
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier: 2l2YM854JXTCZL7Tb2mKNbM5mbiRDb/oKyiWzq8bxE0=
Subject key identifier: AD:C4:C9:19:8B:47:93:9A:CF:86:9C:EF:C0:BB:E5:3E:04:CD:D0:E4
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 0197477A0196E8DD8DDB37EF801210CA6CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number: 0A99
Signing time: Fri 06 Jun 2025 23:01:07 +0000
Manifest this update: Fri 06 Jun 2025 23:01:07 +0000
Manifest next update: Sat 07 Jun 2025 23:01:07 +0000
Files and hashes: 1: nd2mEoM182MlqnyU97QFBEBtYLc.roa (hash: H4CTJi+dex4a2tP/U9S7boExXOmFzvTZ0iE52ANC1z0=)
2: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: I1SMm5q3eWde+VixrrRtk94Z4B4DpCQiYCYjGjFvGr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:01:96:e8:dd:8d:db:37:ef:80:12:10:ca:6c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: Jun 6 23:01:07 2025 GMT
Not After : Jun 7 23:01:07 2025 GMT
Subject: CN=adc4c9198b47939acf869cefc0bbe53e04cdd0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:31:13:54:ad:76:04:3a:c5:19:3e:27:40:
b5:b4:51:d9:ec:86:32:58:84:6b:c6:56:78:e4:0e:
ee:2f:d5:16:0d:20:99:fb:79:7c:82:e2:f7:f5:26:
69:56:6c:ad:7f:8a:66:0f:fa:cc:e2:f5:8b:a8:07:
54:f6:05:86:f4:53:c4:c5:53:ed:aa:59:f0:03:ff:
8b:cf:7d:d9:d0:d6:01:02:fc:f1:af:e3:c6:b6:32:
14:73:84:e5:11:ff:bc:0d:a1:e4:25:00:04:96:5c:
2d:53:df:0f:50:c5:55:c0:a2:24:2a:06:bb:a1:07:
3e:15:57:82:5e:f0:1d:c8:75:b1:8c:64:90:dd:93:
c7:04:e1:c2:76:1e:d7:ef:87:84:bb:13:c2:bc:ac:
d3:b9:25:da:67:31:f4:f9:ce:53:5e:54:16:6a:ed:
d3:2b:e9:37:5d:0f:8f:85:17:95:6a:20:18:cd:e7:
13:02:55:eb:91:11:06:cf:ec:cc:50:58:f7:7c:47:
9b:f6:91:08:63:97:bb:4d:a5:15:d8:08:9e:42:8a:
ae:17:81:dd:58:d4:a8:c8:1c:9c:04:0f:1a:ef:09:
63:f1:0c:14:04:65:3e:47:ef:22:eb:6b:e1:95:7e:
95:1d:6b:dd:fd:e9:a9:aa:97:15:8e:ff:9e:ee:aa:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C4:C9:19:8B:47:93:9A:CF:86:9C:EF:C0:BB:E5:3E:04:CD:D0:E4
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a8:35:44:2c:83:21:14:83:f5:a1:88:c3:0d:b6:d3:d0:50:
fb:f2:99:36:44:2b:c5:6f:46:48:b9:49:53:4c:ed:3e:60:31:
da:4c:7d:87:fa:b8:4f:16:f5:b2:f5:d9:08:97:b5:dd:cc:93:
50:ab:7f:90:85:c5:50:40:df:8d:8e:0e:76:82:06:fb:5c:66:
10:b7:d9:79:fe:ff:47:4c:52:64:1d:3f:1e:49:fc:68:25:87:
eb:3d:c5:ec:34:5a:52:78:49:a9:d2:ab:d6:ac:fa:e2:51:79:
7e:10:3c:85:1a:86:fd:a9:57:37:f0:53:ee:79:9e:35:9c:82:
32:a4:0b:4a:47:5b:a0:7c:85:4f:d6:39:d7:b0:15:ee:c2:df:
fc:3d:85:d3:35:de:6e:8e:8d:f5:87:10:12:5a:3f:ac:ad:62:
71:88:d8:6b:68:bf:bd:0f:ef:3f:24:dd:82:16:c6:22:34:b8:
09:e5:89:f6:44:66:8e:5c:47:49:98:95:0c:6a:d5:50:1b:f6:
0c:22:fd:85:2f:c6:5d:da:4b:ed:2c:a8:cc:44:21:a8:a7:08:
f1:c4:a0:b5:4e:fe:34:f2:05:2f:cf:87:0f:a9:87:27:d8:2e:
9b:75:3f:86:5a:40:da:5f:f3:8d:53:4d:6c:ad:d2:11:ce:57:
c7:70:ee:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:05 2025 by rpki-client