Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
File: CEaS7DDzfffcteR600auvetx_DA.mft (raw, json)
Hash identifier: kx+MTKo1X49Pah6S42PXx2PGJCcUrAucni84eDqMbNQ=
Subject key identifier: EA:DF:D0:B5:AC:C1:9C:92:6B:AA:11:9B:36:CC:C1:69:17:89:49:80
Authority key identifier: 08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
Certificate issuer: /CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Certificate serial: 0197B70E66707EA92F6ABD5F8B4134E31520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 15:01:03 +0000
Manifest this update: Sat 28 Jun 2025 15:01:03 +0000
Manifest next update: Sun 29 Jun 2025 15:01:03 +0000
Files and hashes: 1: CEaS7DDzfffcteR600auvetx_DA.crl (hash: TYEj9Sxq7aZYWtyWTTq3rCmwNb9FtnbZvHTH3ZHGx8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:66:70:7e:a9:2f:6a:bd:5f:8b:41:34:e3:15:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Validity
Not Before: Jun 28 15:01:03 2025 GMT
Not After : Jun 29 15:01:03 2025 GMT
Subject: CN=eadfd0b5acc19c926baa119b36ccc16917894980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:07:40:50:66:8d:1d:52:1a:35:36:cd:f7:
ed:be:97:a5:c8:b5:37:80:73:0d:cf:4c:11:04:25:
df:ce:de:55:e2:e3:07:f8:80:27:4e:b4:03:e2:1b:
64:74:77:26:df:18:81:27:df:cc:49:ee:b8:a1:9a:
fb:73:d3:92:3f:12:d5:87:00:64:63:86:f2:2a:cb:
06:e0:b5:3e:18:d2:bc:8e:98:42:a5:7e:b2:c5:b8:
72:08:e9:b2:d4:b0:e8:8a:6e:98:72:99:cc:c9:1c:
e4:6d:5f:b4:3b:3a:ac:17:67:8a:d1:cf:88:8c:7c:
71:72:b5:54:f8:4f:59:6a:99:d5:42:cf:b5:b8:23:
17:c4:13:33:9a:84:19:d7:9d:3d:1c:b0:fd:05:1a:
bf:d6:9c:6a:c7:1e:d2:72:78:13:29:10:29:93:72:
30:ec:e5:25:f8:f9:fa:f4:ff:97:44:04:25:cd:25:
93:f9:1f:1d:21:c3:ec:47:c7:b7:39:3a:70:1d:4c:
3a:2a:d8:64:d4:6d:38:75:c6:44:52:94:5b:a9:3e:
68:5d:98:6e:b5:69:48:d1:1f:2a:0c:bd:d0:fb:62:
82:46:42:7e:78:1b:89:70:b2:d4:41:21:1d:f1:68:
19:75:7c:93:36:5c:e6:af:43:52:58:e9:00:fa:d3:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DF:D0:B5:AC:C1:9C:92:6B:AA:11:9B:36:CC:C1:69:17:89:49:80
X509v3 Authority Key Identifier:
keyid:08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:04:6b:28:d2:18:a1:8d:b4:89:39:fb:b9:a9:e6:f7:be:b0:
63:f9:94:1e:62:62:6e:df:99:03:75:4e:e9:d3:a5:92:0d:a7:
d5:2d:63:3d:36:c8:f5:0f:c0:b4:b2:9e:e2:99:5a:a7:61:01:
7b:a6:e6:1d:d1:42:21:83:7d:80:42:22:35:f5:af:34:95:df:
eb:69:5b:89:8d:8a:c9:98:79:5a:a4:f3:68:cb:91:7a:a5:f5:
7b:8e:7b:24:e1:2c:8f:76:d3:43:2b:1d:2f:52:eb:c6:b2:c1:
34:b4:94:75:f6:a8:0b:44:f5:81:10:17:d0:d0:6d:2a:97:de:
e6:97:2b:b7:7f:93:13:58:a4:b0:dc:f5:8f:4e:c7:88:83:06:
6f:ca:2c:6f:d5:63:5d:b6:d1:6c:d4:1a:90:c6:43:28:6a:73:
cb:2e:16:d8:7e:52:08:a6:cc:8b:e2:f1:5b:68:bb:f3:4f:ca:
3c:14:02:b7:c4:a1:1d:b6:1a:55:33:f8:28:20:79:7d:c7:3d:
16:43:05:d9:00:c6:60:d1:a8:84:59:28:73:c9:f6:80:41:dc:
46:6f:86:3f:e5:70:47:a6:52:90:0f:b9:30:bd:6a:07:9c:5b:
46:89:f5:58:7f:35:7a:88:ca:bc:38:da:a0:e5:2b:f2:8b:94:
4a:15:f8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:51 2025 by rpki-client