Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier: MTVmzjuLJ5Fol5+ww/lhC0odJZwilodEbn8O25MEjiA=
Subject key identifier: 82:5D:95:F6:B2:9D:EB:AA:D2:D3:D5:FC:02:17:C1:FB:3C:77:01:71
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 0197B7B2F6C3C1C8073337D9D6C19095F2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number: 0551
Signing time: Sat 28 Jun 2025 18:00:48 +0000
Manifest this update: Sat 28 Jun 2025 18:00:48 +0000
Manifest next update: Sun 29 Jun 2025 18:00:48 +0000
Files and hashes: 1: 3JlcQxD2NXWLaEj6J42YSdi1quE.roa (hash: ZFdShZLQiri1BeTMte27QBSxcmd4A78sb6jnkkO6l9s=)
2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: 0Kv6vE4wghSJeZsG/91AZjn5aCXU+jKZLwX137egVO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f6:c3:c1:c8:07:33:37:d9:d6:c1:90:95:f2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Jun 28 18:00:48 2025 GMT
Not After : Jun 29 18:00:48 2025 GMT
Subject: CN=825d95f6b29debaad2d3d5fc0217c1fb3c770171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:b8:c2:82:48:17:15:31:2b:96:9b:5f:85:
64:12:8a:96:ee:89:fc:f9:21:b4:73:47:12:05:73:
73:2b:8f:ca:1d:4d:e4:7e:fe:80:8f:1d:c4:b2:bb:
3b:19:cd:7f:82:df:cd:bf:70:c9:cc:04:d6:da:25:
a4:f2:01:b3:79:e1:61:17:42:9b:f5:99:f2:4e:15:
32:2c:90:78:60:9d:ee:86:39:4a:17:7b:64:5c:e1:
56:7e:2c:0c:42:8e:2a:aa:dc:8d:e7:b8:fb:c4:2d:
4b:46:4e:94:31:47:0c:75:a8:7a:c0:6d:4c:d7:a2:
31:4d:8f:80:0f:a6:3f:0f:31:5c:93:3a:d8:86:e5:
53:cd:59:72:7c:f8:11:cb:96:df:f5:b7:70:41:e5:
0f:f4:4a:a6:e1:38:60:58:31:69:0e:30:2c:2c:ea:
53:84:2e:81:94:d0:0f:a7:35:a2:12:70:04:5e:48:
5f:d0:f1:fb:8e:33:be:56:7a:2c:8e:f3:64:58:4d:
e5:7f:59:f6:08:9f:0c:9f:3d:01:7c:cc:a5:28:6e:
02:1e:f5:a6:7e:f7:a3:34:35:ed:3b:63:42:38:3b:
bc:8a:5f:4f:a4:6b:18:c2:14:e2:8e:d1:e9:0f:c6:
45:09:d9:c0:7e:65:04:7f:88:fe:0d:83:68:95:7b:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5D:95:F6:B2:9D:EB:AA:D2:D3:D5:FC:02:17:C1:FB:3C:77:01:71
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:35:48:b8:77:9f:60:c0:41:75:94:cc:a0:fb:62:aa:ba:13:
2b:d1:5a:74:43:d6:36:e4:be:37:a2:0f:c7:20:5d:35:c4:d2:
1c:3a:c9:b2:e4:45:13:9b:0b:16:a1:db:7c:91:5d:1c:5f:ce:
8b:c5:29:a5:36:39:e5:08:ba:1f:93:2a:dd:37:7e:43:fc:9f:
ad:40:6c:56:d0:51:2a:b6:9a:90:2a:e8:4a:8c:99:7c:83:20:
b7:5e:1f:6a:0a:fa:4f:56:71:ff:ca:15:b3:24:f1:88:f6:9a:
0b:0c:17:23:5b:0b:78:05:b4:0c:88:6e:b8:ac:66:f5:2a:58:
00:0d:e6:60:8b:d0:18:52:62:aa:73:1d:02:20:26:00:94:58:
8b:a9:2a:df:68:c5:d7:35:c0:31:e6:a2:ce:63:cc:21:ff:e0:
20:b6:e9:cb:7d:42:e1:bd:27:42:22:54:32:ff:2f:e8:97:9f:
67:fd:86:d9:ac:50:36:15:5b:f1:41:34:25:73:54:ef:1d:13:
7b:b7:44:7d:fe:a9:a0:fa:92:9b:b4:e7:06:38:19:dd:95:3c:
59:ad:d5:cc:c0:dc:47:34:2c:7c:d8:d7:d4:56:b0:dd:e2:82:
22:19:2b:56:1f:83:dd:c6:d4:1f:6e:4c:6f:9e:57:a1:0f:0c:
98:43:40:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:27 2025 by rpki-client