c:a2:ce:0f:db:1d:4e:40:
0a:59:1c:ca:20:64:fb:35:dc:61:9e:af:fe:b3:65:6e:18:29:
2b:e3:da:96:7d:e1:5e:51:14:be:7f:01:b3:64:a7:6f:58:f8:
4d:f5:05:69:aa:30:b4:66:d9:b8:f5:b7:fd:ba:b9:e6:89:d4:
53:d8:2a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:24 2025 by rpki-client