
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
File: CEaS7DDzfffcteR600auvetx_DA.mft (raw, json)
Hash identifier: wmuMj/0y3eQhS7pToNFwpjgGJNhXMu/+FTTtTdUix0Q=
Subject key identifier: 24:43:95:67:AA:19:B5:13:3D:63:C0:AE:28:5E:E5:3E:CD:98:1F:15
Authority key identifier: 08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
Certificate issuer: /CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Certificate serial: 0199221EB9E5FB0D58C46C9AB6412331193E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 03:01:02 +0000
Manifest this update: Sun 07 Sep 2025 03:01:02 +0000
Manifest next update: Mon 08 Sep 2025 03:01:02 +0000
Files and hashes: 1: CEaS7DDzfffcteR600auvetx_DA.crl (hash: rxb6fERuJYYgCyvWadcPc7ozzui39Ag/UjP23aqBXmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:b9:e5:fb:0d:58:c4:6c:9a:b6:41:23:31:19:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Validity
Not Before: Sep 7 03:01:02 2025 GMT
Not After : Sep 8 03:01:02 2025 GMT
Subject: CN=24439567aa19b5133d63c0ae285ee53ecd981f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:09:75:bf:10:bd:06:70:63:09:43:91:52:
04:c2:47:a2:35:68:2b:21:3d:ad:3a:fb:51:9f:2f:
4b:23:b1:88:be:74:aa:8e:5c:03:14:4d:9c:f4:a1:
6b:9e:c9:44:ee:a7:a7:24:bb:0d:99:15:d8:8a:2e:
d0:0c:dc:53:c3:fd:0e:9b:5d:c9:81:3b:01:ea:7b:
cd:9d:a5:b3:f0:9b:6a:69:63:1e:0c:67:02:09:b7:
bd:70:ca:81:dc:56:b8:2d:ac:f3:e1:1e:c1:1a:f0:
3c:7d:58:23:58:3a:97:30:f6:1d:a9:a9:c1:80:16:
f4:c0:a0:cd:a6:64:2f:2c:5e:ad:91:26:14:df:38:
a0:ca:89:dd:73:59:3d:80:5e:49:e1:0e:95:8f:d6:
83:66:80:a1:54:42:57:66:fb:93:47:a1:90:27:b9:
df:92:c0:b5:7d:88:64:9d:b0:02:f3:5c:97:df:4a:
f2:2c:0c:50:fc:24:a6:e7:64:4f:54:6e:f9:ba:c9:
16:8c:cf:71:8f:15:58:96:7c:06:f7:2e:e5:7e:d3:
c0:d2:37:a0:47:95:da:38:f7:e7:6c:2d:86:ac:46:
5f:a9:b8:df:b6:bf:e8:2d:17:db:23:a5:fd:1e:df:
df:3c:fb:65:62:89:33:9a:3c:fd:ea:5d:9c:a7:e3:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:43:95:67:AA:19:B5:13:3D:63:C0:AE:28:5E:E5:3E:CD:98:1F:15
X509v3 Authority Key Identifier:
keyid:08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4e:77:be:8c:e4:6e:2e:da:16:9d:de:8a:75:52:67:6f:d5:
e3:61:20:85:1e:19:c8:ad:e2:fc:27:4e:c2:1f:d8:a4:44:65:
a9:d8:6f:0a:2d:20:d6:19:d2:83:2d:7a:80:50:39:f0:3b:f1:
32:1c:f8:61:8c:c8:21:04:f8:87:c7:50:b0:56:34:bd:c0:c8:
42:b5:94:bf:56:b3:1c:4e:69:e0:35:c8:42:0a:6f:d9:b9:18:
a7:c6:ae:2e:43:47:ea:90:84:ff:80:4b:62:37:8f:a0:91:a0:
41:7c:d9:ea:b8:88:cd:8b:f9:55:46:91:36:41:4d:64:99:ca:
ed:74:c9:85:15:d5:2b:c5:6c:6b:9a:3c:a4:ed:e8:c0:b0:46:
10:5b:12:be:a6:3c:eb:61:b2:ad:c4:58:ec:3d:ed:5c:40:b6:
b4:37:d6:6f:5d:97:2a:7e:24:4a:54:28:9d:85:40:30:90:ca:
8a:7a:0c:74:e9:ed:56:8d:f2:74:1f:56:8c:9a:da:8c:23:b4:
01:a5:0d:94:94:09:9d:9e:97:2c:d4:00:c5:81:4f:40:e4:52:
6c:7d:de:6f:29:a0:99:b2:7b:fd:2f:5d:64:06:7b:60:99:ac:
42:84:5c:ab:b2:d8:ad:39:a9:e2:98:f4:9d:9e:63:cc:0a:3b:
05:98:f3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:09 2025 by rpki-client