Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
File: CEaS7DDzfffcteR600auvetx_DA.mft (raw, json)
Hash identifier: HG06TShFAOBc7Xo7H8b1ga3+1Svb2X9LfSO9ilPFK+I=
Subject key identifier: F6:ED:20:A4:10:89:11:CC:5E:08:60:85:4C:CC:34:D7:56:65:1F:E3
Authority key identifier: 08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
Certificate issuer: /CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Certificate serial: 0198D4E01711DBE98284D43DF1C1F8CC140C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 03:01:52 +0000
Manifest this update: Sat 23 Aug 2025 03:01:52 +0000
Manifest next update: Sun 24 Aug 2025 03:01:52 +0000
Files and hashes: 1: CEaS7DDzfffcteR600auvetx_DA.crl (hash: h2JNPW662cLgMka7Q8WdQ0do73gSCadL+e8A2WzbS4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:17:11:db:e9:82:84:d4:3d:f1:c1:f8:cc:14:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Validity
Not Before: Aug 23 03:01:52 2025 GMT
Not After : Aug 24 03:01:52 2025 GMT
Subject: CN=f6ed20a4108911cc5e0860854ccc34d756651fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:f9:26:4e:66:40:78:00:0e:67:98:19:b6:
a1:36:5f:d9:a5:a5:8e:b4:af:fa:1a:7a:ba:5e:a7:
a6:b2:e7:b1:05:46:74:62:ce:c1:34:2c:8c:68:ea:
ec:17:95:37:30:0a:38:b4:ec:35:70:75:46:a6:af:
8a:12:23:69:1b:6f:12:5f:93:cf:d0:33:fc:47:33:
89:a7:07:f9:64:82:41:43:43:54:56:c9:38:08:a8:
ff:c4:43:50:a1:c0:c7:88:27:e1:df:30:7a:7e:e1:
ae:e7:49:10:a1:29:e8:9f:eb:95:0f:12:93:94:b8:
09:25:be:e4:63:05:68:02:73:17:2b:90:12:e5:57:
5f:d8:77:e8:e7:ef:f9:f4:b7:9c:b2:bf:68:54:1d:
8a:e3:67:72:d1:ff:be:85:72:0b:fb:0d:0b:07:5d:
0f:8b:2b:2b:4b:15:47:f6:68:e9:87:c1:0c:48:de:
18:4e:44:be:f1:f5:02:db:f9:8a:96:49:0a:00:cd:
73:7d:7f:6d:57:1c:63:76:17:12:82:1d:fe:cf:21:
5a:0d:31:ab:4f:aa:9d:dc:89:6c:f5:65:8c:cb:18:
14:eb:97:1f:f6:6b:25:aa:c0:c7:5e:be:64:b3:67:
35:62:d3:a6:a5:d2:9a:3a:fc:0e:dd:fd:ef:1b:15:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:ED:20:A4:10:89:11:CC:5E:08:60:85:4C:CC:34:D7:56:65:1F:E3
X509v3 Authority Key Identifier:
keyid:08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:09:60:b9:94:22:e5:c3:3b:f0:d7:74:18:98:53:0a:35:e7:
97:b2:c4:6c:d5:16:1d:61:9d:1b:77:6e:98:82:a8:3b:c5:28:
81:3e:46:66:92:62:12:f9:25:6e:cf:05:3e:76:1c:21:10:d2:
2d:bd:8f:93:d1:e2:ee:45:1b:31:5e:1c:c9:2a:99:9d:1a:21:
62:4b:ec:be:57:58:f8:3b:31:c2:bf:f7:fd:33:a9:d0:60:30:
b0:6f:f0:fc:b0:03:1d:d5:9d:a3:c4:91:79:ac:56:66:74:1a:
10:9c:8c:0b:7b:d6:e2:2f:f8:8f:14:70:9d:e2:5b:f0:b5:e8:
9f:af:a4:39:c8:51:6d:b0:f3:de:43:3e:e2:1b:f9:a1:da:18:
3c:a2:2a:5e:40:5b:db:ab:ac:1a:9b:c0:70:71:5d:09:1b:76:
fe:87:6a:15:ad:b4:85:7e:35:60:08:9e:3e:5c:1c:4b:ed:ae:
3d:4e:bd:8d:5c:be:a9:f6:7a:fe:10:49:55:b9:ac:9c:f5:66:
a9:fa:fe:7a:23:0f:50:1c:87:c0:43:b6:99:8f:2d:b1:62:dc:
ef:2b:d3:1b:f6:71:7d:28:13:ce:16:c7:25:e4:fc:4d:10:73:
1e:05:04:57:dd:85:39:d5:ec:c8:f4:fd:2a:56:c3:6d:e4:99:
f9:3f:ac:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:34 2025 by rpki-client