Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier: ulpeNJV8ILkFe9+38uS8/UuhsFgTN7CbQguGJwUuVrg=
Subject key identifier: FB:68:19:DC:FF:18:45:B8:7D:9A:2F:57:D1:AD:27:94:B4:4E:1A:D4
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 0198D583AEAA70946937313FE1611BDF7108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number: 05E5
Signing time: Sat 23 Aug 2025 06:00:33 +0000
Manifest this update: Sat 23 Aug 2025 06:00:33 +0000
Manifest next update: Sun 24 Aug 2025 06:00:33 +0000
Files and hashes: 1: 3JlcQxD2NXWLaEj6J42YSdi1quE.roa (hash: ZFdShZLQiri1BeTMte27QBSxcmd4A78sb6jnkkO6l9s=)
2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: EhoDNfpGF3IDEv67JQPQHHxMmpYNl+4Ty+920rlQoWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ae:aa:70:94:69:37:31:3f:e1:61:1b:df:71:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Aug 23 06:00:33 2025 GMT
Not After : Aug 24 06:00:33 2025 GMT
Subject: CN=fb6819dcff1845b87d9a2f57d1ad2794b44e1ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:c0:99:1b:4e:3a:15:f0:05:e8:1a:2e:36:
2d:9d:47:3a:cf:5a:09:3d:99:42:14:91:ee:fa:68:
3a:71:fb:af:8e:6e:3f:10:da:08:c1:cb:e5:2e:c2:
56:71:05:b0:50:1a:e9:f8:47:26:87:01:cb:d4:b6:
d0:aa:10:c2:6d:af:82:24:58:b6:92:b2:89:a5:41:
c5:af:76:ce:9d:49:65:f2:b0:06:72:b4:db:73:f5:
04:49:e4:b7:cb:d6:55:b6:97:5c:68:34:a1:7f:e3:
8b:ef:4f:6e:ac:f1:d5:1f:fd:70:4e:3a:8c:9b:70:
8b:22:ac:7f:6b:9d:2c:d1:f1:eb:f2:09:60:59:e8:
4e:09:17:9c:01:49:61:81:04:96:1c:dc:33:1f:30:
9a:17:a8:03:72:54:11:05:53:99:c5:aa:fb:41:72:
fd:24:ff:c9:b3:2a:a1:55:97:d9:d7:1f:03:ce:c4:
3f:5a:62:77:85:9b:13:ca:37:18:c9:b1:fa:b6:be:
ba:29:b7:3c:5b:bf:9c:66:33:82:ca:61:36:1d:25:
1d:3c:07:7b:b9:b2:02:a6:20:0d:d6:ea:8b:5e:2b:
9a:d2:cd:38:5c:c4:92:f8:91:31:4c:35:32:fb:86:
06:1f:4e:da:04:73:1d:da:c4:4c:aa:2b:80:15:af:
b2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:68:19:DC:FF:18:45:B8:7D:9A:2F:57:D1:AD:27:94:B4:4E:1A:D4
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:5b:9e:94:b1:43:78:d8:be:c0:28:d9:2e:a5:19:3d:3d:9f:
c5:e5:53:65:14:dd:51:f0:99:ca:f4:42:f8:d8:32:26:77:d7:
6f:48:9d:09:e0:6f:10:ed:c8:c1:78:6e:ae:ed:cf:aa:95:0b:
63:9c:8c:52:ec:95:55:28:31:53:c6:cb:40:48:87:29:f1:ac:
e2:5b:03:c5:52:c4:ee:ab:61:d5:62:d2:17:8f:c3:e2:87:00:
65:87:e0:53:87:42:1f:10:35:ff:c6:5c:30:55:f7:b3:f8:a4:
e9:03:e9:78:d0:6c:35:f1:0f:c4:02:36:e8:03:98:09:34:74:
86:85:42:2c:9c:12:66:6c:29:ca:68:06:48:c4:80:5c:ce:17:
66:aa:cc:03:ee:93:cc:b4:84:0e:6c:cd:97:6b:fa:3e:bf:5e:
a3:1b:d5:c2:a5:ae:df:10:a6:11:65:01:bc:33:36:00:6f:44:
f8:06:a4:5b:4e:32:9c:ed:75:62:0f:c2:ff:6d:5e:74:06:eb:
f4:45:f9:ef:27:09:58:0a:11:ff:3c:cf:4c:a6:67:57:16:b6:
46:f6:65:25:ae:99:77:28:f8:97:f2:63:3c:98:a6:16:8f:e2:
7c:cf:83:95:14:b8:9e:dc:b0:31:37:b1:79:f9:5d:2b:05:ef:
cb:51:19:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:41 2025 by rpki-client