Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
File: cegLwpz58rQKwwJOD3I126LVelQ.mft (raw, json)
Hash identifier: nFPbV9AyjcJavqPNoNbBsiJFwnBIuFmXgjjrsNVW+DA=
Subject key identifier: 20:46:C0:D2:00:5D:F2:91:A6:F5:92:E8:EA:38:2D:BF:E1:28:AF:A1
Authority key identifier: 71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
Certificate issuer: /CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Certificate serial: 01984A09CA347CA2196726E09770AF9D94F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
Manifest number: 0550
Signing time: Sun 27 Jul 2025 04:00:12 +0000
Manifest this update: Sun 27 Jul 2025 04:00:12 +0000
Manifest next update: Mon 28 Jul 2025 04:00:12 +0000
Files and hashes: 1: cegLwpz58rQKwwJOD3I126LVelQ.crl (hash: J8Q4EA16g2a0zXX5xekiqmpAOIFjgfI5omi/RWJMJRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:ca:34:7c:a2:19:67:26:e0:97:70:af:9d:94:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Validity
Not Before: Jul 27 04:00:12 2025 GMT
Not After : Jul 28 04:00:12 2025 GMT
Subject: CN=2046c0d2005df291a6f592e8ea382dbfe128afa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:49:48:17:bc:ec:5b:1f:99:c7:e0:8c:2f:98:
1d:19:29:e3:53:b5:e5:e7:8e:40:f5:e5:ec:1b:81:
27:a2:17:92:a5:be:a2:3b:4d:27:3c:4b:bd:82:6c:
00:1b:2e:f6:cd:f6:ee:82:43:e9:ca:1e:5b:7a:66:
4d:e9:23:50:ae:4a:33:6c:9d:6b:f6:cc:5e:b0:b5:
e1:0c:74:8e:38:b9:a9:72:f5:4d:39:78:05:c3:ef:
c9:99:43:d6:2b:60:08:de:57:a0:b2:da:95:34:a4:
62:bf:eb:85:15:37:37:52:f7:ae:18:76:61:2e:fb:
21:ce:ec:76:ad:7c:cb:d8:1b:be:d6:88:be:91:da:
a5:b7:46:39:58:2e:8a:d7:26:6f:c9:fb:32:85:48:
fd:44:4b:f2:b5:49:24:c2:0f:25:50:09:1a:33:72:
1a:6d:17:75:8a:99:63:45:a1:fd:a6:80:dc:fe:a4:
12:97:4e:b3:a1:05:44:dd:21:83:ef:2f:25:58:f5:
f0:21:d9:7c:e6:dc:69:d8:66:8a:91:2d:03:c0:78:
60:a0:45:f3:53:d2:f1:7b:8b:b3:49:eb:9a:7c:6f:
69:6d:73:3c:5f:c6:37:8c:d9:5b:c2:5d:ed:92:13:
7b:d7:18:3b:80:07:c8:cd:92:84:e1:06:73:bf:44:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:46:C0:D2:00:5D:F2:91:A6:F5:92:E8:EA:38:2D:BF:E1:28:AF:A1
X509v3 Authority Key Identifier:
keyid:71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:37:d4:c3:e5:e3:ac:0b:8a:69:dc:bd:59:46:7a:63:4e:9a:
bd:03:41:fa:b6:58:31:93:b8:01:d7:f8:8d:d2:e4:f8:76:05:
f1:55:b0:b8:63:6d:da:9f:e1:87:d4:96:c5:45:03:c4:35:db:
0a:32:93:29:ad:b6:7c:cd:bb:b4:0e:5f:86:2e:93:c6:e2:82:
d1:8c:80:23:91:8b:8a:4e:df:55:ed:af:7e:03:3c:4f:82:92:
bb:38:a0:ab:31:32:73:e9:96:70:a7:8b:66:80:5a:8b:40:d9:
5d:ce:96:e4:85:95:6a:b7:97:b1:75:04:9e:f1:6b:43:e3:30:
5b:37:d9:49:3f:94:24:0f:e3:5b:55:ce:a0:42:7e:05:e0:9d:
ed:7b:7b:a7:6c:8e:51:cf:99:7e:cf:02:6d:f2:04:7f:ad:92:
47:38:70:9b:cc:05:c8:79:90:f9:41:7f:21:19:fc:0c:d8:25:
db:d5:5d:61:ee:15:20:6d:f8:ee:da:28:fb:21:5d:a9:4a:37:
1e:b7:e2:68:9c:da:d5:77:e2:62:e9:a7:80:d9:e3:47:bc:84:
52:77:ef:c3:ab:d9:83:eb:74:a0:c3:98:e2:de:d9:96:b0:93:
65:f3:96:96:ae:c0:9b:84:21:4d:a9:c6:fd:17:a9:c7:29:a3:
43:99:74:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:03:00 2025 by rpki-client